diff --git a/config/v1alpha1/types.go b/config/v1alpha1/types.go
index 133689e..690f2cc 100644
--- a/config/v1alpha1/types.go
+++ b/config/v1alpha1/types.go
@@ -93,6 +93,10 @@ type KubeProxyConntrackConfiguration struct {
 	// in CLOSE_WAIT state will remain in the conntrack
 	// table. (e.g. '60s'). Must be greater than 0 to set.
 	TCPCloseWaitTimeout *metav1.Duration `json:"tcpCloseWaitTimeout"`
+	// tcpBeLiberal, if true, kube-proxy will configure conntrack
+	// to run in liberal mode for TCP connections and packets with
+	// out-of-window sequence numbers won't be marked INVALID.
+	TCPBeLiberal bool `json:"tcpBeLiberal"`
 	// udpTimeout is how long an idle UDP conntrack entry in
 	// UNREPLIED state will remain in the conntrack table
 	// (e.g. '30s'). Must be greater than 0 to set.
diff --git a/go.mod b/go.mod
index 25ee7b4..5da71f3 100644
--- a/go.mod
+++ b/go.mod
@@ -44,8 +44,8 @@ require (
 )
 
 replace (
-	k8s.io/api => k8s.io/api v0.0.0-20231027172135-b5946e690808
+	k8s.io/api => k8s.io/api v0.0.0-20231031013930-a9aa0dc09108
 	k8s.io/apimachinery => k8s.io/apimachinery v0.0.0-20231027171410-92fa50ee03b2
-	k8s.io/client-go => k8s.io/client-go v0.0.0-20231027173027-30eba26adb82
+	k8s.io/client-go => k8s.io/client-go v0.0.0-20231031051614-477cb782cf02
 	k8s.io/component-base => k8s.io/component-base v0.0.0-20231027174419-7eefecff8918
 )