diff --git a/ipn/ipnlocal/local.go b/ipn/ipnlocal/local.go
index 47a892c11..500c40bd0 100644
--- a/ipn/ipnlocal/local.go
+++ b/ipn/ipnlocal/local.go
@@ -3615,7 +3615,9 @@ func (b *LocalBackend) authReconfig() {
 	}
 
 	oneCGNATRoute := shouldUseOneCGNATRoute(b.logf, b.sys.ControlKnobs(), version.OS())
+	runtime.GC()
 	rcfg := b.routerConfig(cfg, prefs, oneCGNATRoute)
+	runtime.GC()
 
 	err = b.e.Reconfig(cfg, rcfg, dcfg)
 	if err == wgengine.ErrNoChanges {