diff --git a/tsnet/tsnet_test.go b/tsnet/tsnet_test.go
index f9342d7a7..c1df1be00 100644
--- a/tsnet/tsnet_test.go
+++ b/tsnet/tsnet_test.go
@@ -846,6 +846,8 @@ func TestFunnel(t *testing.T) {
 // after itself when closed. Specifically, changes made to the serve config
 // should be cleared.
 func TestFunnelClose(t *testing.T) {
+	tstest.Shard(t)
+
 	marshalServeConfig := func(t *testing.T, sc ipn.ServeConfigView) string {
 		t.Helper()
 		return string(must.Get(json.MarshalIndent(sc, "", "\t")))
@@ -942,6 +944,8 @@ func TestFunnelClose(t *testing.T) {
 }
 
 func TestListenService(t *testing.T) {
+	tstest.Shard(t)
+
 	// First test an error case which doesn't require all of the fancy setup.
 	t.Run("untagged_node_error", func(t *testing.T) {
 		ctx := t.Context()