diff --git a/pkg/services/tree/cache.go b/pkg/services/tree/cache.go
index a74fdc5dd..d250f577a 100644
--- a/pkg/services/tree/cache.go
+++ b/pkg/services/tree/cache.go
@@ -9,15 +9,10 @@ import (
 	"time"
 
 	internalNet "git.frostfs.info/TrueCloudLab/frostfs-node/internal/net"
-	"git.frostfs.info/TrueCloudLab/frostfs-node/internal/qos"
 	"git.frostfs.info/TrueCloudLab/frostfs-node/pkg/network"
-	metrics "git.frostfs.info/TrueCloudLab/frostfs-observability/metrics/grpc"
-	tracing "git.frostfs.info/TrueCloudLab/frostfs-observability/tracing/grpc"
-	"git.frostfs.info/TrueCloudLab/frostfs-qos/tagging"
 	"github.com/hashicorp/golang-lru/v2/simplelru"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/connectivity"
-	"google.golang.org/grpc/credentials/insecure"
 )
 
 type clientCache struct {
@@ -95,29 +90,7 @@ func (c *clientCache) dialTreeService(ctx context.Context, netmapAddr string) (*
 		return nil, err
 	}
 
-	opts := []grpc.DialOption{
-		grpc.WithChainUnaryInterceptor(
-			qos.NewAdjustOutgoingIOTagUnaryClientInterceptor(),
-			metrics.NewUnaryClientInterceptor(),
-			tracing.NewUnaryClientInterceptor(),
-			tagging.NewUnaryClientInterceptor(),
-		),
-		grpc.WithChainStreamInterceptor(
-			qos.NewAdjustOutgoingIOTagStreamClientInterceptor(),
-			metrics.NewStreamClientInterceptor(),
-			tracing.NewStreamClientInterceptor(),
-			tagging.NewStreamClientInterceptor(),
-		),
-		grpc.WithContextDialer(c.ds.GrpcContextDialer()),
-		grpc.WithDefaultCallOptions(grpc.WaitForReady(true)),
-		grpc.WithDisableServiceConfig(),
-	}
-
-	if !netAddr.IsTLSEnabled() {
-		opts = append(opts, grpc.WithTransportCredentials(insecure.NewCredentials()))
-	}
-
-	cc, err := grpc.NewClient(netAddr.URIAddr(), opts...)
+	cc, err := createConnection(netAddr, grpc.WithContextDialer(c.ds.GrpcContextDialer()))
 	if err != nil {
 		return nil, err
 	}
diff --git a/pkg/services/tree/sync.go b/pkg/services/tree/sync.go
index 92ff97c1c..7107b2bad 100644
--- a/pkg/services/tree/sync.go
+++ b/pkg/services/tree/sync.go
@@ -339,8 +339,8 @@ func (s *Service) synchronizeTree(ctx context.Context, cid cid.ID, from uint64,
 	return from
 }
 
-func createConnection(a network.Address) (*grpc.ClientConn, error) {
-	return grpc.NewClient(a.URIAddr(),
+func createConnection(a network.Address, opts ...grpc.DialOption) (*grpc.ClientConn, error) {
+	defaultOpts := []grpc.DialOption{
 		grpc.WithChainUnaryInterceptor(
 			qos.NewAdjustOutgoingIOTagUnaryClientInterceptor(),
 			metrics.NewUnaryClientInterceptor(),
@@ -356,7 +356,9 @@ func createConnection(a network.Address) (*grpc.ClientConn, error) {
 		grpc.WithTransportCredentials(insecure.NewCredentials()),
 		grpc.WithDefaultCallOptions(grpc.WaitForReady(true)),
 		grpc.WithDisableServiceConfig(),
-	)
+	}
+
+	return grpc.NewClient(a.URIAddr(), append(defaultOpts, opts...)...)
 }
 
 // ErrAlreadySyncing is returned when a service synchronization has already