I've installed SolusVM as a Master server that will host OpenVZ containers on a fresh install of CentOS 6.6
What i am now noticing is that if i traceroute one of my containers IP addresses i see the host node's IP address as the hop right before the containers IP.
Example:
6 39 45 49 1.2.3.4 -
7 38 39 39 1.1.1.1 hostnode.com <===== HostNode
8 38 38 38 2.2.2.2 container.com <===== OpenVZ Container
What i want to know is there any way i can stop the host node from appearing in traceroutes ?
I know i can set "net.ipv4.conf.icmp_echo_ignore_all = 1" in "/etc/sysctl.conf" but it is my understanding that this will only stop ping responses and not traceroutes.
I'm primarily concerned about an attacker being able to see and DDOS my Host Node IP which would cause all containers to go offline. My ISP will nullroute any IPs that gets attacked and while having a single containers IP null routed is not a huge deal i need to make sure that my host node does not get attacked to cause downtime on all containers.
My desired outcome would be either my host node not appearing in the traceroute at all or just timeout completely, i just need a point in the right direction.