Masquerade containers with dedicated host IP