Not commenting on that specific plan, but KB 462759 describes how set cluster-wide sysctls in OneFS.  -- Peter 
What does it take to change the default IP TTL?  e.g.  node-1# sysctl net.inet.ip.ttl net.inet.ip.ttl: 64 node-1#   I believe this involves adding the following to /etc/sysctl.conf net.inet.ip.ttl=10  What we're trying to do is to apply "hop sphere hardening", i.e. to harden against the (rare) situation in which a OneFS cluster is compromised by a malicious party.  If the cluster emits IP frames with a low TTL, then it cannot be used as a DoS platform, nor can data be copied off it to a distant location.  ?  --sk
changing IP TTL