[cheap]

I'm not one to write negative reviews of open source tech. Typically, everyone has skin in the game for one reason or the other, and diversity in tech is positively great.

But Mesosphere DC/OS is purely advertising and marketing driven.

Their "Docker support" simply means they use normal Mesos worker processes to shell out to the Docker CLI across a cluster. They tightly wrap Hashicorp Vault and label it their own solution. Marathon has terrible support for security and application deployments geared toward enterprise teams. Hell, deployments can write over each other's network volumes and setting IAM roles can be sniffed straight out of unencrypted HTTPS headers. Don't get me started with Minuteman, Mesos DNS, meshing IPTables rules, and the hundreds of hacks around missing IP-per-container/network virtualization that even Solaris has had for the past 20 years (Crossbow anyone?).

The only thing people want right now is AWS in private/hybrid cloud. All the big movers are getting off AWS. If not, they're either too small to matter or are positioning their "cloud partnership" as a buy-out to Ma'Amazon.

[mgummelt]

Almost all of this is out of date. Did you try DC/OS a long time ago, maybe?

> Their "Docker support" simply means they use normal Mesos worker processes to shell out to the Docker CLI across a cluster.

This hasn't been true for quite some time now: http://mesos.apache.org/documentation/latest/container-image...

> hundreds of hacks around missing IP-per-container/network virtualization

DC/OS does have network virtualization and IP-per-container: https://dcos.io/docs/1.9/networking/virtual-networks/ip-per-...

Also, what's an unencrypted HTTPS header?

[irishasaurus]

Oh man there are decrypted HTTPS headers? I can stop using Wireshark then!

https://jimshaver.net/2015/02/11/decrypting-tls-browser-traf...

[wpietri]

Holy moly, that is a helpful link. I had been doing it the old-fashioned way that used the server key. It's so great that browsers added support for logging session keys.

[sargun]

IP-per-container is a thing in DC/OS. I don't recommend using it. What's wrong with Minuteman? You can disable it if you want.

[gaius]

The only thing people want right now is AWS in private/hybrid cloud

So, Azure then. Is there really a mass migration underway?

[tmzt]

Maybe in the future, but right now there is no clear way to manage a collection of random on premise Windows VM's, which is what many enterprises have, with the full Azure toolset.