[mgummelt]

Almost all of this is out of date. Did you try DC/OS a long time ago, maybe?

> Their "Docker support" simply means they use normal Mesos worker processes to shell out to the Docker CLI across a cluster.

This hasn't been true for quite some time now: http://mesos.apache.org/documentation/latest/container-image...

> hundreds of hacks around missing IP-per-container/network virtualization

DC/OS does have network virtualization and IP-per-container: https://dcos.io/docs/1.9/networking/virtual-networks/ip-per-...

Also, what's an unencrypted HTTPS header?

[irishasaurus]

Oh man there are decrypted HTTPS headers? I can stop using Wireshark then!

https://jimshaver.net/2015/02/11/decrypting-tls-browser-traf...

[wpietri]

Holy moly, that is a helpful link. I had been doing it the old-fashioned way that used the server key. It's so great that browsers added support for logging session keys.