The administration topics help you set up, administer, and manage your DC/OS cluster.

Installing and Upgrading DC/OS

…Read More

Identity and Access Management


Managing access to services is a basic requirement in any enterprise-grade setup. DC/OS provides you with flexible user identity management combined with fine-grained access control. The overall approach to user identity management and access control in DC/OS looks as follows:…Read More

Secrets (Enterprise Only)


Use the DC/OS Enterprise Secret Store to secure sensitive information like private keys, API tokens, and database passwords. You can make these values available to authorized services launched by Marathon under environment variables.…Read More


This page provides instructions for upgrading a DC/OS cluster from version 1.7 to 1.8. If this upgrade is performed on a supported OS with all prerequisites fulfilled, this upgrade should preserve the state of running tasks on the cluster. This document reuses portions of the Advanced DC/OS Installation Guide.…Read More

Finding a Public Agent IP

After you have installed DC/OS with a public agent node declared, you can navigate to the public IP address of your public agent node.…Read More

Accessing the Cluster

You can access your DC/OS cluster via SSH or by using DC/OS Tunnel from the CLI to set up a SOCKS proxy, an HTTP proxy, or a VPN.…Read More


DC/OS cluster nodes generate logs that contain diagnostic and status information for DC/OS core components and DC/OS services.…Read More


Monitoring the health of all the pieces that make up DC/OS is vital to datacenter operators and for troubleshooting hard-to-diagnose bugs. You can monitor the health of your cluster components from the DC/OS UI component health page. The component health page displays information from the system health API, which monitors the core DC/OS components.…Read More

Securing communication with TLS

…Read More

Securing Your Cluster

This topic discusses the security features in DC/OS and best practices for deploying DC/OS securely.…Read More


DC/OS applications lose their state when they terminate and are relaunched. In some contexts, for instance, if your application uses MySQL, or if you are using a stateful service like Kafka or Cassandra, you’ll want your application to preserve its state. Configure Mesos mount disk resources to create local storage that allows users to create tasks that can be restarted without data loss. Otherwise, your users can create applications that use external storage. Learn how to create stateful applications.…Read More

Managing AWS

The DC/OS AWS CloudFormation template is optimized to run DC/OS, but you might want to change the number of agent nodes based on your needs.…Read More

Virtual Networks

The DC/OS virtual network feature is an out-of-the-box virtual networking solution that provides an IP-per-container for Mesos and Docker containers alike. The DC/OS virtual network uses CNI (Container Network Interface) for the Mesos Containerizer and Docker libnetwork for the Docker Containerizer.…Read More

Release Notes

The release notes provide a list of useful topics and links for DC/OS.…Read More

Frequently Asked Questions

We recommend starting with a fresh cluster to ensure all defaults are set to expected values. This prevents unexpected conditions related to mismatched versions and configurations.…Read More