Microsoft Bringing eBPF Support To Windows

Microsoft has been working to add eBPF support to Windows in allowing user-mode services and daemons rather than just being limited to the kernel context. The "ebpf-for-windows" project allows the use of the eBPF toolchains and APIs atop Windows. The eBPF For Windows projects allows kernel-mode execution or operating as a user-mode protected service.
Microsoft doesn't call this a fork of eBPF. Those wanting to learn more about Microsoft bringing eBPF to Windows can see this blog post. The eBPF Windows code is being hosted on GitHub.
44 Comments