Shulou(Shulou.com)06/01 Report--

This article to share with you is about whether Microsoft will introduce Linux tools eBPF into Windows, Xiaobian feel quite practical, so share with you to learn, I hope you can gain something after reading this article, not much to say, follow Xiaobian to see it.

Microsoft has launched a new project to bring the Linux kernel tool eBPF (Extended Berkeley Package Filter) to Windows. The company insists that the move to make the technology work in Windows does not represent the creation of an eBPF fork. Instead, it will use existing projects, including the IOVisor uBPF project and PREVAIL validator, to run eBPF programs and APIs on its own operating system-specifically Windows 10 and Windows Server 2016 or above.

It's still very early days for eBPF on Windows because Microsoft is just starting the project. As a result, it is difficult to know the pace of development and no official timetable has been announced. On the project's GitHub page, Microsoft says its goal is to "create source code compatibility for code that uses common hooks and accessibility tools across operating system ecosystems."

Because it can run sandboxed programs inside the Linux kernel without changing kernel source code or loading kernel modules, this technology is perfect for many security applications.

eBPF is a well-known technology that provides programmability and agility, especially for extending the operating system kernel for use cases such as DoS protection and observability. This project is a work in progress that allows existing eBPF toolchains and APIs familiar in the Linux ecosystem to be used on top of Windows. That is, this project takes the existing eBPF project as a submodule and adds a layer in between to make it run on top of Windows.

In its FAQ on the technology, the company states that "eBPF programs work fine in interpreted mode when HVCI is enabled, but not when JIT compilation is used."

The above is whether Microsoft will introduce Linux tool eBPF into Windows, Xiaobian believes that some of the knowledge points may be what we see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.