[$] Implementing eBPF for Windows

Extended BPF (eBPF), the general-purposeexecution engine inside of the Linux kernel, has proved helpful for tracing andmonitoring the system, for processing network packets, or generally forextending the behavior of the kernel. So helpful, in fact, that developersworking on other operating systems have been watching it. Dave Thaler andPoorna Gaddehosur, on behalf of Microsoft, recentlypublished an implementation of eBPF for Windows. A Linux feature makingits way to Windows, in itself, deserves attention. Even more so when thatfeature has brought new degrees of programmability to the Linux kernel overthe last few years. This makes it especially interesting to look at what thenew project can do, and to ponder how the current ecosystem might evolve aseBPF begins its journey toward Windows.