[$] Implementing eBPF for Windows

Extended BPF (eBPF), the general-purpose
execution
engine inside of the Linux kernel, has proved helpful for tracing and
monitoring the system, for processing network packets, or generally for
extending the behavior of the kernel. So helpful, in fact, that developers
working on other operating systems have been watching it. Dave Thaler and
Poorna Gaddehosur, on behalf of Microsoft, recently
published an implementation of eBPF for Windows. A Linux feature making
its way to Windows, in itself, deserves attention. Even more so when that
feature has brought new degrees of programmability to the Linux kernel over
the last few years. This makes it especially interesting to look at what the
new project can do, and to ponder how the current ecosystem might evolve as
eBPF begins its journey toward Windows.