microsoft / microsoft/ebpf-for-windows
eBPF for Windows should support namespace isolation
- Dominant language
- C
- Stars
- 3.6k
- Forks
- 311
- Avg merge
- 6d 10h
- Merged PRs (30d)
- 21
Description
BPF objects are by default system-wide entities that can be opened via several libbpf APIs (meaning the caller receives an fd to the object). While this is useful for the general case, there are some scenarios where BPF applications need to be able to isolate themselves from other BPF applications to ensure that their state remains consistent.
To achieve this a BPF application can switch to a designated namespace. Namespaces are identified by a GUID, with the default namespace having the zero GUID (all fields in the GUID are zero). All libbpf APIs that return fds are relative to the namespace that the application has specified.
Contributor guide
Assessment
This issue has not been assessed yet.