microsoft / microsoft/ebpf-for-windows

eBPF for Windows should support namespace isolation

Open
#4,426 3 comments 0 reactions 1 assignee Claimed by @Alan-Jowett View on GitHub
enhancement P2 triaged
Dominant language
C
Stars
3.6k
Forks
311
Avg merge
6d 10h
Merged PRs (30d)
21

Description

BPF objects are by default system-wide entities that can be opened via several libbpf APIs (meaning the caller receives an fd to the object). While this is useful for the general case, there are some scenarios where BPF applications need to be able to isolate themselves from other BPF applications to ensure that their state remains consistent.

To achieve this a BPF application can switch to a designated namespace. Namespaces are identified by a GUID, with the default namespace having the zero GUID (all fields in the GUID are zero). All libbpf APIs that return fds are relative to the namespace that the application has specified.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.