The Cross-Platform Future of eBPF
summary
eBPF is already moving beyond Linux: Microsoft ships eBPF for Windows with a userland loader, an ebpf shim that talks to stable kernel APIs, and the verifier/JIT running in a protected address space (secure VM or SGX) instead of the kernel. Tooling like libbpf and bpftool remains tightly coupled to Linux and needs refactoring. Multiple independent implementations exist for every building block (compiler, verifier, JIT, execution context), creating heterogeneity, test gaps, and a push for common tests and coordination via the eBPF Foundation.
AI-written summary · about
chapters (11)
- 0:00Intro
- 1:05True or False?
- 1:49eBPF runtime platforms
- 5:52Cross-platform vision
- 8:01Usability vision
- 8:54Good building block attributes
- 13:19Architectural components
- 14:19Linux
- 16:54ebpf-for-windows
- 18:24Challenges & Opportunities
- 23:04Key Takeaways
related talks
31meBPF 101
28mDeveloping Modern eBPF Applications
20mGentle Introduction to EBPF
48mInto the hive of eBPF!
35mAn Introduction to eBPF - Superpowers for Networking, Observability & Security
16mWhy Everyone Should Care About eBPF
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
34mBeyond the Hype: Cloud Native eBPF