Get the latest tech news
Cilium eBPF-Go on Windows
Pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
eBPF for Windows has a large user-space component which ebpf-go calls into via dynamic runtime linking. Some interfaces such as Linux-specific link types are removed outright, but this is kept to a minimum since it is very cumbersome for users to deal with API that change based on platform. The testmain package has a small bit of instrumentation which enables tracing of the efW subsystem on demand.
Or read this on Hacker News
