eBPF-Go on Windows: A Developer's Guide

2025-03-27

This document details running the eBPF-Go library on Windows. Because eBPF on Windows is not yet stable, the library supports three modes: interpreter, JIT, and compilation to a native Windows driver. It explains differences from Linux, handling platform-specific ELF files, the exported API, development setup (using a Windows VM and build scripts), using pre-built binaries, and debugging and interpreting error codes. Debugging includes using WinDbg and interpreting the trace log. Error handling involves understanding Windows system error codes, RPC errors, ebpf_result_t, and Unix-style errno.

Read more
Development