Switch from ExAcquireRundownProtection to ExAcquireRundownProtectionCacheAware

microsoft / ebpf-for-windows

eBPF implementation that runs on top of Windows

MIT License

2.86k stars 221 forks source link

Switch from ExAcquireRundownProtection to ExAcquireRundownProtectionCacheAware #2064

Open Alan-Jowett opened 1 year ago

Alan-Jowett commented 1 year ago

Windows kernel exposes a cache aware / more scalable rundown protection API for rundown protection.

eBPF for Windows should switch to the cache aware version.

amitschendel commented 11 months ago

Can you assign it to me? @Alan-Jowett

Alan-Jowett commented 11 months ago

Happy to. Just be aware that this will probably require changes in https://github.com/microsoft/usersim/ as well now that we have moved the platform abstraction layer out of ebpf-for-window.s