Work out production signing pipeline

[zdandoh]

I've been tinkering with this project over the last few days, and think the current functionality would be an awesome fit for a near-term project in my organization. This project is clearly still under heavy development, but it's mentioned in the Getting Started guide that there will be production signed releases. I was wondering if there are any plans for a first release or if you could provide any indication of how production-ready the project is. Thanks!

[Alan-Jowett]

Thank you for the feedback. Would it be possible to share out what your scenario is? What hook types are you hoping to use and what helper functions? This information will definitely help ensure guide the project in the right direction.

[zdandoh]

So far I've been using the xdp hook to do some packet inspection/dropping. I'd like to also use the bpfmap* helpers to forward specific packets to a userspace process for further analysis/logging, which then helps make drop decisions for subsequent packets. The feature requested here: https://github.com/microsoft/ebpf-for-windows/issues/214 Would also be highly valuable.

[dthaler]

Production signing is blocked on security hardening as tracked by various other issues with the "security" label.

[poornagmsft]

Filed issue 278 to track the helper for copying packet contents into a map.

[dthaler]

Per meeting discussion, will create a "security" project that includes any issues that are considered blockers for production signing of the ebpf drivers. @dthaler to create the project :)

[dahavey]

Project board: https://github.com/orgs/microsoft/projects/212