microsoft / ebpf-for-windows

eBPF implementation that runs on top of Windows
MIT License
2.89k stars 225 forks source link

Add helper function : bpf_fib_lookup #525

Open saxena-anurag opened 3 years ago

saxena-anurag commented 3 years ago

This issue is to track adding support for the following helper functions:

shankarseal commented 3 years ago

what about l3/l4_csum_replace? Is csum_diff any useful without the replace functions?

dthaler commented 3 years ago

@qmonnet will help answer any questions necessary to implement in a platform-agnostic fashion.

dthaler commented 3 years ago

@shankarseal also observed that in Windows there are APIs at PASSIVE IRQL but this helper is needed at DISPATCH IRQL. DISPATCH lookups are not currently exposed outside the tcpip.sys driver, just done inside it.