ReleaseMicrosoftMicrosoftpublished Mar 25, 2026seen 5d

microsoft/ebpf-for-windows Release-v1.1.0

microsoft/ebpf-for-windows

Open original ↗

Captured source

source ↗
published Mar 25, 2026seen 5dcaptured 15hhttp 200method plain

Release-v1.1.0

Repository: microsoft/ebpf-for-windows

Tag: Release-v1.1.0

Published: 2026-03-25T00:53:02Z

Prerelease: yes

Release notes:

Highlights

This is the first stable release of eBPF for Windows following the v1.0.0 release candidates. The important changes include:

  • Custom Maps: eBPF extensions can now register and implement their own custom map types via custom map types via ebpf_base_map_provider_dispatch_table_t, enabling extension-specific map entry handling.
  • Synchronous Ring Buffer and Perf Event Array APIs: Implements libbpf-compatible synchronous APIs for both ring buffer (ring_buffer__poll, ring_buffer__consume) and perf event array (perf_buffer__poll, perf_buffer__consume) maps.
  • Accept and Bind Hook Hard/Soft Permit: Accept and bind hooks now support hard and soft permit verdicts (extending connect hook support from v1.0), giving control over whether subsequent hook programs/filters can override a permit decision.
  • Epoch Memory Improvements: Replaced InterlockedCompareExchange64 with ReadAcquire64 for published epoch reads, eliminating LOCK-prefix cache-line contention (4–43% benchmark improvement). Also fixed a per-CPU epoch skew bug and wrapped remaining async completion code paths in epoch logic.

What's Changed

  • updated list of maintainers. by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/4746
  • update WDK version to 10.0.26100.6584 by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/4752
  • update version to 1.1.0 and other miscellaneous changes. by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/4723
  • wont fix policy. by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/4753
  • fix bpf-conformance version path for onebranch by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4754
  • Exposing result helpers to be consumable by extensions by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4733
  • Optimize nested map operations by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4684
  • Update usersim submodule to latest by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4792
  • Add implementation for RtlUTF8StringToUnicodeString by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4793
  • Fix for #4647 - Bugcheck in eBPFCore by @kumarvin123 in https://github.com/microsoft/ebpf-for-windows/pull/4790
  • Add metadata file by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4798
  • Update procDump checksum by @LakshK98 in https://github.com/microsoft/ebpf-for-windows/pull/4836
  • Added KM test to test load/unload of sample drivers by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4830
  • Increase test timeout for stress tests. by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4771
  • Re-enable regression tests using v1.0.0-rc1 by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4838
  • Fix ensure-issue-linked workflow 403 error when commenting on PRs by @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/4762
  • Fixes: #4702 - The cilium_tests should be changed to work without the… by @kumarvin123 in https://github.com/microsoft/ebpf-for-windows/pull/4860
  • _ebpf_object_load_native: wait until service is deleted on error by @lmb in https://github.com/microsoft/ebpf-for-windows/pull/4785
  • Fix path quoting in Install-eBPFComponents and Uninstall-eBPFComponents by @lmb in https://github.com/microsoft/ebpf-for-windows/pull/4805
  • Updated build platform path by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4859
  • Fixed incorrect invocation of netsh during ebpf install by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4858
  • Extension Code Deduplication Doc by @LakshK98 in https://github.com/microsoft/ebpf-for-windows/pull/4806
  • Fix ETL collection for driver tests by @matthewige in https://github.com/microsoft/ebpf-for-windows/pull/4872
  • Hold program information provider rundown reference while using program information by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4877
  • Fix VM expiry issue by @matthewige in https://github.com/microsoft/ebpf-for-windows/pull/4871
  • Fixes #4706: Bring back XDP Mock provider and test XDP programs by @kumarvin123 in https://github.com/microsoft/ebpf-for-windows/pull/4878
  • Accept hook hard permit support by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4800
  • Mark load_all_sample_programs as mandatory by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4880
  • Let check-pr workflow inherit permissions by @dthaler in https://github.com/microsoft/ebpf-for-windows/pull/4848
  • bind hook hard/soft permit support by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4886
  • Add automatic issue creation on netperf workflow failure by @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/4903
  • Ensure that all comments are complete sentences as per guidelines by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4760
  • Pickup latest verifier by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4844
  • Add proposal for bpf_sock_ops_get_flow_id by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4769
  • Update submodules: pe-parse and kissfft by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4907
  • Extend api_tests to test all exported eBPF APIs with comprehensive validation by @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/4606
  • Add ErrorActionPreference to initialize_ebpf_repo.ps1 by @prince-melvin in https://github.com/microsoft/ebpf-for-windows/pull/4928
  • Fix links to CONTRIBUTING.md in markdown by @mtfriesen in https://github.com/microsoft/ebpf-for-windows/pull/4918
  • Publish proposal for connect authorization layer by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4767
  • Fix invalid 'permissions: inherit' syntax with explicit permissions in workflows by @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/4930
  • Refine issue prioritization criteria in Governance.md by @mingxr in https://github.com/microsoft/ebpf-for-windows/pull/4667
  • Skip updating lru hotlist for user mode map reads by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4893
  • Fix UAF in epoch work item: add epoch protection to map delete functions by…

Excerpt shown — open the source for the full document.

Notability

notability 3.0/10

Minor version release of eBPF for Windows, low traction