microsoft/ebpf-for-windows Release-v1.1.0
microsoft/ebpf-for-windows
Captured source
source ↗published Mar 25, 2026seen 5dcaptured 15hhttp 200method plain
Release-v1.1.0
Repository: microsoft/ebpf-for-windows
Tag: Release-v1.1.0
Published: 2026-03-25T00:53:02Z
Prerelease: yes
Release notes:
Highlights
This is the first stable release of eBPF for Windows following the v1.0.0 release candidates. The important changes include:
- Custom Maps: eBPF extensions can now register and implement their own custom map types via custom map types via
ebpf_base_map_provider_dispatch_table_t, enabling extension-specific map entry handling. - Synchronous Ring Buffer and Perf Event Array APIs: Implements libbpf-compatible synchronous APIs for both ring buffer (
ring_buffer__poll,ring_buffer__consume) and perf event array (perf_buffer__poll,perf_buffer__consume) maps. - Accept and Bind Hook Hard/Soft Permit: Accept and bind hooks now support hard and soft permit verdicts (extending connect hook support from v1.0), giving control over whether subsequent hook programs/filters can override a permit decision.
- Epoch Memory Improvements: Replaced
InterlockedCompareExchange64withReadAcquire64for published epoch reads, eliminating LOCK-prefix cache-line contention (4–43% benchmark improvement). Also fixed a per-CPU epoch skew bug and wrapped remaining async completion code paths in epoch logic.
What's Changed
- updated list of maintainers. by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/4746
- update WDK version to 10.0.26100.6584 by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/4752
- update version to 1.1.0 and other miscellaneous changes. by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/4723
- wont fix policy. by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/4753
- fix bpf-conformance version path for onebranch by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4754
- Exposing result helpers to be consumable by extensions by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4733
- Optimize nested map operations by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4684
- Update usersim submodule to latest by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4792
- Add implementation for RtlUTF8StringToUnicodeString by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4793
- Fix for #4647 - Bugcheck in eBPFCore by @kumarvin123 in https://github.com/microsoft/ebpf-for-windows/pull/4790
- Add metadata file by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4798
- Update procDump checksum by @LakshK98 in https://github.com/microsoft/ebpf-for-windows/pull/4836
- Added KM test to test load/unload of sample drivers by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4830
- Increase test timeout for stress tests. by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/4771
- Re-enable regression tests using v1.0.0-rc1 by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4838
- Fix ensure-issue-linked workflow 403 error when commenting on PRs by @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/4762
- Fixes: #4702 - The cilium_tests should be changed to work without the… by @kumarvin123 in https://github.com/microsoft/ebpf-for-windows/pull/4860
- _ebpf_object_load_native: wait until service is deleted on error by @lmb in https://github.com/microsoft/ebpf-for-windows/pull/4785
- Fix path quoting in Install-eBPFComponents and Uninstall-eBPFComponents by @lmb in https://github.com/microsoft/ebpf-for-windows/pull/4805
- Updated build platform path by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4859
- Fixed incorrect invocation of netsh during ebpf install by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4858
- Extension Code Deduplication Doc by @LakshK98 in https://github.com/microsoft/ebpf-for-windows/pull/4806
- Fix ETL collection for driver tests by @matthewige in https://github.com/microsoft/ebpf-for-windows/pull/4872
- Hold program information provider rundown reference while using program information by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4877
- Fix VM expiry issue by @matthewige in https://github.com/microsoft/ebpf-for-windows/pull/4871
- Fixes #4706: Bring back XDP Mock provider and test XDP programs by @kumarvin123 in https://github.com/microsoft/ebpf-for-windows/pull/4878
- Accept hook hard permit support by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4800
- Mark load_all_sample_programs as mandatory by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/4880
- Let check-pr workflow inherit permissions by @dthaler in https://github.com/microsoft/ebpf-for-windows/pull/4848
- bind hook hard/soft permit support by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4886
- Add automatic issue creation on netperf workflow failure by @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/4903
- Ensure that all comments are complete sentences as per guidelines by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4760
- Pickup latest verifier by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4844
- Add proposal for bpf_sock_ops_get_flow_id by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4769
- Update submodules: pe-parse and kissfft by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4907
- Extend api_tests to test all exported eBPF APIs with comprehensive validation by @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/4606
- Add ErrorActionPreference to initialize_ebpf_repo.ps1 by @prince-melvin in https://github.com/microsoft/ebpf-for-windows/pull/4928
- Fix links to CONTRIBUTING.md in markdown by @mtfriesen in https://github.com/microsoft/ebpf-for-windows/pull/4918
- Publish proposal for connect authorization layer by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/4767
- Fix invalid 'permissions: inherit' syntax with explicit permissions in workflows by @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/4930
- Refine issue prioritization criteria in Governance.md by @mingxr in https://github.com/microsoft/ebpf-for-windows/pull/4667
- Skip updating lru hotlist for user mode map reads by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/4893
- Fix UAF in epoch work item: add epoch protection to map delete functions by…
Excerpt shown — open the source for the full document.
Notability
notability 3.0/10Minor version release of eBPF for Windows, low traction