Calling OPA from eBPF, Through WASM, in the Kernel

[hpvd]

Just stumbled across this and found it pretty interesting as input for tracees architecture...

Calling OPA from eBPF, Through WASM, in the Kernel? You've Gone Mad! - Nandor Kracser, Cisco:
eBPF runs in Linux kernel space, and there were already some experiments to run WASM there as well, but why not use both there to help each other? eBPF is a trusted and sandboxed environment, WASM promises the same (we will see!), what can go wrong? In this presentation, Nandor will show how they ported an existing WASM virtual machine into kernel space, found out they can run OPA inside it, then exposed the whole thing to call it from eBPF.
https://www.youtube.com/watch?v=JSKNch6piyY

https://github.com/cisco-open/wasm-kernel-module

What do you think?

[hpvd]

just a screen as quick appetizer:
(source: video mentioned above)

[hpvd]

just noticed there is also the discussion area active for this repo. So this issue could probably be moved there...