internal/

Package dataplane implements the per-node Rune data path (RUNE-041): per-VIP TCP/UDP userspace proxies, a kernel-side nftables reconciler (Linux only), an endpoint cache backed by the OrderedLog watch stream, and Prometheus metrics.

Package dns implements the per-node embedded DNS server (RUNE-063).

Package ingressctl reconciles the ingress route table from the service store and resolves upstream targets from the dataplane endpoint cache.

Package outbox is the agent's per-node buffer for logs and events destined for remote sinks (RuneSight, CloudWatch, Datadog).