Module dataplane 

Dataplane bounded context: the request-serving path.

Assembles the reverse-proxy core (proxy), pooled upstream clients (upstream, with the RFC 8305 happy-eyeballs dial of DW-030), per-upstream load balancing (balance), active health probing (active — it drives the upstream registry’s balancer trackers, which is dataplane lifecycle), DNS-based dynamic upstream discovery (discovery — DW-042, background tasks that resolve and watch DNS records, updating the endpoint set live), config convergence (convergence — DW-054, ent feature only, background task that polls a shared backend so instances converge to the highest generation and drift is reported), the protocol hardening applied to every serving surface (hardening, plus the route-scoped request limits of DW-027), the PROXY protocol acceptance of DW-030 (proxy_proto), the route-scoped response edge policies of DW-027 (cors, compression), the API versioning aids of DW-048 (versioning), the request/response transforms and security-header injection of DW-028 (transforms), and the local response cache of DW-037 (response_cache, behind the extensions::cache::CacheStore seam), and the AI proxy action of DW-075 (ai_proxy, which drives the ai domain’s adapters over the provider’s upstream). This is the top of the core dependency graph: it may depend on every other domain; nothing depends on it.

Modules

active

Active health checks (DW-013, feature analysis 4.5).

ai_proxy

The AI proxy action (DW-075): the dataplane half of the provider-adapter pack — extended by DW-076 with routing and failover.

anomaly

Lightweight statistical anomaly scoring (DW-090).

balance

Per-upstream load balancing (DW-011, feature analysis 4.3).

canary

Auto-canary analysis (DW-091): metrics-driven promotion/rollback of canary split weights.

compression

Route-scoped response compression (DW-027, feature analysis 4.13).

cors

Route-scoped CORS (DW-027, feature analysis 4.14).

discovery

DNS-based dynamic upstream discovery (DW-042, feature analysis 4.4).

graphql

GraphQL awareness (DW-099): query depth/complexity limits and persisted-query enforcement for routes that front a GraphQL server.

grpc_web

gRPC-Web framing translation and JSON-to-gRPC transcoding (DW-101).

hardening

Protocol hardening knobs (DW-023, feature analysis 4.20).

l4

L4 TCP/UDP proxying with SNI routing reuse (DW-103, DP-01 / #234: UDP datagram forwarding).

nano_service

WASM route handlers (nano-services) – DW-106.

plugin_dispatch

Request-path plugin dispatch (DW-157, epic #274).

proxy

Reverse-proxy dataplane (DW-009, feature analysis sections 4.1 and 9.2).

proxy_proto

PROXY protocol acceptance, v1 and v2 (DW-030, feature analysis 4.20).

replay

Replay time-travel debugging (DW-102): a PURE decision replayer.

response_cache

Local response cache engine (DW-037, feature analysis 5-Protocol “Response caching”).

split

Service-level traffic splitting (DW-040, feature analysis section 5 “Traffic”): canary releases, blue-green switches, and the sticky cookie that pins a session through them.

transforms

Request/response transforms and security-header injection (DW-028, feature analysis 4.12 + the 5-Security header-injection row).

translation

Protocol translation framework (DW-100).

translation_graphql

REST <-> GraphQL translation (DW-100).

translation_soap

SOAP/XML protocol translation (DW-100).

upstream

Pooled upstream clients (DW-008, feature analysis 4.1).

upstream_h3

HTTP/3 (QUIC) upstream transport (DW-108).

versioning

API versioning aids (DW-048): the Accept media-type criterion of route matching, and the Deprecation/Sunset response-header automation.

waf

WAF-lite heuristic filtering (DW-051).

websocket

WebSocket policy (DW-039 + DP-05 #253): the knobs that turn the generic 101 tunnel into a managed one for browser-style WebSocket traffic — origin allowlisting at the handshake, post-upgrade frame-rate policing, per-frame size limits, idle-timeout reaping, and RFC 6455 protocol-error enforcement on the tunnel.