Domain Split tunnel 'under the hood'

[DorMarcovitch]

hey, 

can someone please explain how this feature work from the stage of open the browser and surf to www.google.com until the GP client decide it should enter the tunnel?

for example

1. GP listen on the nic for dns queries

2. GP check with the split tunnel rules if there is a match

3. GP route the traffic to the tunnel on the OS network stack level specific for the session / adds a route to that destination...

thanks