Method Close

platform/linux/nfqueue.go:224–257

Close tears down everything Open set up. Safe to call multiple times.

()

// Close tears down everything Open set up. Safe to call multiple times.
func (b *Backend) Close() error {
	b.mu.Lock()
	defer b.mu.Unlock()
	if !b.opened {
		return nil
	}
	b.opened = false
	select {
	case <-b.closed:
	default:
		close(b.closed)
	}
	var firstErr error
	if b.cancelReader != nil {
		b.cancelReader()
		b.cancelReader = nil
	}
	if b.nfq != nil {
		if err := b.nfq.Close(); err != nil && firstErr == nil {
			firstErr = err
		}
		b.nfq = nil
	}
	if b.rawSock >= 0 {
		_ = syscall.Close(b.rawSock)
		b.rawSock = -1
	}
	if err := b.removeRulesLocked(); err != nil && firstErr == nil {
		firstErr = err
	}
	// Drain packet channel so receivers don't block; close signals EOF.
	close(b.packets)
	return firstErr
}

// installRules adds narrowly-scoped iptables rules redirecting only the
// target flow into our NFQUEUE.