Is there an equivalent method to nft get element ?

[sbs2001]

Consider there are some elements in a nft set (some are CIDR ranges). By doing

 nft get element x y { 1.1.1.1 }
 table ip x {
         set m {
                 type ipv4_addr
                 flags interval
                 elements = { 1.1.1.0/24 }
         }
}

we can query whether a single IP is contained within set. This resolves the CIDRs in the set too. Is there a way to mimic this functionality by using this library ?

Background Info https://marc.info/?l=netfilter&m=163360852605801&w=2

[stapelberg]

You can obtain the sets using this nftables package, but I think converting a set element to an IP address range (see https://pkg.go.dev/net#ParseCIDR) is not currently implemented.

cc @sbezverk to make sure I’m not missing anything