feature: support cidr blocks egress control with --allow-net

[alexanderGalushka]

currently --allow-net supports only IPs and domains, unfortunately it doesn't support cidr blocks yet

e.g.

deno run --allow-net=xyz.com,abc.com,10.0.0.11/24

[lucacasonato]

CIDR blocks would require us to resolve hostnames to IP addresses before matching against the net allow list. Possible, but not easy to implement.

[bnoordhuis]

#11509 unfortunately stalled but that means this feature is up for grabs again.

[nebarf]

@bnoordhuis I can grab the issue if it sounds good to you. Will take me some time to familiarize with the codebase

[ghost]

@lucacasonato @alexanderGalushka

This is something I was reading into and potentially looking at making PR for, just making a note before I get off and anyone else wants to pick. There seems to be a resolveDNS API in Deno already which can be used to perform the domain resolution, interface useable to the rest of Deno, not sure, however once I track down the internals those can be used either way.

[ghost]

Rust OP DNS Resolve Internals line 656
Rust Internals for attaching allow command arguments