[Feature Request] Add DNS answers to ip/nftables set

[Someone-Practice]

Operating system

Linux

System version

Arch Linux

Installation type

Original sing-box Command Line

If you are using a graphical client, please provide the version of the client.

No response

Version

No response

Description

Support adding DNS A and AAAA answers for specified domains to an iptables or nftables set, with the timeout set to DNS TTL or a custom value if the set has timeout enabled.

This will allow direct access domains to bypass sing-box completely, improving performance while maintaining some degree of flexibility.

Reproduction

This is a feature request.

Logs

No response

Supporter

• I am a sponsor

Integrity requirements

• I confirm that I have read the documentation, understand the meaning of all the configuration items I wrote, and did not pile up seemingly useful options or default values.
• I confirm that I have provided the server and client configuration files and process that can be reproduced locally, instead of a complicated client configuration file that has been stripped of sensitive data.
• I confirm that I have provided the simplest configuration that can be used to reproduce the error I reported, instead of depending on remote servers, TUN, graphical interface clients, or other closed-source software.
• I confirm that I have provided the complete configuration files and logs, rather than just providing parts I think are useful out of confidence in my own intelligence.