nftables supports matching by cgroups, which arguably is a better idea than process IDs. https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_meta

nftables supports matching by cgroups, which arguably is a better idea than process IDs. https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_metainformation#Matching_by_security_selectors https://wiki.nftables.org/wiki-nftables/index.php/Matching_p...