nftables supports matching by cgroups, which arguably is a better idea than process IDs.

https://wiki.nftables.org/wiki-nftables/index.php/Matching_p...