"control group" match support

modulename: xt_cgroup.ko

configname: CONFIG_NETFILTER_XT_MATCH_CGROUP

Linux Kernel Configuration
└─>Networking support
└─>Networking options
└─>Network packet filtering framework (Netfilter)
└─>Core Netfilter Configuration
└─>"control group" match support
In linux kernel since version 3.14 (release Date: 2014-03-30)  
Socket/process control group matching allows you to match locally
generated packets based on which net_cls control group processes
belong to.

source code:
net/netfilter/xt_cgroup.c