tc is Traffic Control for Linux, you can do things like set priorities, drop traffic for testing, etc. This looks like now you could match by systemd service, container, or some other thing with its own group, which sounds useful.