diff --git a/apps/nsc-kernel/nsc.yaml b/apps/nsc-kernel/nsc.yaml
index 9014703a9502..2529a2446300 100644
--- a/apps/nsc-kernel/nsc.yaml
+++ b/apps/nsc-kernel/nsc.yaml
@@ -2,17 +2,17 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-kernel
   labels:
-    app: nsc
+    app: nsc-kernel
 spec:
   selector:
     matchLabels:
-      app: nsc
+      app: nsc-kernel
   template:
     metadata:
       labels:
-        app: nsc
+        app: nsc-kernel
     spec:
       containers:
         - name: nsc
diff --git a/apps/nsc-memif/nsc.yaml b/apps/nsc-memif/nsc.yaml
index 61bd04106922..44d3a9675525 100644
--- a/apps/nsc-memif/nsc.yaml
+++ b/apps/nsc-memif/nsc.yaml
@@ -2,17 +2,17 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-memif
   labels:
-    app: nsc
+    app: nsc-memif
 spec:
   selector:
     matchLabels:
-      app: nsc
+      app: nsc-memif
   template:
     metadata:
       labels:
-        app: nsc
+        app: nsc-memif
     spec:
       containers:
         - name: nsc
diff --git a/apps/nsc-vfio/nsc.yaml b/apps/nsc-vfio/nsc.yaml
index 6106054f213e..02bf9e9e2922 100644
--- a/apps/nsc-vfio/nsc.yaml
+++ b/apps/nsc-vfio/nsc.yaml
@@ -2,17 +2,17 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-vfio
   labels:
-    app: nsc
+    app: nsc-vfio
 spec:
   selector:
     matchLabels:
-      app: nsc
+      app: nsc-vfio
   template:
     metadata:
       labels:
-        app: nsc
+        app: nsc-vfio
     spec:
       containers:
         - name: pinger
diff --git a/apps/nse-kernel/nse.yaml b/apps/nse-kernel/nse.yaml
index 66b45b0f6c62..58a733f6a2ac 100644
--- a/apps/nse-kernel/nse.yaml
+++ b/apps/nse-kernel/nse.yaml
@@ -2,17 +2,17 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-kernel
   labels:
-    app: nse
+    app: nse-kernel
 spec:
   selector:
     matchLabels:
-      app: nse
+      app: nse-kernel
   template:
     metadata:
       labels:
-        app: nse
+        app: nse-kernel
     spec:
       containers:
         - name: nse
diff --git a/apps/nse-memif/nse.yaml b/apps/nse-memif/nse.yaml
index 8c68b34c9300..cb648c9f391f 100644
--- a/apps/nse-memif/nse.yaml
+++ b/apps/nse-memif/nse.yaml
@@ -2,17 +2,17 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-memif
   labels:
-    app: nse
+    app: nse-memif
 spec:
   selector:
     matchLabels:
-      app: nse
+      app: nse-memif
   template:
     metadata:
       labels:
-        app: nse
+        app: nse-memif
     spec:
       containers:
         - name: nse
diff --git a/apps/nse-vfio/nse.yaml b/apps/nse-vfio/nse.yaml
index dc0edcb58723..c162abc36d28 100644
--- a/apps/nse-vfio/nse.yaml
+++ b/apps/nse-vfio/nse.yaml
@@ -2,17 +2,17 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-vfio
   labels:
-    app: nse
+    app: nse-vfio
 spec:
   selector:
     matchLabels:
-      app: nse
+      app: nse-vfio
   template:
     metadata:
       labels:
-        app: nse
+        app: nse-vfio
     spec:
       hostNetwork: true
       containers:
diff --git a/examples/features/.gitignore b/examples/features/.gitignore
new file mode 100644
index 000000000000..69328c98acca
--- /dev/null
+++ b/examples/features/.gitignore
@@ -0,0 +1,3 @@
+**/kustomization.yaml
+**/patch-nsc.yaml
+**/patch-nse.yaml
\ No newline at end of file
diff --git a/examples/features/ipv6/Kernel2Kernel/README.md b/examples/features/ipv6/Kernel2Kernel/README.md
index b8e371f0f846..6778bb4d8fa9 100644
--- a/examples/features/ipv6/Kernel2Kernel/README.md
+++ b/examples/features/ipv6/Kernel2Kernel/README.md
@@ -54,7 +54,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-kernel
 spec:
   template:
     spec:
@@ -75,7 +75,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-kernel
 spec:
   template:
     spec:
@@ -96,18 +96,18 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-kernel -n ${NAMESPACE}
 ```
 
 Find NSC and NSE pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Check connectivity:
diff --git a/examples/features/ipv6/Memif2Memif/README.md b/examples/features/ipv6/Memif2Memif/README.md
index bea56997b282..7865f19c38d9 100644
--- a/examples/features/ipv6/Memif2Memif/README.md
+++ b/examples/features/ipv6/Memif2Memif/README.md
@@ -53,7 +53,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-memif
 spec:
   template:
     spec:
@@ -74,7 +74,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-memif
 spec:
   template:
     spec:
@@ -95,18 +95,18 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-memif -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-memif -n ${NAMESPACE}
 ```
 
 Find NSC and NSE pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Check connectivity:
diff --git a/examples/features/opa/README.md b/examples/features/opa/README.md
index a40d18a43e41..6abc7abefcf2 100644
--- a/examples/features/opa/README.md
+++ b/examples/features/opa/README.md
@@ -64,7 +64,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-kernel
 spec:
   template:
     spec:
@@ -87,7 +87,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-kernel
 spec:
   template:
     spec:
@@ -107,19 +107,19 @@ kubectl apply -k .
 ```
 
 8. Wait for applications ready:
-```bash 
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-kernel -n ${NAMESPACE}
 ```
 
 9. Find nsc and nse pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 10. Check that NSC is not privileged and it cannot connect to NSE.
diff --git a/examples/multiforwarder/README.md b/examples/multiforwarder/README.md
new file mode 100644
index 000000000000..a0c9ebf642a6
--- /dev/null
+++ b/examples/multiforwarder/README.md
@@ -0,0 +1,42 @@
+## Requires
+
+- [spire](../spire)
+
+## Includes
+
+- [VFIO Connection](../use-cases/Vfio2Noop)
+- [Kernel Connection](../use-cases/SriovKernel2Noop)
+- [Memif to Memif Connection](../use-cases/Memif2Memif)
+- [Kernel to Kernel Connection](../use-cases/Kernel2Kernel)
+- [Kernel to VXLAN to Kernel Connection](../use-cases/Kernel2Vxlan2Kernel)
+- [Kernel to Kernel Connection & VFIO Connection](../use-cases/Kernel2Kernel&Vfio2Noop)
+- [Kernel to VXLAN to Kernel Connection & VFIO Connection](../use-cases/Kernel2Vxlan2Kernel&Vfio2Noop)
+
+## Run
+
+Create ns for deployments:
+```bash
+kubectl create ns nsm-system
+```
+
+Register `nsm-system` namespace in spire:
+```bash
+kubectl exec -n spire spire-server-0 -- \
+/opt/spire/bin/spire-server entry create \
+-spiffeID spiffe://example.org/ns/nsm-system/sa/default \
+-parentID spiffe://example.org/ns/spire/sa/spire-agent \
+-selector k8s:ns:nsm-system \
+-selector k8s:sa:default
+```
+
+Apply NSM resources for basic tests:
+```bash
+kubectl apply -k .
+```
+
+## Cleanup
+
+Delete ns:
+```bash
+kubectl delete ns nsm-system
+```
\ No newline at end of file
diff --git a/examples/multiforwarder/kustomization.yaml b/examples/multiforwarder/kustomization.yaml
new file mode 100644
index 000000000000..9008c26d8475
--- /dev/null
+++ b/examples/multiforwarder/kustomization.yaml
@@ -0,0 +1,11 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: nsm-system
+
+bases:
+- ../../apps/nsmgr
+- ../../apps/forwarder-vpp
+- ../../apps/forwarder-sriov
+- ../../apps/registry-memory
diff --git a/examples/use-cases/.gitignore b/examples/use-cases/.gitignore
new file mode 100644
index 000000000000..69328c98acca
--- /dev/null
+++ b/examples/use-cases/.gitignore
@@ -0,0 +1,3 @@
+**/kustomization.yaml
+**/patch-nsc.yaml
+**/patch-nse.yaml
\ No newline at end of file
diff --git a/examples/use-cases/Kernel2Kernel&Vfio2Noop/README.md b/examples/use-cases/Kernel2Kernel&Vfio2Noop/README.md
new file mode 100644
index 000000000000..8eff0232e66c
--- /dev/null
+++ b/examples/use-cases/Kernel2Kernel&Vfio2Noop/README.md
@@ -0,0 +1,190 @@
+# Test kernel to kernel connection and VFIO connection
+
+This example shows that local kernel connection and VFIO connection can be setup by NSM at the same time.
+
+## Run
+
+Create test namespace:
+```bash
+NAMESPACE=($(kubectl create -f ../namespace.yaml)[0])
+NAMESPACE=${NAMESPACE:10}
+```
+
+Register namespace in `spire` server:
+```bash
+kubectl exec -n spire spire-server-0 -- \
+/opt/spire/bin/spire-server entry create \
+-spiffeID spiffe://example.org/ns/${NAMESPACE}/sa/default \
+-parentID spiffe://example.org/ns/spire/sa/spire-agent \
+-selector k8s:ns:${NAMESPACE} \
+-selector k8s:sa:default
+```
+
+Select node to deploy NSC and NSE:
+```bash
+NODE=($(kubectl get nodes -o go-template='{{range .items}}{{ if not .spec.taints  }}{{index .metadata.labels "kubernetes.io/hostname"}} {{end}}{{end}}')[0])
+```
+
+Create customization file:
+```bash
+cat > kustomization.yaml <<EOF
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: ${NAMESPACE}
+
+bases:
+- ../../../apps/nsc-kernel
+- ../../../apps/nse-kernel
+- ../../../apps/nsc-vfio
+- ../../../apps/nse-vfio
+
+patchesStrategicMerge:
+- patch-nsc.yaml
+- patch-nse.yaml
+EOF
+```
+
+Create kernel NSC patch:
+```bash
+cat > patch-nsc.yaml <<EOF
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nsc-kernel
+spec:
+  template:
+    spec:
+      containers:
+        - name: nsc
+          env:
+            - name: NSM_NETWORK_SERVICES
+              value: kernel://icmp-responder/nsm-1
+      nodeSelector:
+        kubernetes.io/hostname: ${NODE}
+EOF
+```
+
+Create kernel NSE patch:
+```bash
+cat > patch-nse.yaml <<EOF
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nse-kernel
+spec:
+  template:
+    spec:
+      containers:
+        - name: nse
+          env:
+            - name: NSE_CIDR_PREFIX
+              value: 172.16.1.100/31
+      nodeSelector:
+        kubernetes.io/hostname: ${NODE}
+EOF
+```
+
+Deploy NSCs and NSEs:
+```bash
+kubectl apply -k .
+```
+
+Wait for applications ready:
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel -n ${NAMESPACE}
+```
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-kernel -n ${NAMESPACE}
+```
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-vfio -n ${NAMESPACE}
+```
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-vfio -n ${NAMESPACE}
+```
+
+Find NSC and NSE pods by labels:
+```bash
+NSC_KERNEL=$(kubectl get pods -l app=nsc-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+```
+```bash
+NSE_KERNEL=$(kubectl get pods -l app=nse-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+```
+```bash
+NSC_VFIO=$(kubectl get pods -l app=nsc-vfio -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+```
+
+Prepare VFIO ping function:
+```bash
+function dpdk_ping() {
+  err_file="$(mktemp)"
+  trap 'rm -f "${err_file}"' RETURN
+
+  out="$(kubectl -n ${NAMESPACE} exec ${NSC_VFIO} --container pinger -- /bin/bash -c '\
+    /root/dpdk-pingpong/build/app/pingpong                                            \
+      --no-huge                                                                       \
+      --                                                                              \
+      -n 500                                                                          \
+      -c                                                                              \
+      -C 0a:11:22:33:44:55                                                            \
+      -S 0a:55:44:33:22:11                                                            \
+  ' 2>"${err_file}")"
+
+  if [[ "$?" != 0 ]]; then
+    cat "${err_file}" 1>&2
+    echo "${out}" 1>&2
+    return 1
+  fi
+
+  if ! pong_packets="$(echo "${out}" | grep "rx .* pong packets" | sed -E 's/rx ([0-9]*) pong packets/\1/g')"; then
+    cat "${err_file}" 1>&2
+    echo "${out}" 1>&2
+    return 1
+  fi
+
+  if [[ "${pong_packets}" == 0 ]]; then
+    cat "${err_file}" 1>&2
+    echo "${out}" 1>&2
+    return 1
+  fi
+
+  echo "${out}"
+  return 0
+}
+```
+
+Ping from kernel NSC to kernel NSE:
+```bash
+kubectl exec ${NSC_KERNEL} -n ${NAMESPACE} -- ping -c 4 172.16.1.100
+```
+
+Ping from kernel NSE to kernel NSC:
+```bash
+kubectl exec ${NSE_KERNEL} -n ${NAMESPACE} -- ping -c 4 172.16.1.101
+```
+
+Ping from VFIO NSC to VFIO NSE:
+```bash
+dpdk_ping
+```
+
+## Cleanup
+
+Stop ponger:
+```bash
+NSE_VFIO=$(kubectl get pods -l app=nse-vfio -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+```
+```bash
+kubectl -n ${NAMESPACE} exec ${NSE_VFIO} --container ponger -- /bin/bash -c '\
+  sleep 10 && kill $(pgrep "pingpong") 1>/dev/null 2>&1 &                    \
+'
+```
+
+Delete ns:
+```bash
+kubectl delete ns ${NAMESPACE}
+```
\ No newline at end of file
diff --git a/examples/use-cases/Kernel2Kernel/README.md b/examples/use-cases/Kernel2Kernel/README.md
index f1fdf521e1a2..0d80aece8b62 100644
--- a/examples/use-cases/Kernel2Kernel/README.md
+++ b/examples/use-cases/Kernel2Kernel/README.md
@@ -58,7 +58,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-kernel
 spec:
   template:
     spec:
@@ -79,7 +79,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-kernel
 spec:
   template:
     spec:
@@ -99,19 +99,19 @@ kubectl apply -k .
 ```
 
 Wait for applications ready:
-```bash 
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-kernel -n ${NAMESPACE}
 ```
 
 Find nsc and nse pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Ping from NSC to NSE:
diff --git a/examples/use-cases/Kernel2Memif/README.md b/examples/use-cases/Kernel2Memif/README.md
index a977e06d945a..afa308e9b268 100644
--- a/examples/use-cases/Kernel2Memif/README.md
+++ b/examples/use-cases/Kernel2Memif/README.md
@@ -59,7 +59,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-kernel
 spec:
   template:
     spec:
@@ -80,7 +80,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-memif
 spec:
   template:
     spec:
@@ -100,19 +100,19 @@ kubectl apply -k .
 ```
 
 Wait for applications ready:
-```bash 
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-memif -n ${NAMESPACE}
 ```
 
 Find nsc and nse pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Ping from NSC to NSE:
diff --git a/examples/use-cases/Kernel2Vxlan2Kernel&Vfio2Noop/README.md b/examples/use-cases/Kernel2Vxlan2Kernel&Vfio2Noop/README.md
new file mode 100644
index 000000000000..6f85ee92867c
--- /dev/null
+++ b/examples/use-cases/Kernel2Vxlan2Kernel&Vfio2Noop/README.md
@@ -0,0 +1,190 @@
+# Test kernel to VXLAN to kernel connection and VFIO connection
+
+This example shows that remote kernel over VXLAN connection and VFIO connection can be setup by NSM at the same time.
+
+## Run
+
+Create test namespace:
+```bash
+NAMESPACE=($(kubectl create -f ../namespace.yaml)[0])
+NAMESPACE=${NAMESPACE:10}
+```
+
+Register namespace in `spire` server:
+```bash
+kubectl exec -n spire spire-server-0 -- \
+/opt/spire/bin/spire-server entry create \
+-spiffeID spiffe://example.org/ns/${NAMESPACE}/sa/default \
+-parentID spiffe://example.org/ns/spire/sa/spire-agent \
+-selector k8s:ns:${NAMESPACE} \
+-selector k8s:sa:default
+```
+
+Select node to deploy NSC and NSE:
+```bash
+NODES=($(kubectl get nodes -o go-template='{{range .items}}{{ if not .spec.taints  }}{{index .metadata.labels "kubernetes.io/hostname"}} {{end}}{{end}}'))
+```
+
+Create customization file:
+```bash
+cat > kustomization.yaml <<EOF
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: ${NAMESPACE}
+
+bases:
+- ../../../apps/nsc-kernel
+- ../../../apps/nse-kernel
+- ../../../apps/nsc-vfio
+- ../../../apps/nse-vfio
+
+patchesStrategicMerge:
+- patch-nsc.yaml
+- patch-nse.yaml
+EOF
+```
+
+Create kernel NSC patch:
+```bash
+cat > patch-nsc.yaml <<EOF
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nsc-kernel
+spec:
+  template:
+    spec:
+      containers:
+        - name: nsc
+          env:
+            - name: NSM_NETWORK_SERVICES
+              value: kernel://icmp-responder/nsm-1
+      nodeSelector:
+        kubernetes.io/hostname: ${NODES[0]}
+EOF
+```
+
+Create kernel NSE patch:
+```bash
+cat > patch-nse.yaml <<EOF
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nse-kernel
+spec:
+  template:
+    spec:
+      containers:
+        - name: nse
+          env:
+            - name: NSE_CIDR_PREFIX
+              value: 172.16.1.100/31
+      nodeSelector:
+        kubernetes.io/hostname: ${NODES[1]}
+EOF
+```
+
+Deploy NSCs and NSEs:
+```bash
+kubectl apply -k .
+```
+
+Wait for applications ready:
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel -n ${NAMESPACE}
+```
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-kernel -n ${NAMESPACE}
+```
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-vfio -n ${NAMESPACE}
+```
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-vfio -n ${NAMESPACE}
+```
+
+Find NSC and NSE pods by labels:
+```bash
+NSC_KERNEL=$(kubectl get pods -l app=nsc-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+```
+```bash
+NSE_KERNEL=$(kubectl get pods -l app=nse-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+```
+```bash
+NSC_VFIO=$(kubectl get pods -l app=nsc-vfio -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+```
+
+Prepare VFIO ping function:
+```bash
+function dpdk_ping() {
+  err_file="$(mktemp)"
+  trap 'rm -f "${err_file}"' RETURN
+
+  out="$(kubectl -n ${NAMESPACE} exec ${NSC_VFIO} --container pinger -- /bin/bash -c '\
+    /root/dpdk-pingpong/build/app/pingpong                                            \
+      --no-huge                                                                       \
+      --                                                                              \
+      -n 500                                                                          \
+      -c                                                                              \
+      -C 0a:11:22:33:44:55                                                            \
+      -S 0a:55:44:33:22:11                                                            \
+  ' 2>"${err_file}")"
+
+  if [[ "$?" != 0 ]]; then
+    cat "${err_file}" 1>&2
+    echo "${out}" 1>&2
+    return 1
+  fi
+
+  if ! pong_packets="$(echo "${out}" | grep "rx .* pong packets" | sed -E 's/rx ([0-9]*) pong packets/\1/g')"; then
+    cat "${err_file}" 1>&2
+    echo "${out}" 1>&2
+    return 1
+  fi
+
+  if [[ "${pong_packets}" == 0 ]]; then
+    cat "${err_file}" 1>&2
+    echo "${out}" 1>&2
+    return 1
+  fi
+
+  echo "${out}"
+  return 0
+}
+```
+
+Ping from kernel NSC to kernel NSE:
+```bash
+kubectl exec ${NSC_KERNEL} -n ${NAMESPACE} -- ping -c 4 172.16.1.100
+```
+
+Ping from kernel NSE to kernel NSC:
+```bash
+kubectl exec ${NSE_KERNEL} -n ${NAMESPACE} -- ping -c 4 172.16.1.101
+```
+
+Ping from VFIO NSC to VFIO NSE:
+```bash
+dpdk_ping
+```
+
+## Cleanup
+
+Stop ponger:
+```bash
+NSE_VFIO=$(kubectl get pods -l app=nse-vfio -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+```
+```bash
+kubectl -n ${NAMESPACE} exec ${NSE_VFIO} --container ponger -- /bin/bash -c '\
+  sleep 10 && kill $(pgrep "pingpong") 1>/dev/null 2>&1 &                    \
+'
+```
+
+Delete ns:
+```bash
+kubectl delete ns ${NAMESPACE}
+```
\ No newline at end of file
diff --git a/examples/use-cases/Kernel2Vxlan2Kernel/README.md b/examples/use-cases/Kernel2Vxlan2Kernel/README.md
index 29c2c7013287..7245b5c6004f 100644
--- a/examples/use-cases/Kernel2Vxlan2Kernel/README.md
+++ b/examples/use-cases/Kernel2Vxlan2Kernel/README.md
@@ -58,7 +58,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-kernel
 spec:
   template:
     spec:
@@ -80,7 +80,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-kernel
 spec:
   template:
     spec:
@@ -101,18 +101,18 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-kernel -n ${NAMESPACE}
 ```
 
 Find NSC and NSE pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Ping from NSC to NSE:
diff --git a/examples/use-cases/Kernel2Vxlan2Memif/README.md b/examples/use-cases/Kernel2Vxlan2Memif/README.md
index becb9267653c..0016deadeea7 100644
--- a/examples/use-cases/Kernel2Vxlan2Memif/README.md
+++ b/examples/use-cases/Kernel2Vxlan2Memif/README.md
@@ -59,7 +59,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-kernel
 spec:
   template:
     spec:
@@ -81,7 +81,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-memif
 spec:
   template:
     spec:
@@ -102,18 +102,18 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-memif -n ${NAMESPACE}
 ```
 
 Find NSC and NSE pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Ping from NSC to NSE:
diff --git a/examples/use-cases/Memif2Kernel/README.md b/examples/use-cases/Memif2Kernel/README.md
index 7e3483da9aad..d4f4eac1d5ca 100644
--- a/examples/use-cases/Memif2Kernel/README.md
+++ b/examples/use-cases/Memif2Kernel/README.md
@@ -58,7 +58,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-memif
 spec:
   template:
     spec:
@@ -99,19 +99,19 @@ kubectl apply -k .
 ```
 
 Wait for applications ready:
-```bash 
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+```bash
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-memif -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-kernel -n ${NAMESPACE}
 ```
 
 Find nsc and nse pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Ping from NSC to NSE:
diff --git a/examples/use-cases/Memif2Memif/README.md b/examples/use-cases/Memif2Memif/README.md
index 0eb3fb34fb66..11a105fc14db 100644
--- a/examples/use-cases/Memif2Memif/README.md
+++ b/examples/use-cases/Memif2Memif/README.md
@@ -58,7 +58,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-memif
 spec:
   template:
     spec:
@@ -79,7 +79,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-memif
 spec:
   template:
     spec:
@@ -100,18 +100,18 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-memif -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-memif -n ${NAMESPACE}
 ```
 
 Find NSC and NSE pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Check connectivity:
diff --git a/examples/use-cases/Memif2Vxlan2Kernel/README.md b/examples/use-cases/Memif2Vxlan2Kernel/README.md
index 2c339d23f195..9f4c81c1d7e3 100644
--- a/examples/use-cases/Memif2Vxlan2Kernel/README.md
+++ b/examples/use-cases/Memif2Vxlan2Kernel/README.md
@@ -60,7 +60,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-memif
 spec:
   template:
     spec:
@@ -82,7 +82,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-kernel
 spec:
   template:
     spec:
@@ -103,18 +103,18 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-memif -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-kernel -n ${NAMESPACE}
 ```
 
 Find NSC and NSE pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-kernel -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Ping from NSC to NSE:
diff --git a/examples/use-cases/Memif2Vxlan2Memif/README.md b/examples/use-cases/Memif2Vxlan2Memif/README.md
index 205ee6a29094..30f378df15db 100644
--- a/examples/use-cases/Memif2Vxlan2Memif/README.md
+++ b/examples/use-cases/Memif2Vxlan2Memif/README.md
@@ -58,7 +58,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-memif
 spec:
   template:
     spec:
@@ -80,7 +80,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-memif
 spec:
   template:
     spec:
@@ -101,18 +101,18 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nsc-memif -n ${NAMESPACE}
 ```
 ```bash
-kubectl wait --for=condition=ready --timeout=1m pod -l app=nse -n ${NAMESPACE}
+kubectl wait --for=condition=ready --timeout=1m pod -l app=nse-memif -n ${NAMESPACE}
 ```
 
 Find NSC and NSE pods by labels:
 ```bash
-NSC=$(kubectl get pods -l app=nsc -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl get pods -l app=nsc-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
-NSE=$(kubectl get pods -l app=nse -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl get pods -l app=nse-memif -n ${NAMESPACE} --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Ping from NSC to NSE:
diff --git a/examples/use-cases/SriovKernel2Noop/README.md b/examples/use-cases/SriovKernel2Noop/README.md
index c4851f5fb9d1..e0d60c39a8d2 100644
--- a/examples/use-cases/SriovKernel2Noop/README.md
+++ b/examples/use-cases/SriovKernel2Noop/README.md
@@ -52,7 +52,7 @@ cat > patch-nsc.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nsc
+  name: nsc-kernel
 spec:
   template:
     spec:
@@ -74,7 +74,7 @@ cat > patch-nse.yaml <<EOF
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nse
+  name: nse-kernel
 spec:
   template:
     spec:
@@ -98,10 +98,10 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=nsc
+kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=nsc-kernel
 ```
 ```bash
-kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=nse
+kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=nse-kernel
 ```
 ```bash
 kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=ponger
@@ -109,7 +109,7 @@ kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=ponge
 
 Get NSC pod:
 ```bash
-NSC=$(kubectl -n ${NAMESPACE} get pods -l app=nsc --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl -n ${NAMESPACE} get pods -l app=nsc-kernel --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Ping from NSC to NSE:
diff --git a/examples/use-cases/Vfio2Noop/README.md b/examples/use-cases/Vfio2Noop/README.md
index 753482137b0a..0ff44960781a 100644
--- a/examples/use-cases/Vfio2Noop/README.md
+++ b/examples/use-cases/Vfio2Noop/README.md
@@ -46,15 +46,15 @@ kubectl apply -k .
 
 Wait for applications ready:
 ```bash
-kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=nsc
+kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=nsc-vfio
 ```
 ```bash
-kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=nse
+kubectl -n ${NAMESPACE} wait --for=condition=ready --timeout=1m pod -l app=nse-vfio
 ```
 
 Get NSC pod:
 ```bash
-NSC=$(kubectl -n ${NAMESPACE} get pods -l app=nsc --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSC=$(kubectl -n ${NAMESPACE} get pods -l app=nsc-vfio --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 
 Check connectivity:
@@ -103,7 +103,7 @@ dpdk_ping
 
 Stop ponger:
 ```bash
-NSE=$(kubectl -n ${NAMESPACE} get pods -l app=nse --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
+NSE=$(kubectl -n ${NAMESPACE} get pods -l app=nse-vfio --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
 ```
 ```bash
 kubectl -n ${NAMESPACE} exec ${NSE} --container ponger -- /bin/bash -c '\