conf.Port = 65536
			return conf
		},
		errMsg: "invalid configuration: port (--port) 65536 must be between 1 and 65535, inclusive",
	}, {
		name: "invalid ReadOnlyPort",
		configure: func(conf *kubeletconfig.KubeletConfiguration) *kubeletconfig.KubeletConfiguration {
			conf.ReadOnlyPort = 65536
			return conf
		},

		ln.Close()
		for _, c := range dialed {
			c.Close()
		}
		<-done
	}()

	// Since this test is not running in parallel, we expect to be able to open
	// all 65535 valid (fake) ports. The listener is already using one, so
	// we should be able to Dial the remaining 65534.
	for len(dialed) < (1<<16)-2 {
		c, err := Dial(ln.Addr().Network(), ln.Addr().String())
		if err != nil {

				HashFamily: ProtocolFamilyIPV6,
				HashSize:   65535,
				MaxElem:    2048,
				PortRange:  DefaultPortRange,
			},
			expectErr: false,
			desc:      "control case",
		},
		{ // case[2]
			ipset: &IPSet{
				Name:       "foo",
				SetType:    BitmapPort,
				HashFamily: ProtocolFamilyIPV6,
				HashSize:   65535,
				MaxElem:    2048,
			},
			expectErr: true,

			expectedUsedBegin: 0,
			expectedUsedEnd:   65535,
			expectErr:         false,
			description:       "Occupy 65535 Bits with IPv4",
		},
		{
			clusterCIDRStr:    "2001:beef:1200::/48",
			subNetMaskSize:    64,
			subNetCIDRStr:     "2001:beef:1200::/48",
			expectedUsedBegin: 0,
			expectedUsedEnd:   65535,
			expectErr:         false,
			description:       "Occupy 65535 Bits with IPv6",
		},
		{

	}
	y = 65535
	r = x - y
	if r != 2 {
		t.Errorf("1 %s 65535 = %d, want 2", "-", r)
	}
	x = 65535
	y = 0
	r = x - y
	if r != 65535 {
		t.Errorf("65535 %s 0 = %d, want 65535", "-", r)
	}
	y = 1
	r = x - y
	if r != 65534 {
		t.Errorf("65535 %s 1 = %d, want 65534", "-", r)
	}
	y = 65535
	r = x - y
	if r != 0 {
		t.Errorf("65535 %s 65535 = %d, want 0", "-", r)

	AND	$65536, R4		// 1e02001484f81400
	AND	$4096, R4		// 3e00001484f81400
	SGT	$65536, R4, R5		// 1e02001485781200
	SGT	$4096, R4, R5		// 3e00001485781200
	SGT	$65536, R4		// 1e02001484781200
	SGT	$4096, R4		// 3e00001484781200
	SGTU	$65536, R4, R5		// 1e02001485f81200
	SGTU	$4096, R4, R5		// 3e00001485f81200
	SGTU	$65536, R4		// 1e02001484f81200
	SGTU	$4096, R4		// 3e00001484f81200
	ADDU	$65536, R4, R5		// 1e02001485781000

	utd16{a: 0, b: 1, add: 1, sub: 65535, mul: 0, div: 0, mod: 0},
	utd16{a: 0, b: 65535, add: 65535, sub: 1, mul: 0, div: 0, mod: 0},
	utd16{a: 1, b: 0, add: 1, sub: 1, mul: 0},
	utd16{a: 1, b: 1, add: 2, sub: 0, mul: 1, div: 1, mod: 0},
	utd16{a: 1, b: 65535, add: 0, sub: 2, mul: 65535, div: 0, mod: 1},
	utd16{a: 65535, b: 0, add: 65535, sub: 65535, mul: 0},
	utd16{a: 65535, b: 1, add: 0, sub: 65534, mul: 65535, div: 65535, mod: 0},

	MOVB	y+4097(FP), R4			// 3e000014de8f1000c4270028
	MOVBU	y+4097(FP), R4			// 3e000014de8f1000c427002a
	MOVW	65536(R5), R4			// 1e020014de971000c4038028
	MOVWU	65536(R5), R4			// 1e020014de971000c403802a
	MOVV	65536(R5), R4			// 1e020014de971000c403c028
	MOVB	65536(R5), R4			// 1e020014de971000c4030028
	MOVBU	65536(R5), R4			// 1e020014de971000c403002a
	MOVW	4096(R5), R4			// 3e000014de971000c4038028

	AND	R1, R2, R3            // b9e42031
	AND	$-2, R1               // a517fffe
	AND	$-65536, R1           // c01bffff0000
	AND	$1, R1                // c0a100000001b980001a
	ANDW	R1, R2                // 1421
	ANDW	R1, R2, R3            // b9f42031
	ANDW	$1, R1                // c01b00000001
	ANDW	$131071, R1           // a5160001
	ANDW	$65536, R1            // c01b00010000
	ANDW	$-2, R1               // a517fffe

    matchLabels:
      app: external-forward-proxy
  template:
    metadata:
      labels:
        app: external-forward-proxy
    spec:
      securityContext:
        runAsUser: 65534
        runAsGroup: 65534
        fsGroup: 65534
      containers:
      - name: external-forward-proxy
        image: envoyproxy/envoy:v1.21.0
        imagePullPolicy: IfNotPresent
        volumeMounts: