Static
Test suite to validate using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0:
set system certificate trust running://remote.dns-server.crt set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns proxy static RD protocol dns-over-https hash ec4467518bda940b10464a7630c570e7717035cc032e5ae3bec7c4f937f00d8e set service dns resolver local
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
-- Logs begin at Mon 2024-06-24 12:31:32 UTC, end at Mon 2024-06-24 12:31:36 UTC. -- Jun 24 12:31:32.395215 osdx systemd-journald[596]: Runtime journal (/run/log/journal/9a819f3302304ea795867ea7c248068f) is 2.0M, max 16.0M, 14.0M free. Jun 24 12:31:32.426096 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system journal clear'. Jun 24 12:31:33.018843 osdx osdx-coredump[14506]: Deleting all coredumps in /opt/vyatta/etc/config/coredump... Jun 24 12:31:33.026913 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system coredump delete all'. Jun 24 12:31:33.847268 osdx OSDxCLI[18080]: User 'admin' entered the configuration menu. Jun 24 12:31:33.979818 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 24 12:31:34.070821 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 24 12:31:34.197904 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 24 12:31:34.282306 osdx cfgd[1115]: [18080]Completed change to active configuration Jun 24 12:31:34.330753 osdx OSDxCLI[18080]: User 'admin' committed the configuration. Jun 24 12:31:34.354607 osdx OSDxCLI[18080]: User 'admin' left the configuration menu. Jun 24 12:31:34.554510 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 24 12:31:34.774257 osdx OSDxCLI[18080]: User 'admin' entered the configuration menu. Jun 24 12:31:34.897453 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 24 12:31:35.041456 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 24 12:31:35.182326 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 24 12:31:35.281393 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 24 12:31:35.398135 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash ec4467518bda940b10464a7630c570e7717035cc032e5ae3bec7c4f937f00d8e'. Jun 24 12:31:35.482872 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 24 12:31:35.630100 osdx ca-certificates[14618]: Updating certificates in /etc/ssl/certs... Jun 24 12:31:36.342151 osdx ca-certificates[15601]: 1 added, 0 removed; done. Jun 24 12:31:36.347040 osdx ca-certificates[15608]: Running hooks in /etc/ca-certificates/update.d... Jun 24 12:31:36.351637 osdx ca-certificates[15610]: done. Jun 24 12:31:36.498481 osdx systemd[1]: Started DNSCrypt client proxy. Jun 24 12:31:36.500285 osdx cfgd[1115]: [18080]Completed change to active configuration Jun 24 12:31:36.504329 osdx OSDxCLI[18080]: User 'admin' committed the configuration. Jun 24 12:31:36.529917 osdx OSDxCLI[18080]: User 'admin' left the configuration menu. Jun 24 12:31:36.530985 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] dnscrypt-proxy 2.0.45 Jun 24 12:31:36.531271 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] Network connectivity detected Jun 24 12:31:36.531511 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] Dropping privileges Jun 24 12:31:36.534924 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] Network connectivity detected Jun 24 12:31:36.535140 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 24 12:31:36.535241 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 24 12:31:36.535358 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] Firefox workaround initialized Jun 24 12:31:36.535449 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpjETRta] Jun 24 12:31:36.710845 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system journal show | cat'. Jun 24 12:31:36.718106 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] [RD] OK (DoH) - rtt: 137ms Jun 24 12:31:36.718106 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] Server with the lowest initial latency: RD (rtt: 137ms) Jun 24 12:31:36.718106 osdx dnscrypt-proxy[15660]: [2024-06-24 12:31:36] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash ec4467518bda940b10464a7630c570e7717035cc032e5ae3bec7c4f937f00d8e at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDsRGdRi9qUCxBGSnYwxXDncXA1zAMuWuO-x8T5N_ANjgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0:
set system certificate trust running://remote.dns-server.crt set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDsRGdRi9qUCxBGSnYwxXDncXA1zAMuWuO-x8T5N_ANjgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
-- Logs begin at Mon 2024-06-24 12:31:45 UTC, end at Mon 2024-06-24 12:31:49 UTC. -- Jun 24 12:31:45.410643 osdx systemd-journald[596]: Runtime journal (/run/log/journal/9a819f3302304ea795867ea7c248068f) is 2.0M, max 16.0M, 14.0M free. Jun 24 12:31:45.438266 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system journal clear'. Jun 24 12:31:46.023718 osdx osdx-coredump[17318]: Deleting all coredumps in /opt/vyatta/etc/config/coredump... Jun 24 12:31:46.035140 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system coredump delete all'. Jun 24 12:31:46.926475 osdx OSDxCLI[18080]: User 'admin' entered the configuration menu. Jun 24 12:31:47.040701 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 24 12:31:47.149386 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 24 12:31:47.273629 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 24 12:31:47.363295 osdx cfgd[1115]: [18080]Completed change to active configuration Jun 24 12:31:47.418473 osdx OSDxCLI[18080]: User 'admin' committed the configuration. Jun 24 12:31:47.455414 osdx OSDxCLI[18080]: User 'admin' left the configuration menu. Jun 24 12:31:47.635375 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 24 12:31:47.832506 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash ec4467518bda940b10464a7630c570e7717035cc032e5ae3bec7c4f937f00d8e'. Jun 24 12:31:48.049394 osdx OSDxCLI[18080]: User 'admin' entered the configuration menu. Jun 24 12:31:48.168893 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 24 12:31:48.329062 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 24 12:31:48.437554 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDsRGdRi9qUCxBGSnYwxXDncXA1zAMuWuO-x8T5N_ANjgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk''. Jun 24 12:31:48.524856 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 24 12:31:48.703972 osdx ca-certificates[17432]: Updating certificates in /etc/ssl/certs... Jun 24 12:31:49.442278 osdx ca-certificates[18420]: 1 added, 0 removed; done. Jun 24 12:31:49.448391 osdx ca-certificates[18427]: Running hooks in /etc/ca-certificates/update.d... Jun 24 12:31:49.453340 osdx ca-certificates[18429]: done. Jun 24 12:31:49.575853 osdx systemd[1]: Started DNSCrypt client proxy. Jun 24 12:31:49.577765 osdx cfgd[1115]: [18080]Completed change to active configuration Jun 24 12:31:49.581910 osdx OSDxCLI[18080]: User 'admin' committed the configuration. Jun 24 12:31:49.597463 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] dnscrypt-proxy 2.0.45 Jun 24 12:31:49.597942 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] Network connectivity detected Jun 24 12:31:49.598432 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] Dropping privileges Jun 24 12:31:49.601745 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] Network connectivity detected Jun 24 12:31:49.601928 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 24 12:31:49.602023 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 24 12:31:49.602143 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] Firefox workaround initialized Jun 24 12:31:49.602233 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpOTQLlt] Jun 24 12:31:49.624180 osdx OSDxCLI[18080]: User 'admin' left the configuration menu. Jun 24 12:31:49.765073 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] [RD] OK (DoH) - rtt: 117ms Jun 24 12:31:49.765073 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] Server with the lowest initial latency: RD (rtt: 117ms) Jun 24 12:31:49.765073 osdx dnscrypt-proxy[18479]: [2024-06-24 12:31:49] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
82:1f:89:52:02:93:8a:f7:8b:09:88:f2:a2:e0:16:06:43:5c:cb:66:63:57:03:92:02:f4:eb:33:88:f8:5b:2b
Step 2: Set the following configuration in DUT0:
set system certificate trust running://remote.dns-server.crt set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 82:1f:89:52:02:93:8a:f7:8b:09:88:f2:a2:e0:16:06:43:5c:cb:66:63:57:03:92:02:f4:eb:33:88:f8:5b:2b set service dns resolver local
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
-- Logs begin at Mon 2024-06-24 12:31:57 UTC, end at Mon 2024-06-24 12:32:01 UTC. -- Jun 24 12:31:57.366398 osdx systemd-journald[596]: Runtime journal (/run/log/journal/9a819f3302304ea795867ea7c248068f) is 2.0M, max 16.0M, 14.0M free. Jun 24 12:31:57.391408 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system journal clear'. Jun 24 12:31:58.056367 osdx osdx-coredump[20131]: Deleting all coredumps in /opt/vyatta/etc/config/coredump... Jun 24 12:31:58.064650 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system coredump delete all'. Jun 24 12:31:58.997025 osdx OSDxCLI[18080]: User 'admin' entered the configuration menu. Jun 24 12:31:59.132437 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 24 12:31:59.209725 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 24 12:31:59.368123 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 24 12:31:59.468427 osdx cfgd[1115]: [18080]Completed change to active configuration Jun 24 12:31:59.507376 osdx OSDxCLI[18080]: User 'admin' committed the configuration. Jun 24 12:31:59.540799 osdx OSDxCLI[18080]: User 'admin' left the configuration menu. Jun 24 12:31:59.727777 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 24 12:31:59.869725 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 24 12:32:00.065091 osdx OSDxCLI[18080]: User 'admin' entered the configuration menu. Jun 24 12:32:00.157789 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 24 12:32:00.250342 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 24 12:32:00.341875 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Jun 24 12:32:00.430020 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Jun 24 12:32:00.521739 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Jun 24 12:32:00.644003 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 82:1f:89:52:02:93:8a:f7:8b:09:88:f2:a2:e0:16:06:43:5c:cb:66:63:57:03:92:02:f4:eb:33:88:f8:5b:2b'. Jun 24 12:32:00.724000 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 24 12:32:00.879079 osdx ca-certificates[20246]: Updating certificates in /etc/ssl/certs... Jun 24 12:32:01.666457 osdx ca-certificates[21234]: 1 added, 0 removed; done. Jun 24 12:32:01.673169 osdx ca-certificates[21241]: Running hooks in /etc/ca-certificates/update.d... Jun 24 12:32:01.678224 osdx ca-certificates[21243]: done. Jun 24 12:32:01.843906 osdx systemd[1]: Started DNSCrypt client proxy. Jun 24 12:32:01.846394 osdx cfgd[1115]: [18080]Completed change to active configuration Jun 24 12:32:01.850547 osdx OSDxCLI[18080]: User 'admin' committed the configuration. Jun 24 12:32:01.876837 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] dnscrypt-proxy 2.0.45 Jun 24 12:32:01.877376 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] Network connectivity detected Jun 24 12:32:01.877921 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] Dropping privileges Jun 24 12:32:01.891297 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] Network connectivity detected Jun 24 12:32:01.891297 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 24 12:32:01.891297 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 24 12:32:01.891297 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] Firefox workaround initialized Jun 24 12:32:01.891297 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp24KmiB] Jun 24 12:32:01.893072 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] [RD] OK (DNSCrypt) - rtt: 1ms Jun 24 12:32:01.893072 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] Server with the lowest initial latency: RD (rtt: 1ms) Jun 24 12:32:01.893072 osdx dnscrypt-proxy[21293]: [2024-06-24 12:32:01] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jun 24 12:32:01.904588 osdx OSDxCLI[18080]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
82:1f:89:52:02:93:8a:f7:8b:09:88:f2:a2:e0:16:06:43:5c:cb:66:63:57:03:92:02:f4:eb:33:88:f8:5b:2b
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 82:1f:89:52:02:93:8a:f7:8b:09:88:f2:a2:e0:16:06:43:5c:cb:66:63:57:03:92:02:f4:eb:33:88:f8:5b:2b ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIIfiVICk4r3iwmI8qLgFgZDXMtmY1cDkgL06zOI-FsrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0:
set system certificate trust running://remote.dns-server.crt set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIIfiVICk4r3iwmI8qLgFgZDXMtmY1cDkgL06zOI-FsrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
-- Logs begin at Mon 2024-06-24 12:32:10 UTC, end at Mon 2024-06-24 12:32:14 UTC. -- Jun 24 12:32:10.359404 osdx systemd-journald[596]: Runtime journal (/run/log/journal/9a819f3302304ea795867ea7c248068f) is 2.0M, max 16.0M, 14.0M free. Jun 24 12:32:10.395462 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system journal clear'. Jun 24 12:32:11.186174 osdx osdx-coredump[22944]: Deleting all coredumps in /opt/vyatta/etc/config/coredump... Jun 24 12:32:11.195040 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'system coredump delete all'. Jun 24 12:32:11.993599 osdx OSDxCLI[18080]: User 'admin' entered the configuration menu. Jun 24 12:32:12.124517 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 24 12:32:12.201015 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 24 12:32:12.347409 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 24 12:32:12.442224 osdx cfgd[1115]: [18080]Completed change to active configuration Jun 24 12:32:12.489949 osdx OSDxCLI[18080]: User 'admin' committed the configuration. Jun 24 12:32:12.514663 osdx OSDxCLI[18080]: User 'admin' left the configuration menu. Jun 24 12:32:12.693479 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 24 12:32:12.843717 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 24 12:32:12.998261 osdx OSDxCLI[18080]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 82:1f:89:52:02:93:8a:f7:8b:09:88:f2:a2:e0:16:06:43:5c:cb:66:63:57:03:92:02:f4:eb:33:88:f8:5b:2b ip 10.215.168.1 port 8443'. Jun 24 12:32:13.183465 osdx OSDxCLI[18080]: User 'admin' entered the configuration menu. Jun 24 12:32:13.314494 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 24 12:32:13.453445 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 24 12:32:13.590549 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIIfiVICk4r3iwmI8qLgFgZDXMtmY1cDkgL06zOI-FsrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z''. Jun 24 12:32:13.670088 osdx OSDxCLI[18080]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 24 12:32:13.820788 osdx ca-certificates[23059]: Updating certificates in /etc/ssl/certs... Jun 24 12:32:14.541525 osdx ca-certificates[24043]: 1 added, 0 removed; done. Jun 24 12:32:14.546149 osdx ca-certificates[24050]: Running hooks in /etc/ca-certificates/update.d... Jun 24 12:32:14.550970 osdx ca-certificates[24052]: done. Jun 24 12:32:14.661245 osdx systemd[1]: Started DNSCrypt client proxy. Jun 24 12:32:14.663967 osdx cfgd[1115]: [18080]Completed change to active configuration Jun 24 12:32:14.668097 osdx OSDxCLI[18080]: User 'admin' committed the configuration. Jun 24 12:32:14.687252 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] dnscrypt-proxy 2.0.45 Jun 24 12:32:14.687624 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] Network connectivity detected Jun 24 12:32:14.688011 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] Dropping privileges Jun 24 12:32:14.691056 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] Network connectivity detected Jun 24 12:32:14.691151 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 24 12:32:14.691151 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 24 12:32:14.691151 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] Firefox workaround initialized Jun 24 12:32:14.691151 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] Loading the set of cloaking rules from [/tmp/tmppctBTZ] Jun 24 12:32:14.691883 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 24 12:32:14.691940 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 24 12:32:14.691940 osdx dnscrypt-proxy[24102]: [2024-06-24 12:32:14] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jun 24 12:32:14.708931 osdx OSDxCLI[18080]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
teldat.com has address 19.18.17.16