Static
Test suite to validate using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0
:
set system certificate trust running://remote.dns-server.crt set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns proxy static RD protocol dns-over-https hash 9318e2e56982477fc6b475380974063c5118b284c903c789dc529dd2081e79b9 set service dns resolver local
Step 2: Run command system journal show | cat
at DUT0
and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
-- Logs begin at Thu 2024-10-10 06:52:34 UTC, end at Thu 2024-10-10 06:52:38 UTC. -- Oct 10 06:52:34.402712 osdx systemd-journald[1712]: Runtime journal (/run/log/journal/c2d6011d26b547ba87daa360869210a1) is 2.0M, max 16.0M, 14.0M free. Oct 10 06:52:34.436215 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'system journal clear'. Oct 10 06:52:35.080806 osdx osdx-coredump[7430]: Deleting all coredumps in /opt/vyatta/etc/config/coredump... Oct 10 06:52:35.090539 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 06:52:36.011220 osdx OSDxCLI[1889]: User 'admin' entered the configuration menu. Oct 10 06:52:36.154600 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 06:52:36.245656 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 06:52:36.479260 osdx cfgd[1328]: [1889]Completed change to active configuration Oct 10 06:52:36.519111 osdx OSDxCLI[1889]: User 'admin' committed the configuration. Oct 10 06:52:36.559396 osdx OSDxCLI[1889]: User 'admin' left the configuration menu. Oct 10 06:52:36.736537 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 06:52:36.914914 osdx OSDxCLI[1889]: User 'admin' entered the configuration menu. Oct 10 06:52:37.021021 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 06:52:37.116898 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 06:52:37.238563 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Oct 10 06:52:37.318290 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Oct 10 06:52:37.423512 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 9318e2e56982477fc6b475380974063c5118b284c903c789dc529dd2081e79b9'. Oct 10 06:52:37.534524 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 06:52:37.677427 osdx ca-certificates[7542]: Updating certificates in /etc/ssl/certs... Oct 10 06:52:38.365711 osdx ca-certificates[8525]: 1 added, 0 removed; done. Oct 10 06:52:38.370618 osdx ca-certificates[8532]: Running hooks in /etc/ca-certificates/update.d... Oct 10 06:52:38.375248 osdx ca-certificates[8534]: done. Oct 10 06:52:38.492738 osdx systemd[1]: Started DNSCrypt client proxy. Oct 10 06:52:38.494942 osdx cfgd[1328]: [1889]Completed change to active configuration Oct 10 06:52:38.498236 osdx OSDxCLI[1889]: User 'admin' committed the configuration. Oct 10 06:52:38.519854 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 06:52:38.520114 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] Network connectivity detected Oct 10 06:52:38.520421 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] Dropping privileges Oct 10 06:52:38.523810 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] Network connectivity detected Oct 10 06:52:38.523924 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 06:52:38.523924 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 06:52:38.523924 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] Firefox workaround initialized Oct 10 06:52:38.523924 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpRyuUoz] Oct 10 06:52:38.527825 osdx OSDxCLI[1889]: User 'admin' left the configuration menu. Oct 10 06:52:38.675800 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] [RD] OK (DoH) - rtt: 111ms Oct 10 06:52:38.675800 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] Server with the lowest initial latency: RD (rtt: 111ms) Oct 10 06:52:38.675800 osdx dnscrypt-proxy[8584]: [2024-10-10 06:52:38] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A
at DUT0
and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 9318e2e56982477fc6b475380974063c5118b284c903c789dc529dd2081e79b9
at DUT0
and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCTGOLlaYJHf8a0dTgJdAY8URiyhMkDx4ncUp3SCB55uQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0
:
set system certificate trust running://remote.dns-server.crt set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCTGOLlaYJHf8a0dTgJdAY8URiyhMkDx4ncUp3SCB55uQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local
Step 3: Run command system journal show | cat
at DUT0
and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
-- Logs begin at Thu 2024-10-10 06:52:46 UTC, end at Thu 2024-10-10 06:52:51 UTC. -- Oct 10 06:52:46.380129 osdx systemd-journald[1712]: Runtime journal (/run/log/journal/c2d6011d26b547ba87daa360869210a1) is 2.0M, max 16.0M, 14.0M free. Oct 10 06:52:46.410255 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'system journal clear'. Oct 10 06:52:47.084768 osdx osdx-coredump[10234]: Deleting all coredumps in /opt/vyatta/etc/config/coredump... Oct 10 06:52:47.094696 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 06:52:48.114212 osdx OSDxCLI[1889]: User 'admin' entered the configuration menu. Oct 10 06:52:48.277457 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 06:52:48.401123 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 06:52:48.666955 osdx cfgd[1328]: [1889]Completed change to active configuration Oct 10 06:52:48.717230 osdx OSDxCLI[1889]: User 'admin' committed the configuration. Oct 10 06:52:48.785023 osdx OSDxCLI[1889]: User 'admin' left the configuration menu. Oct 10 06:52:48.980233 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 06:52:49.199522 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 9318e2e56982477fc6b475380974063c5118b284c903c789dc529dd2081e79b9'. Oct 10 06:52:49.392537 osdx OSDxCLI[1889]: User 'admin' entered the configuration menu. Oct 10 06:52:49.510676 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 06:52:49.623594 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 06:52:49.755828 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCTGOLlaYJHf8a0dTgJdAY8URiyhMkDx4ncUp3SCB55uQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk''. Oct 10 06:52:49.866130 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 06:52:50.003874 osdx ca-certificates[10348]: Updating certificates in /etc/ssl/certs... Oct 10 06:52:50.733398 osdx ca-certificates[11331]: 1 added, 0 removed; done. Oct 10 06:52:50.739754 osdx ca-certificates[11338]: Running hooks in /etc/ca-certificates/update.d... Oct 10 06:52:50.745732 osdx ca-certificates[11340]: done. Oct 10 06:52:50.866034 osdx systemd[1]: Started DNSCrypt client proxy. Oct 10 06:52:50.869147 osdx cfgd[1328]: [1889]Completed change to active configuration Oct 10 06:52:50.872995 osdx OSDxCLI[1889]: User 'admin' committed the configuration. Oct 10 06:52:50.904014 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:50] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 06:52:50.904014 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:50] [NOTICE] Network connectivity detected Oct 10 06:52:50.904014 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:50] [NOTICE] Dropping privileges Oct 10 06:52:50.909695 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:50] [NOTICE] Network connectivity detected Oct 10 06:52:50.909695 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:50] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 06:52:50.909695 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:50] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 06:52:50.909695 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:50] [NOTICE] Firefox workaround initialized Oct 10 06:52:50.909695 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:50] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpu8QVlS] Oct 10 06:52:50.910498 osdx OSDxCLI[1889]: User 'admin' left the configuration menu. Oct 10 06:52:51.072384 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:51] [NOTICE] [RD] OK (DoH) - rtt: 123ms Oct 10 06:52:51.072384 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:51] [NOTICE] Server with the lowest initial latency: RD (rtt: 123ms) Oct 10 06:52:51.072384 osdx dnscrypt-proxy[11390]: [2024-10-10 06:52:51] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A
at DUT0
and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt
at DUT0
and expect this output:
Show output
8f:55:bf:24:0a:dd:ec:43:e6:03:c6:11:d8:7f:8e:48:84:2f:29:c7:d8:62:12:d4:5f:84:06:e4:56:ab:df:3f
Step 2: Set the following configuration in DUT0
:
set system certificate trust running://remote.dns-server.crt set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 8f:55:bf:24:0a:dd:ec:43:e6:03:c6:11:d8:7f:8e:48:84:2f:29:c7:d8:62:12:d4:5f:84:06:e4:56:ab:df:3f set service dns resolver local
Step 3: Run command system journal show | cat
at DUT0
and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
-- Logs begin at Thu 2024-10-10 06:52:59 UTC, end at Thu 2024-10-10 06:53:03 UTC. -- Oct 10 06:52:59.383020 osdx systemd-journald[1712]: Runtime journal (/run/log/journal/c2d6011d26b547ba87daa360869210a1) is 2.0M, max 16.0M, 14.0M free. Oct 10 06:52:59.401255 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'system journal clear'. Oct 10 06:53:00.030954 osdx osdx-coredump[13041]: Deleting all coredumps in /opt/vyatta/etc/config/coredump... Oct 10 06:53:00.040468 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 06:53:01.027845 osdx OSDxCLI[1889]: User 'admin' entered the configuration menu. Oct 10 06:53:01.182813 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 06:53:01.311840 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 06:53:01.585376 osdx cfgd[1328]: [1889]Completed change to active configuration Oct 10 06:53:01.633462 osdx OSDxCLI[1889]: User 'admin' committed the configuration. Oct 10 06:53:01.672063 osdx OSDxCLI[1889]: User 'admin' left the configuration menu. Oct 10 06:53:01.855198 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 06:53:01.998598 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Oct 10 06:53:02.170016 osdx OSDxCLI[1889]: User 'admin' entered the configuration menu. Oct 10 06:53:02.269963 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 06:53:02.385924 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 06:53:02.485085 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Oct 10 06:53:02.578072 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Oct 10 06:53:02.674088 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Oct 10 06:53:02.776912 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 8f:55:bf:24:0a:dd:ec:43:e6:03:c6:11:d8:7f:8e:48:84:2f:29:c7:d8:62:12:d4:5f:84:06:e4:56:ab:df:3f'. Oct 10 06:53:02.851517 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 06:53:03.007149 osdx ca-certificates[13161]: Updating certificates in /etc/ssl/certs... Oct 10 06:53:03.716260 osdx ca-certificates[14145]: 1 added, 0 removed; done. Oct 10 06:53:03.722340 osdx ca-certificates[14151]: Running hooks in /etc/ca-certificates/update.d... Oct 10 06:53:03.728565 osdx ca-certificates[14153]: done. Oct 10 06:53:03.861897 osdx systemd[1]: Started DNSCrypt client proxy. Oct 10 06:53:03.863376 osdx cfgd[1328]: [1889]Completed change to active configuration Oct 10 06:53:03.866959 osdx OSDxCLI[1889]: User 'admin' committed the configuration. Oct 10 06:53:03.882060 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 06:53:03.882060 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] Network connectivity detected Oct 10 06:53:03.882060 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] Dropping privileges Oct 10 06:53:03.884811 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] Network connectivity detected Oct 10 06:53:03.884916 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 06:53:03.884916 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 06:53:03.884916 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] Firefox workaround initialized Oct 10 06:53:03.884916 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp6vZO_B] Oct 10 06:53:03.885833 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Oct 10 06:53:03.885833 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Oct 10 06:53:03.885833 osdx dnscrypt-proxy[14203]: [2024-10-10 06:53:03] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Oct 10 06:53:03.906239 osdx OSDxCLI[1889]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A
at DUT0
and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt
at DUT0
and expect this output:
Show output
8f:55:bf:24:0a:dd:ec:43:e6:03:c6:11:d8:7f:8e:48:84:2f:29:c7:d8:62:12:d4:5f:84:06:e4:56:ab:df:3f
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 8f:55:bf:24:0a:dd:ec:43:e6:03:c6:11:d8:7f:8e:48:84:2f:29:c7:d8:62:12:d4:5f:84:06:e4:56:ab:df:3f ip 10.215.168.1 port 8443
at DUT0
and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzII9VvyQK3exD5gPGEdh_jkiELynH2GIS1F-EBuRWq98_GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0
:
set system certificate trust running://remote.dns-server.crt set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzII9VvyQK3exD5gPGEdh_jkiELynH2GIS1F-EBuRWq98_GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local
Step 4: Run command system journal show | cat
at DUT0
and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
-- Logs begin at Thu 2024-10-10 06:53:12 UTC, end at Thu 2024-10-10 06:53:16 UTC. -- Oct 10 06:53:12.435157 osdx systemd-journald[1712]: Runtime journal (/run/log/journal/c2d6011d26b547ba87daa360869210a1) is 2.0M, max 16.0M, 14.0M free. Oct 10 06:53:12.466151 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'system journal clear'. Oct 10 06:53:13.178798 osdx osdx-coredump[15854]: Deleting all coredumps in /opt/vyatta/etc/config/coredump... Oct 10 06:53:13.189047 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 06:53:14.040443 osdx OSDxCLI[1889]: User 'admin' entered the configuration menu. Oct 10 06:53:14.183770 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 06:53:14.261954 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 06:53:14.499647 osdx cfgd[1328]: [1889]Completed change to active configuration Oct 10 06:53:14.537699 osdx OSDxCLI[1889]: User 'admin' committed the configuration. Oct 10 06:53:14.564873 osdx OSDxCLI[1889]: User 'admin' left the configuration menu. Oct 10 06:53:14.745553 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 06:53:14.949951 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Oct 10 06:53:15.122621 osdx OSDxCLI[1889]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 8f:55:bf:24:0a:dd:ec:43:e6:03:c6:11:d8:7f:8e:48:84:2f:29:c7:d8:62:12:d4:5f:84:06:e4:56:ab:df:3f ip 10.215.168.1 port 8443'. Oct 10 06:53:15.308846 osdx OSDxCLI[1889]: User 'admin' entered the configuration menu. Oct 10 06:53:15.409911 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 06:53:15.530395 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 06:53:15.645118 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzII9VvyQK3exD5gPGEdh_jkiELynH2GIS1F-EBuRWq98_GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z''. Oct 10 06:53:15.772049 osdx OSDxCLI[1889]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 06:53:15.909103 osdx ca-certificates[15970]: Updating certificates in /etc/ssl/certs... Oct 10 06:53:16.603232 osdx ca-certificates[16954]: 1 added, 0 removed; done. Oct 10 06:53:16.607586 osdx ca-certificates[16960]: Running hooks in /etc/ca-certificates/update.d... Oct 10 06:53:16.612036 osdx ca-certificates[16962]: done. Oct 10 06:53:16.716596 osdx systemd[1]: Started DNSCrypt client proxy. Oct 10 06:53:16.718795 osdx cfgd[1328]: [1889]Completed change to active configuration Oct 10 06:53:16.722375 osdx OSDxCLI[1889]: User 'admin' committed the configuration. Oct 10 06:53:16.746130 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 06:53:16.746470 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] Network connectivity detected Oct 10 06:53:16.746628 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] Dropping privileges Oct 10 06:53:16.749298 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] Network connectivity detected Oct 10 06:53:16.749298 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 06:53:16.749420 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 06:53:16.749420 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] Firefox workaround initialized Oct 10 06:53:16.749420 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpldN1WV] Oct 10 06:53:16.750233 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Oct 10 06:53:16.750233 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Oct 10 06:53:16.750233 osdx dnscrypt-proxy[17012]: [2024-10-10 06:53:16] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Oct 10 06:53:16.755828 osdx OSDxCLI[1889]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A
at DUT0
and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
teldat.com has address 19.18.17.16