Dns Priority
Test suite to check DNS service priorities
Valid Address
Description
Configures a simple, valid address and checks the DNS can resolve it. There is no priority involved as a single address is in use.
Scenario
Step 1: Set the following configuration in DUT1:
set interfaces ethernet eth0 address 10.0.0.2/24 set service dns forwarding record host teldat.com ipv4-address 172.24.0.11 set service dns forwarding record host teldat.com ipv6-address ff00::dead:cafe set service dns resolver local
Step 2: Set the following configuration in DUT0:
set interfaces ethernet eth0 address 10.0.0.1/24 set service dns forwarding logs set service dns resolver local set service dns forwarding name-server 10.0.0.2
Step 3: Ping IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.793 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.793/0.793/0.793/0.000 ms
Step 4: Run command show host lookup teldat.com type A wait 0 at DUT0 and check if output contains the following tokens:
172.24.0.11Show output
teldat.com has address 172.24.0.11
Step 5: Run command service dns forwarding show logs | cat at DUT0 and expect this output:
Show output
-- Logs begin at Tue 2024-04-23 16:41:16 UTC, end at Tue 2024-04-23 16:41:18 UTC. -- Apr 23 16:41:17 osdx dnsmasq[22759]: dnsmasq: syntax check OK. Apr 23 16:41:17 osdx dnsmasq[22766]: started, version 2.80 cachesize 150 Apr 23 16:41:17 osdx dnsmasq[22766]: DNS service limited to local subnets Apr 23 16:41:17 osdx dnsmasq[22766]: compile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify dumpfile Apr 23 16:41:17 osdx dnsmasq[22766]: warning: ignoring resolv-file flag because no-resolv is set Apr 23 16:41:17 osdx dnsmasq[22766]: using nameserver 10.0.0.2#53 Apr 23 16:41:17 osdx dnsmasq[22766]: read /etc/hosts - 1 addresses Apr 23 16:41:17 osdx dnsmasq[22766]: query[A] teldat.com from ::1 Apr 23 16:41:17 osdx dnsmasq[22766]: forwarded teldat.com to 10.0.0.2 Apr 23 16:41:17 osdx dnsmasq[22766]: reply teldat.com is 172.24.0.11
Valid Address IPv6
Description
Configures a simple, valid IPv6 address and checks the DNS can resolve it. There is no priority involved as a single address is in use.
Scenario
Step 1: Set the following configuration in DUT1:
set interfaces ethernet eth0 address 10::2/64 set service dns forwarding record host teldat.com ipv4-address 172.24.0.11 set service dns forwarding record host teldat.com ipv6-address ff00::dead:cafe set service dns resolver local
Step 2: Set the following configuration in DUT0:
set interfaces ethernet eth0 address 10::1/64 set service dns forwarding logs set service dns resolver local set service dns forwarding name-server 10::2
Step 3: Ping IP address 10::2 from DUT0:
admin@DUT0$ ping 10::2 count 1 size 56 timeout 1Show output
PING 10::2(10::2) 56 data bytes 64 bytes from 10::2: icmp_seq=1 ttl=64 time=471 ms --- 10::2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 470.781/470.781/470.781/0.000 ms
Step 4: Run command show host lookup teldat.com type A wait 0 at DUT0 and check if output contains the following tokens:
172.24.0.11Show output
teldat.com has address 172.24.0.11
Step 5: Run command service dns forwarding show logs | cat at DUT0 and expect this output:
Show output
-- Logs begin at Tue 2024-04-23 16:41:22 UTC, end at Tue 2024-04-23 16:41:26 UTC. -- Apr 23 16:41:23 osdx dnsmasq[23171]: dnsmasq: syntax check OK. Apr 23 16:41:23 osdx dnsmasq[23178]: started, version 2.80 cachesize 150 Apr 23 16:41:23 osdx dnsmasq[23178]: DNS service limited to local subnets Apr 23 16:41:23 osdx dnsmasq[23178]: compile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify dumpfile Apr 23 16:41:23 osdx dnsmasq[23178]: warning: ignoring resolv-file flag because no-resolv is set Apr 23 16:41:23 osdx dnsmasq[23178]: using nameserver 10::2#53 Apr 23 16:41:23 osdx dnsmasq[23178]: read /etc/hosts - 1 addresses Apr 23 16:41:26 osdx dnsmasq[23178]: query[A] teldat.com from ::1 Apr 23 16:41:26 osdx dnsmasq[23178]: forwarded teldat.com to 10::2 Apr 23 16:41:26 osdx dnsmasq[23178]: reply teldat.com is 172.24.0.11
Multiple Addresses
Description
Configures two DNS addresses: one invalid and the other valid. Checks that the resolution works against the second address, while the first one does not respond.
Scenario
Step 1: Set the following configuration in DUT1:
set interfaces ethernet eth0 address 10.0.0.2/24 set service dns forwarding record host teldat.com ipv4-address 172.24.0.11 set service dns forwarding record host teldat.com ipv6-address ff00::dead:cafe set service dns resolver local
Step 2: Set the following configuration in DUT0:
set interfaces ethernet eth0 address 10.0.0.1/24 set service dns forwarding logs set service dns resolver local set service dns forwarding name-server 10.0.0.10 priority 0 set service dns forwarding name-server 10.0.0.2 priority 1
Step 3: Ping IP address 10.0.0.2 from DUT0:
admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1Show output
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.434 ms --- 10.0.0.2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.434/0.434/0.434/0.000 ms
Step 4: Run command show host lookup teldat.com type A wait 0 at DUT0 and check if output contains the following tokens:
172.24.0.11Show output
teldat.com has address 172.24.0.11
Step 5: Run command service dns forwarding show logs | cat at DUT0 and expect this output:
Show output
-- Logs begin at Tue 2024-04-23 16:41:29 UTC, end at Tue 2024-04-23 16:41:33 UTC. -- Apr 23 16:41:30 osdx dnsmasq[23587]: dnsmasq: syntax check OK. Apr 23 16:41:30 osdx dnsmasq[23594]: started, version 2.80 cachesize 150 Apr 23 16:41:30 osdx dnsmasq[23594]: DNS service limited to local subnets Apr 23 16:41:30 osdx dnsmasq[23594]: compile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify dumpfile Apr 23 16:41:30 osdx dnsmasq[23594]: warning: ignoring resolv-file flag because no-resolv is set Apr 23 16:41:30 osdx dnsmasq[23594]: using nameserver 10.0.0.10#53 Apr 23 16:41:30 osdx dnsmasq[23594]: using nameserver 10.0.0.2#53 Apr 23 16:41:30 osdx dnsmasq[23594]: read /etc/hosts - 1 addresses Apr 23 16:41:31 osdx dnsmasq[23594]: query[A] teldat.com from ::1 Apr 23 16:41:31 osdx dnsmasq[23594]: forwarded teldat.com to 10.0.0.10 Apr 23 16:41:32 osdx dnsmasq[23594]: query[A] teldat.com from 127.0.0.1 Apr 23 16:41:33 osdx dnsmasq[23594]: query[A] teldat.com from ::1 Apr 23 16:41:33 osdx dnsmasq[23594]: forwarded teldat.com to 10.0.0.2 Apr 23 16:41:33 osdx dnsmasq[23594]: reply teldat.com is 172.24.0.11
Multiple IPv6 Addresses
Description
Configures two IPv6 DNS addresses: one invalid and the other valid. Checks that the resolution works against the second address, while the first one does not respond.
Scenario
Step 1: Set the following configuration in DUT1:
set interfaces ethernet eth0 address 10::2/64 set service dns forwarding record host teldat.com ipv4-address 172.24.0.11 set service dns forwarding record host teldat.com ipv6-address ff00::dead:cafe set service dns resolver local
Step 2: Set the following configuration in DUT0:
set interfaces ethernet eth0 address 10::1/64 set service dns forwarding logs set service dns resolver local set service dns forwarding name-server 10::10 priority 0 set service dns forwarding name-server 10::2 priority 1
Step 3: Ping IP address 10::2 from DUT0:
admin@DUT0$ ping 10::2 count 1 size 56 timeout 1Show output
PING 10::2(10::2) 56 data bytes 64 bytes from 10::2: icmp_seq=1 ttl=64 time=0.714 ms --- 10::2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.714/0.714/0.714/0.000 ms
Step 4: Run command show host lookup teldat.com type A wait 0 at DUT0 and check if output contains the following tokens:
172.24.0.11Show output
teldat.com has address 172.24.0.11
Step 5: Run command service dns forwarding show logs | cat at DUT0 and expect this output:
Show output
-- Logs begin at Tue 2024-04-23 16:41:37 UTC, end at Tue 2024-04-23 16:41:42 UTC. -- Apr 23 16:41:38 osdx dnsmasq[24000]: dnsmasq: syntax check OK. Apr 23 16:41:38 osdx dnsmasq[24007]: started, version 2.80 cachesize 150 Apr 23 16:41:38 osdx dnsmasq[24007]: DNS service limited to local subnets Apr 23 16:41:38 osdx dnsmasq[24007]: compile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify dumpfile Apr 23 16:41:38 osdx dnsmasq[24007]: warning: ignoring resolv-file flag because no-resolv is set Apr 23 16:41:38 osdx dnsmasq[24007]: using nameserver 10::10#53 Apr 23 16:41:38 osdx dnsmasq[24007]: using nameserver 10::2#53 Apr 23 16:41:38 osdx dnsmasq[24007]: read /etc/hosts - 1 addresses Apr 23 16:41:40 osdx dnsmasq[24007]: query[A] teldat.com from ::1 Apr 23 16:41:40 osdx dnsmasq[24007]: forwarded teldat.com to 10::10 Apr 23 16:41:41 osdx dnsmasq[24007]: query[A] teldat.com from 127.0.0.1 Apr 23 16:41:42 osdx dnsmasq[24007]: query[A] teldat.com from ::1 Apr 23 16:41:42 osdx dnsmasq[24007]: forwarded teldat.com to 10::2 Apr 23 16:41:42 osdx dnsmasq[24007]: reply teldat.com is 172.24.0.11