Static

Test suite to validate using one of the DNS options available in an upstream server

DNS-over-HTTPS Server

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.

Scenario

Step 1: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns proxy static RD protocol dns-over-https hash 171e241c983e5338d0576e20b4a1cb028529a8b59a18a90702379e01bd2a26af
set service dns resolver local

Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$
Show output
-- Logs begin at Tue 2024-04-23 16:50:06 UTC, end at Tue 2024-04-23 16:50:08 UTC. --
Apr 23 16:50:06.300894 osdx systemd-journald[567]: Runtime journal (/run/log/journal/6df91b3cebc34c1981199ddec73128ac) is 2.0M, max 16.0M, 14.0M free.
Apr 23 16:50:06.309313 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'system journal clear'.
Apr 23 16:50:06.551847 osdx OSDxCLI[1600]: User 'admin' entered the configuration menu.
Apr 23 16:50:06.661154 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.10/24'.
Apr 23 16:50:06.721096 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 23 16:50:06.844915 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 23 16:50:06.903052 osdx cfgd[1182]: [1600]Completed change to active configuration
Apr 23 16:50:06.931223 osdx OSDxCLI[1600]: User 'admin' committed the configuration.
Apr 23 16:50:06.958651 osdx OSDxCLI[1600]: User 'admin' left the configuration menu.
Apr 23 16:50:07.093953 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Apr 23 16:50:07.262556 osdx OSDxCLI[1600]: User 'admin' entered the configuration menu.
Apr 23 16:50:07.327331 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Apr 23 16:50:07.457133 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Apr 23 16:50:07.514008 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Apr 23 16:50:07.606864 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Apr 23 16:50:07.660800 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 171e241c983e5338d0576e20b4a1cb028529a8b59a18a90702379e01bd2a26af'.
Apr 23 16:50:07.745329 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Apr 23 16:50:07.817834 osdx ca-certificates[11264]: Updating certificates in /etc/ssl/certs...
Apr 23 16:50:08.211358 osdx ca-certificates[12249]: 1 added, 0 removed; done.
Apr 23 16:50:08.215346 osdx ca-certificates[12252]: Running hooks in /etc/ca-certificates/update.d...
Apr 23 16:50:08.218898 osdx ca-certificates[12256]: done.
Apr 23 16:50:08.291176 osdx systemd[1]: Started DNSCrypt client proxy.
Apr 23 16:50:08.293279 osdx cfgd[1182]: [1600]Completed change to active configuration
Apr 23 16:50:08.297903 osdx OSDxCLI[1600]: User 'admin' committed the configuration.
Apr 23 16:50:08.311488 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] dnscrypt-proxy 2.0.45
Apr 23 16:50:08.313362 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] Network connectivity detected
Apr 23 16:50:08.313791 osdx OSDxCLI[1600]: User 'admin' left the configuration menu.
Apr 23 16:50:08.314302 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] Dropping privileges
Apr 23 16:50:08.315898 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] Network connectivity detected
Apr 23 16:50:08.315980 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 23 16:50:08.316016 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 23 16:50:08.316069 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] Firefox workaround initialized
Apr 23 16:50:08.316101 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp7hxxiT]
Apr 23 16:50:08.451275 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'system journal show | cat'.
Apr 23 16:50:08.453470 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] [RD] OK (DoH) - rtt: 115ms
Apr 23 16:50:08.453470 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] Server with the lowest initial latency: RD (rtt: 115ms)
Apr 23 16:50:08.453470 osdx dnscrypt-proxy[12307]: [2024-04-23 16:50:08] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNS-over-HTTPS Server With Stamp

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 171e241c983e5338d0576e20b4a1cb028529a8b59a18a90702379e01bd2a26af at DUT0 and expect this output:

Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAXHiQcmD5TONBXbiC0ocsChSmotZoYqQcCN54BvSomrwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk

Step 2: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAXHiQcmD5TONBXbiC0ocsChSmotZoYqQcCN54BvSomrwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'
set service dns resolver local

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$
Show output
-- Logs begin at Tue 2024-04-23 16:50:14 UTC, end at Tue 2024-04-23 16:50:16 UTC. --
Apr 23 16:50:14.272118 osdx systemd-journald[567]: Runtime journal (/run/log/journal/6df91b3cebc34c1981199ddec73128ac) is 2.0M, max 16.0M, 14.0M free.
Apr 23 16:50:14.280584 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'system journal clear'.
Apr 23 16:50:14.507009 osdx OSDxCLI[1600]: User 'admin' entered the configuration menu.
Apr 23 16:50:14.629371 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.10/24'.
Apr 23 16:50:14.698215 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 23 16:50:14.868408 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 23 16:50:14.931111 osdx cfgd[1182]: [1600]Completed change to active configuration
Apr 23 16:50:14.958766 osdx OSDxCLI[1600]: User 'admin' committed the configuration.
Apr 23 16:50:14.976869 osdx OSDxCLI[1600]: User 'admin' left the configuration menu.
Apr 23 16:50:15.107079 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Apr 23 16:50:15.219201 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 171e241c983e5338d0576e20b4a1cb028529a8b59a18a90702379e01bd2a26af'.
Apr 23 16:50:15.357583 osdx OSDxCLI[1600]: User 'admin' entered the configuration menu.
Apr 23 16:50:15.412711 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Apr 23 16:50:15.501197 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Apr 23 16:50:15.559324 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAXHiQcmD5TONBXbiC0ocsChSmotZoYqQcCN54BvSomrwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk''.
Apr 23 16:50:15.641373 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Apr 23 16:50:15.712185 osdx ca-certificates[14050]: Updating certificates in /etc/ssl/certs...
Apr 23 16:50:16.102106 osdx ca-certificates[15034]: 1 added, 0 removed; done.
Apr 23 16:50:16.106098 osdx ca-certificates[15037]: Running hooks in /etc/ca-certificates/update.d...
Apr 23 16:50:16.109523 osdx ca-certificates[15041]: done.
Apr 23 16:50:16.174256 osdx systemd[1]: Started DNSCrypt client proxy.
Apr 23 16:50:16.176474 osdx cfgd[1182]: [1600]Completed change to active configuration
Apr 23 16:50:16.181457 osdx OSDxCLI[1600]: User 'admin' committed the configuration.
Apr 23 16:50:16.194168 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] dnscrypt-proxy 2.0.45
Apr 23 16:50:16.194403 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] Network connectivity detected
Apr 23 16:50:16.196195 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] Dropping privileges
Apr 23 16:50:16.196499 osdx OSDxCLI[1600]: User 'admin' left the configuration menu.
Apr 23 16:50:16.198197 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] Network connectivity detected
Apr 23 16:50:16.198282 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 23 16:50:16.198318 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 23 16:50:16.198370 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] Firefox workaround initialized
Apr 23 16:50:16.198401 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpzv3czS]
Apr 23 16:50:16.333729 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'system journal show | cat'.
Apr 23 16:50:16.335250 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] [RD] OK (DoH) - rtt: 116ms
Apr 23 16:50:16.335250 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] Server with the lowest initial latency: RD (rtt: 116ms)
Apr 23 16:50:16.335250 osdx dnscrypt-proxy[15092]: [2024-04-23 16:50:16] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNSCrypt Server

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server.

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Show output
dc:d9:dc:57:cd:2b:c0:23:c8:a4:36:61:ae:ff:82:ae:30:65:10:c9:bf:32:93:07:9d:01:f1:7c:d3:ec:03:06

Step 2: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-crypt ip 10.215.168.1
set service dns proxy static RD protocol dns-crypt port 8443
set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns
set service dns proxy static RD protocol dns-crypt provider public-key dc:d9:dc:57:cd:2b:c0:23:c8:a4:36:61:ae:ff:82:ae:30:65:10:c9:bf:32:93:07:9d:01:f1:7c:d3:ec:03:06
set service dns resolver local

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$
Show output
-- Logs begin at Tue 2024-04-23 16:50:21 UTC, end at Tue 2024-04-23 16:50:23 UTC. --
Apr 23 16:50:21.292732 osdx systemd-journald[567]: Runtime journal (/run/log/journal/6df91b3cebc34c1981199ddec73128ac) is 2.0M, max 16.0M, 14.0M free.
Apr 23 16:50:21.301043 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'system journal clear'.
Apr 23 16:50:21.524613 osdx OSDxCLI[1600]: User 'admin' entered the configuration menu.
Apr 23 16:50:21.624860 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.10/24'.
Apr 23 16:50:21.676069 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 23 16:50:21.793720 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 23 16:50:21.855635 osdx cfgd[1182]: [1600]Completed change to active configuration
Apr 23 16:50:21.882978 osdx OSDxCLI[1600]: User 'admin' committed the configuration.
Apr 23 16:50:21.908496 osdx OSDxCLI[1600]: User 'admin' left the configuration menu.
Apr 23 16:50:22.038375 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Apr 23 16:50:22.143333 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Apr 23 16:50:22.292085 osdx OSDxCLI[1600]: User 'admin' entered the configuration menu.
Apr 23 16:50:22.363338 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Apr 23 16:50:22.466000 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Apr 23 16:50:22.538841 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'.
Apr 23 16:50:22.635509 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'.
Apr 23 16:50:22.708507 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'.
Apr 23 16:50:22.823422 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key dc:d9:dc:57:cd:2b:c0:23:c8:a4:36:61:ae:ff:82:ae:30:65:10:c9:bf:32:93:07:9d:01:f1:7c:d3:ec:03:06'.
Apr 23 16:50:22.879922 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Apr 23 16:50:23.003500 osdx ca-certificates[16836]: Updating certificates in /etc/ssl/certs...
Apr 23 16:50:23.434838 osdx ca-certificates[17820]: 1 added, 0 removed; done.
Apr 23 16:50:23.439972 osdx ca-certificates[17824]: Running hooks in /etc/ca-certificates/update.d...
Apr 23 16:50:23.443835 osdx ca-certificates[17828]: done.
Apr 23 16:50:23.518620 osdx systemd[1]: Started DNSCrypt client proxy.
Apr 23 16:50:23.520876 osdx cfgd[1182]: [1600]Completed change to active configuration
Apr 23 16:50:23.526300 osdx OSDxCLI[1600]: User 'admin' committed the configuration.
Apr 23 16:50:23.538370 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] dnscrypt-proxy 2.0.45
Apr 23 16:50:23.538612 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] Network connectivity detected
Apr 23 16:50:23.538959 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] Dropping privileges
Apr 23 16:50:23.541235 osdx OSDxCLI[1600]: User 'admin' left the configuration menu.
Apr 23 16:50:23.542942 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] Network connectivity detected
Apr 23 16:50:23.543034 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 23 16:50:23.543073 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 23 16:50:23.543124 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] Firefox workaround initialized
Apr 23 16:50:23.543160 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp1_kL8z]
Apr 23 16:50:23.543775 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Apr 23 16:50:23.543837 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Apr 23 16:50:23.543873 osdx dnscrypt-proxy[17878]: [2024-04-23 16:50:23] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNSCrypt Server With Stamp

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Show output
dc:d9:dc:57:cd:2b:c0:23:c8:a4:36:61:ae:ff:82:ae:30:65:10:c9:bf:32:93:07:9d:01:f1:7c:d3:ec:03:06

Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key dc:d9:dc:57:cd:2b:c0:23:c8:a4:36:61:ae:ff:82:ae:30:65:10:c9:bf:32:93:07:9d:01:f1:7c:d3:ec:03:06 ip 10.215.168.1 port 8443 at DUT0 and expect this output:

Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzINzZ3FfNK8AjyKQ2Ya7_gq4wZRDJvzKTB50B8XzT7AMGGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z

Step 3: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzINzZ3FfNK8AjyKQ2Ya7_gq4wZRDJvzKTB50B8XzT7AMGGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'
set service dns resolver local

Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$
Show output
-- Logs begin at Tue 2024-04-23 16:50:29 UTC, end at Tue 2024-04-23 16:50:31 UTC. --
Apr 23 16:50:29.273874 osdx systemd-journald[567]: Runtime journal (/run/log/journal/6df91b3cebc34c1981199ddec73128ac) is 2.0M, max 16.0M, 14.0M free.
Apr 23 16:50:29.285015 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'system journal clear'.
Apr 23 16:50:29.503184 osdx OSDxCLI[1600]: User 'admin' entered the configuration menu.
Apr 23 16:50:29.566311 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.10/24'.
Apr 23 16:50:29.649879 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 23 16:50:29.761760 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 23 16:50:29.830494 osdx cfgd[1182]: [1600]Completed change to active configuration
Apr 23 16:50:29.857680 osdx OSDxCLI[1600]: User 'admin' committed the configuration.
Apr 23 16:50:29.884677 osdx OSDxCLI[1600]: User 'admin' left the configuration menu.
Apr 23 16:50:30.007612 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Apr 23 16:50:30.103382 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Apr 23 16:50:30.188551 osdx OSDxCLI[1600]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key dc:d9:dc:57:cd:2b:c0:23:c8:a4:36:61:ae:ff:82:ae:30:65:10:c9:bf:32:93:07:9d:01:f1:7c:d3:ec:03:06 ip 10.215.168.1 port 8443'.
Apr 23 16:50:30.345409 osdx OSDxCLI[1600]: User 'admin' entered the configuration menu.
Apr 23 16:50:30.408247 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Apr 23 16:50:30.489398 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Apr 23 16:50:30.582438 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzINzZ3FfNK8AjyKQ2Ya7_gq4wZRDJvzKTB50B8XzT7AMGGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z''.
Apr 23 16:50:30.657098 osdx OSDxCLI[1600]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Apr 23 16:50:30.734051 osdx ca-certificates[19617]: Updating certificates in /etc/ssl/certs...
Apr 23 16:50:31.174384 osdx ca-certificates[20601]: 1 added, 0 removed; done.
Apr 23 16:50:31.178217 osdx ca-certificates[20604]: Running hooks in /etc/ca-certificates/update.d...
Apr 23 16:50:31.181659 osdx ca-certificates[20608]: done.
Apr 23 16:50:31.261261 osdx systemd[1]: Started DNSCrypt client proxy.
Apr 23 16:50:31.263355 osdx cfgd[1182]: [1600]Completed change to active configuration
Apr 23 16:50:31.270664 osdx OSDxCLI[1600]: User 'admin' committed the configuration.
Apr 23 16:50:31.284528 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] dnscrypt-proxy 2.0.45
Apr 23 16:50:31.284878 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] Network connectivity detected
Apr 23 16:50:31.285373 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] Dropping privileges
Apr 23 16:50:31.287837 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] Network connectivity detected
Apr 23 16:50:31.287956 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 23 16:50:31.288010 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 23 16:50:31.288078 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] Firefox workaround initialized
Apr 23 16:50:31.288123 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpozQgXF]
Apr 23 16:50:31.288995 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Apr 23 16:50:31.289073 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Apr 23 16:50:31.289121 osdx dnscrypt-proxy[20659]: [2024-04-23 16:50:31] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Apr 23 16:50:31.295205 osdx OSDxCLI[1600]: User 'admin' left the configuration menu.

Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16