Static

Test suite to validate using one of the DNS options available in an upstream server

DNS-over-HTTPS Server

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.

Scenario

Step 1: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns proxy static RD protocol dns-over-https hash 563c4f02c5ec6eb3d02a1ff7b1e2ca38884464e5e7e227ba087ee6524ee6fbac
set service dns resolver local

Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$
Show output
-- Logs begin at Thu 2024-01-25 00:12:13 UTC, end at Thu 2024-01-25 00:12:17 UTC. --
Jan 25 00:12:13.358004 osdx systemd-journald[1486]: Runtime journal (/run/log/journal/6c43fcb6d98c40f095ee4a4601056b4b) is 2.0M, max 16.0M, 14.0M free.
Jan 25 00:12:13.374178 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system journal clear'.
Jan 25 00:12:13.513515 osdx zebra[1048]: [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 25 00:12:13.968724 osdx osdx-coredump[9072]: Deleting all coredumps in /opt/vyatta/etc/config/coredump...
Jan 25 00:12:13.978997 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 25 00:12:14.389704 osdx zebra[1048]: [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 25 00:12:14.841762 osdx OSDxCLI[13176]: User 'admin' entered the configuration menu.
Jan 25 00:12:14.961491 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Jan 25 00:12:15.083856 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 25 00:12:15.240188 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 25 00:12:15.362419 osdx cfgd[1112]: [13176]Completed change to active configuration
Jan 25 00:12:15.407181 osdx OSDxCLI[13176]: User 'admin' committed the configuration.
Jan 25 00:12:15.452664 osdx OSDxCLI[13176]: User 'admin' left the configuration menu.
Jan 25 00:12:15.675402 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Jan 25 00:12:15.883258 osdx OSDxCLI[13176]: User 'admin' entered the configuration menu.
Jan 25 00:12:15.980785 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Jan 25 00:12:16.071446 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Jan 25 00:12:16.168808 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Jan 25 00:12:16.256959 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Jan 25 00:12:16.380665 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 563c4f02c5ec6eb3d02a1ff7b1e2ca38884464e5e7e227ba087ee6524ee6fbac'.
Jan 25 00:12:16.468662 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Jan 25 00:12:16.593937 osdx ca-certificates[9208]: Updating certificates in /etc/ssl/certs...
Jan 25 00:12:17.238720 osdx ca-certificates[10193]: 1 added, 0 removed; done.
Jan 25 00:12:17.244409 osdx ca-certificates[10197]: Running hooks in /etc/ca-certificates/update.d...
Jan 25 00:12:17.249433 osdx ca-certificates[10201]: done.
Jan 25 00:12:17.358811 osdx systemd[1]: Started DNSCrypt client proxy.
Jan 25 00:12:17.362050 osdx cfgd[1112]: [13176]Completed change to active configuration
Jan 25 00:12:17.369626 osdx OSDxCLI[13176]: User 'admin' committed the configuration.
Jan 25 00:12:17.390660 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] dnscrypt-proxy 2.0.45
Jan 25 00:12:17.391060 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] Network connectivity detected
Jan 25 00:12:17.391637 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] Dropping privileges
Jan 25 00:12:17.393882 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] Network connectivity detected
Jan 25 00:12:17.394022 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 25 00:12:17.394106 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 25 00:12:17.394197 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] Firefox workaround initialized
Jan 25 00:12:17.394276 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpTvOmdw]
Jan 25 00:12:17.415862 osdx OSDxCLI[13176]: User 'admin' left the configuration menu.
Jan 25 00:12:17.618136 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 25 00:12:17.621522 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] [RD] OK (DoH) - rtt: 192ms
Jan 25 00:12:17.621522 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] Server with the lowest initial latency: RD (rtt: 192ms)
Jan 25 00:12:17.621522 osdx dnscrypt-proxy[10251]: [2024-01-25 00:12:17] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNS-over-HTTPS Server With Stamp

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 563c4f02c5ec6eb3d02a1ff7b1e2ca38884464e5e7e227ba087ee6524ee6fbac at DUT0 and expect this output:

Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBWPE8Cxexus9AqH_ex4so4iERk5efiJ7oIfuZSTub7rApyZW1vdGUuZG5zCi9kbnMtcXVlcnk

Step 2: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBWPE8Cxexus9AqH_ex4so4iERk5efiJ7oIfuZSTub7rApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'
set service dns resolver local

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$
Show output
-- Logs begin at Thu 2024-01-25 00:12:25 UTC, end at Thu 2024-01-25 00:12:29 UTC. --
Jan 25 00:12:25.352922 osdx systemd-journald[1486]: Runtime journal (/run/log/journal/6c43fcb6d98c40f095ee4a4601056b4b) is 2.0M, max 16.0M, 14.0M free.
Jan 25 00:12:25.369427 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system journal clear'.
Jan 25 00:12:25.588639 osdx zebra[1048]: [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 25 00:12:25.992772 osdx osdx-coredump[11899]: Deleting all coredumps in /opt/vyatta/etc/config/coredump...
Jan 25 00:12:26.000784 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 25 00:12:26.890002 osdx OSDxCLI[13176]: User 'admin' entered the configuration menu.
Jan 25 00:12:27.042120 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Jan 25 00:12:27.153980 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 25 00:12:27.369708 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 25 00:12:27.480035 osdx cfgd[1112]: [13176]Completed change to active configuration
Jan 25 00:12:27.524334 osdx OSDxCLI[13176]: User 'admin' committed the configuration.
Jan 25 00:12:27.581460 osdx OSDxCLI[13176]: User 'admin' left the configuration menu.
Jan 25 00:12:27.777668 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Jan 25 00:12:27.958721 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 563c4f02c5ec6eb3d02a1ff7b1e2ca38884464e5e7e227ba087ee6524ee6fbac'.
Jan 25 00:12:28.128989 osdx OSDxCLI[13176]: User 'admin' entered the configuration menu.
Jan 25 00:12:28.237801 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Jan 25 00:12:28.356073 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Jan 25 00:12:28.453792 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBWPE8Cxexus9AqH_ex4so4iERk5efiJ7oIfuZSTub7rApyZW1vdGUuZG5zCi9kbnMtcXVlcnk''.
Jan 25 00:12:28.518975 osdx zebra[1048]: [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 25 00:12:28.536623 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Jan 25 00:12:28.717166 osdx ca-certificates[12035]: Updating certificates in /etc/ssl/certs...
Jan 25 00:12:29.396138 osdx zebra[1048]: [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 25 00:12:29.404819 osdx ca-certificates[13019]: 1 added, 0 removed; done.
Jan 25 00:12:29.412857 osdx ca-certificates[13023]: Running hooks in /etc/ca-certificates/update.d...
Jan 25 00:12:29.419798 osdx ca-certificates[13027]: done.
Jan 25 00:12:29.524844 osdx systemd[1]: Started DNSCrypt client proxy.
Jan 25 00:12:29.527716 osdx cfgd[1112]: [13176]Completed change to active configuration
Jan 25 00:12:29.535122 osdx OSDxCLI[13176]: User 'admin' committed the configuration.
Jan 25 00:12:29.556702 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] dnscrypt-proxy 2.0.45
Jan 25 00:12:29.557073 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] Network connectivity detected
Jan 25 00:12:29.557676 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] Dropping privileges
Jan 25 00:12:29.559901 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] Network connectivity detected
Jan 25 00:12:29.560062 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 25 00:12:29.560146 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 25 00:12:29.560238 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] Firefox workaround initialized
Jan 25 00:12:29.560313 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpjRypAc]
Jan 25 00:12:29.596499 osdx OSDxCLI[13176]: User 'admin' left the configuration menu.
Jan 25 00:12:29.839976 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] [RD] OK (DoH) - rtt: 246ms
Jan 25 00:12:29.839976 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] Server with the lowest initial latency: RD (rtt: 246ms)
Jan 25 00:12:29.839976 osdx dnscrypt-proxy[13077]: [2024-01-25 00:12:29] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Jan 25 00:12:29.843824 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system journal show | cat'.

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNSCrypt Server

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server.

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Show output
7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f

Step 2: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-crypt ip 10.215.168.1
set service dns proxy static RD protocol dns-crypt port 8443
set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns
set service dns proxy static RD protocol dns-crypt provider public-key 7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f
set service dns resolver local

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$
Show output
-- Logs begin at Thu 2024-01-25 00:12:38 UTC, end at Thu 2024-01-25 00:12:42 UTC. --
Jan 25 00:12:38.345967 osdx systemd-journald[1486]: Runtime journal (/run/log/journal/6c43fcb6d98c40f095ee4a4601056b4b) is 2.0M, max 16.0M, 14.0M free.
Jan 25 00:12:38.359538 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system journal clear'.
Jan 25 00:12:38.992774 osdx osdx-coredump[14728]: Deleting all coredumps in /opt/vyatta/etc/config/coredump...
Jan 25 00:12:39.000664 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 25 00:12:39.887862 osdx OSDxCLI[13176]: User 'admin' entered the configuration menu.
Jan 25 00:12:40.016102 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Jan 25 00:12:40.119552 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 25 00:12:40.308484 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 25 00:12:40.413364 osdx cfgd[1112]: [13176]Completed change to active configuration
Jan 25 00:12:40.459069 osdx OSDxCLI[13176]: User 'admin' committed the configuration.
Jan 25 00:12:40.500830 osdx OSDxCLI[13176]: User 'admin' left the configuration menu.
Jan 25 00:12:40.692590 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Jan 25 00:12:40.835430 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Jan 25 00:12:40.950987 osdx zebra[1048]: [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 25 00:12:41.009994 osdx OSDxCLI[13176]: User 'admin' entered the configuration menu.
Jan 25 00:12:41.106502 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Jan 25 00:12:41.210299 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Jan 25 00:12:41.332782 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'.
Jan 25 00:12:41.421695 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'.
Jan 25 00:12:41.565356 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'.
Jan 25 00:12:41.722415 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f'.
Jan 25 00:12:41.820834 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Jan 25 00:12:41.964754 osdx ca-certificates[14867]: Updating certificates in /etc/ssl/certs...
Jan 25 00:12:42.650905 osdx ca-certificates[15851]: 1 added, 0 removed; done.
Jan 25 00:12:42.657553 osdx ca-certificates[15855]: Running hooks in /etc/ca-certificates/update.d...
Jan 25 00:12:42.664750 osdx ca-certificates[15859]: done.
Jan 25 00:12:42.793688 osdx systemd[1]: Started DNSCrypt client proxy.
Jan 25 00:12:42.797845 osdx cfgd[1112]: [13176]Completed change to active configuration
Jan 25 00:12:42.807895 osdx OSDxCLI[13176]: User 'admin' committed the configuration.
Jan 25 00:12:42.830911 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] dnscrypt-proxy 2.0.45
Jan 25 00:12:42.831351 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] Network connectivity detected
Jan 25 00:12:42.832039 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] Dropping privileges
Jan 25 00:12:42.834417 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] Network connectivity detected
Jan 25 00:12:42.834598 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 25 00:12:42.834685 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 25 00:12:42.834778 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] Firefox workaround initialized
Jan 25 00:12:42.834859 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpZvIRIM]
Jan 25 00:12:42.839483 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Jan 25 00:12:42.840002 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Jan 25 00:12:42.840524 osdx OSDxCLI[13176]: User 'admin' left the configuration menu.
Jan 25 00:12:42.841121 osdx dnscrypt-proxy[15909]: [2024-01-25 00:12:42] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNSCrypt Server With Stamp

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Show output
7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f

Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f ip 10.215.168.1 port 8443 at DUT0 and expect this output:

Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHs0NMuQVuVoH0klX7xe7_onkRWUO88bWP8X3rHjTNqPGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z

Step 3: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHs0NMuQVuVoH0klX7xe7_onkRWUO88bWP8X3rHjTNqPGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'
set service dns resolver local

Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$
Show output
-- Logs begin at Thu 2024-01-25 00:12:50 UTC, end at Thu 2024-01-25 00:12:55 UTC. --
Jan 25 00:12:50.400764 osdx systemd-journald[1486]: Runtime journal (/run/log/journal/6c43fcb6d98c40f095ee4a4601056b4b) is 2.0M, max 16.0M, 14.0M free.
Jan 25 00:12:50.416291 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system journal clear'.
Jan 25 00:12:51.035147 osdx osdx-coredump[17553]: Deleting all coredumps in /opt/vyatta/etc/config/coredump...
Jan 25 00:12:51.044899 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 25 00:12:52.004306 osdx OSDxCLI[13176]: User 'admin' entered the configuration menu.
Jan 25 00:12:52.148745 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Jan 25 00:12:52.297755 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 25 00:12:52.499937 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 25 00:12:52.614794 osdx cfgd[1112]: [13176]Completed change to active configuration
Jan 25 00:12:52.660559 osdx OSDxCLI[13176]: User 'admin' committed the configuration.
Jan 25 00:12:52.702839 osdx OSDxCLI[13176]: User 'admin' left the configuration menu.
Jan 25 00:12:52.920881 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Jan 25 00:12:53.092223 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Jan 25 00:12:53.256696 osdx OSDxCLI[13176]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f ip 10.215.168.1 port 8443'.
Jan 25 00:12:53.427803 osdx OSDxCLI[13176]: User 'admin' entered the configuration menu.
Jan 25 00:12:53.561754 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Jan 25 00:12:53.729393 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Jan 25 00:12:53.850897 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHs0NMuQVuVoH0klX7xe7_onkRWUO88bWP8X3rHjTNqPGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z''.
Jan 25 00:12:53.982598 osdx OSDxCLI[13176]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Jan 25 00:12:54.218721 osdx ca-certificates[17691]: Updating certificates in /etc/ssl/certs...
Jan 25 00:12:54.977949 osdx ca-certificates[18675]: 1 added, 0 removed; done.
Jan 25 00:12:54.984365 osdx ca-certificates[18679]: Running hooks in /etc/ca-certificates/update.d...
Jan 25 00:12:54.990136 osdx ca-certificates[18683]: done.
Jan 25 00:12:55.126298 osdx systemd[1]: Started DNSCrypt client proxy.
Jan 25 00:12:55.130981 osdx cfgd[1112]: [13176]Completed change to active configuration
Jan 25 00:12:55.142017 osdx OSDxCLI[13176]: User 'admin' committed the configuration.
Jan 25 00:12:55.164098 osdx zebra[1048]: [RZ3YY-GPH41][EC 100663310] snmp[warning]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 25 00:12:55.173631 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] dnscrypt-proxy 2.0.45
Jan 25 00:12:55.174207 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] Network connectivity detected
Jan 25 00:12:55.174915 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] Dropping privileges
Jan 25 00:12:55.178406 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] Network connectivity detected
Jan 25 00:12:55.178660 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 25 00:12:55.178776 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 25 00:12:55.178915 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] Firefox workaround initialized
Jan 25 00:12:55.179025 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpFmftjZ]
Jan 25 00:12:55.180600 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Jan 25 00:12:55.180780 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Jan 25 00:12:55.180906 osdx dnscrypt-proxy[18733]: [2024-01-25 00:12:55] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Jan 25 00:12:55.190337 osdx OSDxCLI[13176]: User 'admin' left the configuration menu.

Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16