Static

Test suite to validate using one of the DNS options available in an upstream server

DNS-over-HTTPS Server

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.

Scenario

Step 1: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns proxy static RD protocol dns-over-https hash 563c4f02c5ec6eb3d02a1ff7b1e2ca38884464e5e7e227ba087ee6524ee6fbac
set service dns resolver local

Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$
Show output
-- Logs begin at Tue 2024-02-13 15:02:58 UTC, end at Tue 2024-02-13 15:03:05 UTC. --
Feb 13 15:02:58.635819 osdx systemd-journald[1694]: Runtime journal (/run/log/journal/80d0e0b412184be1883eb13133ae3f69) is 2.0M, max 16.0M, 14.0M free.
Feb 13 15:02:58.659497 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'system journal clear'.
Feb 13 15:02:59.555361 osdx osdx-coredump[21262]: Deleting all coredumps in /opt/vyatta/etc/config/coredump...
Feb 13 15:02:59.567322 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'system coredump delete all'.
Feb 13 15:03:00.811685 osdx OSDxCLI[22889]: User 'admin' entered the configuration menu.
Feb 13 15:03:00.970318 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Feb 13 15:03:01.134134 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Feb 13 15:03:01.429712 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Feb 13 15:03:01.645725 osdx cfgd[1320]: [22889]Completed change to active configuration
Feb 13 15:03:01.713347 osdx OSDxCLI[22889]: User 'admin' committed the configuration.
Feb 13 15:03:01.763354 osdx OSDxCLI[22889]: User 'admin' left the configuration menu.
Feb 13 15:03:02.004718 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Feb 13 15:03:02.359013 osdx OSDxCLI[22889]: User 'admin' entered the configuration menu.
Feb 13 15:03:02.538313 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Feb 13 15:03:02.742534 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Feb 13 15:03:02.933776 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Feb 13 15:03:03.117383 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Feb 13 15:03:03.234198 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 563c4f02c5ec6eb3d02a1ff7b1e2ca38884464e5e7e227ba087ee6524ee6fbac'.
Feb 13 15:03:03.380035 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Feb 13 15:03:03.618099 osdx ca-certificates[21403]: Updating certificates in /etc/ssl/certs...
Feb 13 15:03:04.596630 osdx ca-certificates[22387]: 1 added, 0 removed; done.
Feb 13 15:03:04.605746 osdx ca-certificates[22392]: Running hooks in /etc/ca-certificates/update.d...
Feb 13 15:03:04.613146 osdx ca-certificates[22395]: done.
Feb 13 15:03:04.826607 osdx systemd[1]: Started DNSCrypt client proxy.
Feb 13 15:03:04.830897 osdx cfgd[1320]: [22889]Completed change to active configuration
Feb 13 15:03:04.840723 osdx OSDxCLI[22889]: User 'admin' committed the configuration.
Feb 13 15:03:04.872188 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:04] [NOTICE] dnscrypt-proxy 2.0.45
Feb 13 15:03:04.872686 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:04] [NOTICE] Network connectivity detected
Feb 13 15:03:04.873279 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:04] [NOTICE] Dropping privileges
Feb 13 15:03:04.876442 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:04] [NOTICE] Network connectivity detected
Feb 13 15:03:04.876651 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:04] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Feb 13 15:03:04.876760 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:04] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Feb 13 15:03:04.876882 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:04] [NOTICE] Firefox workaround initialized
Feb 13 15:03:04.876987 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:04] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpbhsrU7]
Feb 13 15:03:04.931183 osdx OSDxCLI[22889]: User 'admin' left the configuration menu.
Feb 13 15:03:05.104647 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:05] [NOTICE] [RD] OK (DoH) - rtt: 136ms
Feb 13 15:03:05.104850 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:05] [NOTICE] Server with the lowest initial latency: RD (rtt: 136ms)
Feb 13 15:03:05.104952 osdx dnscrypt-proxy[22445]: [2024-02-13 15:03:05] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNS-over-HTTPS Server With Stamp

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 563c4f02c5ec6eb3d02a1ff7b1e2ca38884464e5e7e227ba087ee6524ee6fbac at DUT0 and expect this output:

Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBWPE8Cxexus9AqH_ex4so4iERk5efiJ7oIfuZSTub7rApyZW1vdGUuZG5zCi9kbnMtcXVlcnk

Step 2: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBWPE8Cxexus9AqH_ex4so4iERk5efiJ7oIfuZSTub7rApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'
set service dns resolver local

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$
Show output
-- Logs begin at Tue 2024-02-13 15:03:16 UTC, end at Tue 2024-02-13 15:03:22 UTC. --
Feb 13 15:03:16.593012 osdx systemd-journald[1694]: Runtime journal (/run/log/journal/80d0e0b412184be1883eb13133ae3f69) is 2.0M, max 16.0M, 14.0M free.
Feb 13 15:03:16.613233 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'system journal clear'.
Feb 13 15:03:17.585043 osdx osdx-coredump[24089]: Deleting all coredumps in /opt/vyatta/etc/config/coredump...
Feb 13 15:03:17.596988 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'system coredump delete all'.
Feb 13 15:03:19.086242 osdx OSDxCLI[22889]: User 'admin' entered the configuration menu.
Feb 13 15:03:19.292227 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Feb 13 15:03:19.525633 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Feb 13 15:03:19.735855 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Feb 13 15:03:19.892162 osdx cfgd[1320]: [22889]Completed change to active configuration
Feb 13 15:03:19.961630 osdx OSDxCLI[22889]: User 'admin' committed the configuration.
Feb 13 15:03:20.031426 osdx OSDxCLI[22889]: User 'admin' left the configuration menu.
Feb 13 15:03:20.280798 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Feb 13 15:03:20.550914 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 563c4f02c5ec6eb3d02a1ff7b1e2ca38884464e5e7e227ba087ee6524ee6fbac'.
Feb 13 15:03:20.780163 osdx OSDxCLI[22889]: User 'admin' entered the configuration menu.
Feb 13 15:03:20.909268 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Feb 13 15:03:21.076430 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Feb 13 15:03:21.212027 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBWPE8Cxexus9AqH_ex4so4iERk5efiJ7oIfuZSTub7rApyZW1vdGUuZG5zCi9kbnMtcXVlcnk''.
Feb 13 15:03:21.354701 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Feb 13 15:03:21.527223 osdx ca-certificates[24226]: Updating certificates in /etc/ssl/certs...
Feb 13 15:03:22.275265 osdx ca-certificates[25210]: 1 added, 0 removed; done.
Feb 13 15:03:22.283593 osdx ca-certificates[25214]: Running hooks in /etc/ca-certificates/update.d...
Feb 13 15:03:22.291578 osdx ca-certificates[25218]: done.
Feb 13 15:03:22.444786 osdx systemd[1]: Started DNSCrypt client proxy.
Feb 13 15:03:22.449138 osdx cfgd[1320]: [22889]Completed change to active configuration
Feb 13 15:03:22.456183 osdx OSDxCLI[22889]: User 'admin' committed the configuration.
Feb 13 15:03:22.511698 osdx OSDxCLI[22889]: User 'admin' left the configuration menu.
Feb 13 15:03:22.516845 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] dnscrypt-proxy 2.0.45
Feb 13 15:03:22.517377 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] Network connectivity detected
Feb 13 15:03:22.518088 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] Dropping privileges
Feb 13 15:03:22.521577 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] Network connectivity detected
Feb 13 15:03:22.521812 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Feb 13 15:03:22.521924 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Feb 13 15:03:22.522053 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] Firefox workaround initialized
Feb 13 15:03:22.522162 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpmXmMQy]
Feb 13 15:03:22.700312 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] [RD] OK (DoH) - rtt: 122ms
Feb 13 15:03:22.701612 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] Server with the lowest initial latency: RD (rtt: 122ms)
Feb 13 15:03:22.701834 osdx dnscrypt-proxy[25268]: [2024-02-13 15:03:22] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNSCrypt Server

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server.

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Show output
7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f

Step 2: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-crypt ip 10.215.168.1
set service dns proxy static RD protocol dns-crypt port 8443
set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns
set service dns proxy static RD protocol dns-crypt provider public-key 7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f
set service dns resolver local

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$
Show output
-- Logs begin at Tue 2024-02-13 15:03:32 UTC, end at Tue 2024-02-13 15:03:37 UTC. --
Feb 13 15:03:32.376050 osdx systemd-journald[1694]: Runtime journal (/run/log/journal/80d0e0b412184be1883eb13133ae3f69) is 2.0M, max 16.0M, 14.0M free.
Feb 13 15:03:32.393574 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'system journal clear'.
Feb 13 15:03:33.122247 osdx osdx-coredump[26911]: Deleting all coredumps in /opt/vyatta/etc/config/coredump...
Feb 13 15:03:33.132653 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'system coredump delete all'.
Feb 13 15:03:34.227958 osdx OSDxCLI[22889]: User 'admin' entered the configuration menu.
Feb 13 15:03:34.381658 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Feb 13 15:03:34.513005 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Feb 13 15:03:34.689940 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Feb 13 15:03:34.837794 osdx cfgd[1320]: [22889]Completed change to active configuration
Feb 13 15:03:34.907072 osdx OSDxCLI[22889]: User 'admin' committed the configuration.
Feb 13 15:03:34.979176 osdx OSDxCLI[22889]: User 'admin' left the configuration menu.
Feb 13 15:03:35.205901 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Feb 13 15:03:35.386493 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Feb 13 15:03:35.647275 osdx OSDxCLI[22889]: User 'admin' entered the configuration menu.
Feb 13 15:03:35.754957 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Feb 13 15:03:35.901541 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Feb 13 15:03:36.032176 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'.
Feb 13 15:03:36.137351 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'.
Feb 13 15:03:36.250872 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'.
Feb 13 15:03:36.400541 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f'.
Feb 13 15:03:36.545337 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Feb 13 15:03:36.748655 osdx ca-certificates[27050]: Updating certificates in /etc/ssl/certs...
Feb 13 15:03:37.517193 osdx ca-certificates[28034]: 1 added, 0 removed; done.
Feb 13 15:03:37.526602 osdx ca-certificates[28038]: Running hooks in /etc/ca-certificates/update.d...
Feb 13 15:03:37.533544 osdx ca-certificates[28042]: done.
Feb 13 15:03:37.699200 osdx systemd[1]: Started DNSCrypt client proxy.
Feb 13 15:03:37.702143 osdx cfgd[1320]: [22889]Completed change to active configuration
Feb 13 15:03:37.710888 osdx OSDxCLI[22889]: User 'admin' committed the configuration.
Feb 13 15:03:37.734618 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] dnscrypt-proxy 2.0.45
Feb 13 15:03:37.735031 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] Network connectivity detected
Feb 13 15:03:37.735622 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] Dropping privileges
Feb 13 15:03:37.737835 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] Network connectivity detected
Feb 13 15:03:37.737990 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Feb 13 15:03:37.738074 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Feb 13 15:03:37.738168 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] Firefox workaround initialized
Feb 13 15:03:37.738242 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpvMgg0R]
Feb 13 15:03:37.739575 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Feb 13 15:03:37.739677 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Feb 13 15:03:37.739760 osdx dnscrypt-proxy[28092]: [2024-02-13 15:03:37] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Feb 13 15:03:37.753821 osdx OSDxCLI[22889]: User 'admin' left the configuration menu.

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16

DNSCrypt Server With Stamp

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Show output
7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f

Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f ip 10.215.168.1 port 8443 at DUT0 and expect this output:

Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHs0NMuQVuVoH0klX7xe7_onkRWUO88bWP8X3rHjTNqPGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z

Step 3: Set the following configuration in DUT0:

set system certificate trust running://remote.dns-server.crt
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHs0NMuQVuVoH0klX7xe7_onkRWUO88bWP8X3rHjTNqPGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'
set service dns resolver local

Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$
Show output
-- Logs begin at Tue 2024-02-13 15:03:45 UTC, end at Tue 2024-02-13 15:03:50 UTC. --
Feb 13 15:03:45.381517 osdx systemd-journald[1694]: Runtime journal (/run/log/journal/80d0e0b412184be1883eb13133ae3f69) is 2.0M, max 16.0M, 14.0M free.
Feb 13 15:03:45.400936 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'system journal clear'.
Feb 13 15:03:46.032344 osdx osdx-coredump[29736]: Deleting all coredumps in /opt/vyatta/etc/config/coredump...
Feb 13 15:03:46.040199 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'system coredump delete all'.
Feb 13 15:03:47.096797 osdx OSDxCLI[22889]: User 'admin' entered the configuration menu.
Feb 13 15:03:47.221209 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Feb 13 15:03:47.322278 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Feb 13 15:03:47.492801 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Feb 13 15:03:47.608132 osdx cfgd[1320]: [22889]Completed change to active configuration
Feb 13 15:03:47.663119 osdx OSDxCLI[22889]: User 'admin' committed the configuration.
Feb 13 15:03:47.706950 osdx OSDxCLI[22889]: User 'admin' left the configuration menu.
Feb 13 15:03:47.903966 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'ping 10.215.168.1      count 1 size 56 timeout 1'.
Feb 13 15:03:48.063286 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Feb 13 15:03:48.215447 osdx OSDxCLI[22889]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 7b:34:34:cb:90:56:e5:68:1f:49:25:5f:bc:5e:ef:fa:27:91:15:94:3b:cf:1b:58:ff:17:de:b1:e3:4c:da:8f ip 10.215.168.1 port 8443'.
Feb 13 15:03:48.436748 osdx OSDxCLI[22889]: User 'admin' entered the configuration menu.
Feb 13 15:03:48.580386 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Feb 13 15:03:48.688779 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Feb 13 15:03:48.821047 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHs0NMuQVuVoH0klX7xe7_onkRWUO88bWP8X3rHjTNqPGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z''.
Feb 13 15:03:48.926010 osdx OSDxCLI[22889]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Feb 13 15:03:49.060261 osdx ca-certificates[29875]: Updating certificates in /etc/ssl/certs...
Feb 13 15:03:49.820139 osdx ca-certificates[30859]: 1 added, 0 removed; done.
Feb 13 15:03:49.828009 osdx ca-certificates[30864]: Running hooks in /etc/ca-certificates/update.d...
Feb 13 15:03:49.833278 osdx ca-certificates[30867]: done.
Feb 13 15:03:49.960952 osdx systemd[1]: Started DNSCrypt client proxy.
Feb 13 15:03:49.963742 osdx cfgd[1320]: [22889]Completed change to active configuration
Feb 13 15:03:49.968540 osdx OSDxCLI[22889]: User 'admin' committed the configuration.
Feb 13 15:03:50.002838 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] dnscrypt-proxy 2.0.45
Feb 13 15:03:50.003340 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] Network connectivity detected
Feb 13 15:03:50.004035 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] Dropping privileges
Feb 13 15:03:50.007947 osdx OSDxCLI[22889]: User 'admin' left the configuration menu.
Feb 13 15:03:50.009991 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] Network connectivity detected
Feb 13 15:03:50.010169 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Feb 13 15:03:50.010279 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Feb 13 15:03:50.010407 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] Firefox workaround initialized
Feb 13 15:03:50.010510 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpeAzvBG]
Feb 13 15:03:50.012110 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Feb 13 15:03:50.012234 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Feb 13 15:03:50.012341 osdx dnscrypt-proxy[30917]: [2024-02-13 15:03:50] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16
Show output
teldat.com has address 19.18.17.16