Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 3fa6a7cd749d822eac8d17037f1600eb6339d7b285a5edb3613f8a2148729baa set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:05:24.273587 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.8M, max 13.8M, 11.9M free. May 19 18:05:24.274926 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:05:24.274970 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:05:24.282956 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:05:24.473340 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:05:24.673635 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:24.751224 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:05:24.820689 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:05:24.884048 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:24.961082 osdx ubnt-cfgd[834556]: inactive May 19 18:05:24.980067 osdx INFO[834563]: FRR daemons did not change May 19 18:05:25.006921 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:05:25.048433 osdx WARNING[834634]: No supported link modes on interface eth0 May 19 18:05:25.049756 osdx modulelauncher[834634]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:05:25.049766 osdx modulelauncher[834634]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:05:25.050833 osdx modulelauncher[834634]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:05:25.050839 osdx modulelauncher[834634]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:05:25.237965 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:25.238378 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:25.261883 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:25.397758 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:05:25.460128 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:05:25.593211 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:25.655670 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 19 18:05:25.754260 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:05:25.820848 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. May 19 18:05:25.908687 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. May 19 18:05:25.962061 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 3fa6a7cd749d822eac8d17037f1600eb6339d7b285a5edb3613f8a2148729baa'. May 19 18:05:26.049148 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:05:26.117610 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:26.206751 osdx ubnt-cfgd[834740]: inactive May 19 18:05:26.226592 osdx INFO[834749]: FRR daemons did not change May 19 18:05:26.237437 osdx ca-certificates[834765]: Updating certificates in /etc/ssl/certs... May 19 18:05:26.699021 osdx ubnt-cfgd[835777]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:05:26.706415 osdx ca-certificates[835782]: 1 added, 0 removed; done. May 19 18:05:26.709114 osdx ca-certificates[835789]: Running hooks in /etc/ca-certificates/update.d... May 19 18:05:26.711704 osdx ca-certificates[835791]: done. May 19 18:05:26.799279 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:05:26.805211 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:26.805639 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:26.825472 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:05:26.825641 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] Network connectivity detected May 19 18:05:26.825708 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] Dropping privileges May 19 18:05:26.827501 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] Network connectivity detected May 19 18:05:26.827523 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:05:26.827523 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:05:26.827551 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] Firefox workaround initialized May 19 18:05:26.827551 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpr6zz60c3] May 19 18:05:26.851640 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:26.953998 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] [RD] OK (DoH) - rtt: 109ms May 19 18:05:26.953998 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] Server with the lowest initial latency: RD (rtt: 109ms) May 19 18:05:26.953998 osdx dnscrypt-proxy[835847]: [2026-05-19 18:05:26] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run the command system journal show | cat on DUT0 and check whether the output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
May 19 18:05:32.265087 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.8M, max 13.8M, 11.9M free. May 19 18:05:32.266374 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:05:32.266428 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:05:32.275140 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:05:32.468473 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:05:32.668426 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:32.749544 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:05:32.823797 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:05:32.883547 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:32.973647 osdx ubnt-cfgd[837608]: inactive May 19 18:05:32.992091 osdx INFO[837615]: FRR daemons did not change May 19 18:05:33.018326 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:05:33.065303 osdx WARNING[837686]: No supported link modes on interface eth0 May 19 18:05:33.066600 osdx modulelauncher[837686]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:05:33.066611 osdx modulelauncher[837686]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:05:33.067719 osdx modulelauncher[837686]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:05:33.067726 osdx modulelauncher[837686]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:05:33.289453 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:33.289865 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:33.306164 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:33.448923 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:05:33.510713 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:05:33.638455 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:33.701016 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:05:33.848027 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:33.893759 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:33.959436 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:34.120367 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:34.177127 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:05:34.280070 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. May 19 18:05:34.337722 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. May 19 18:05:34.430497 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:05:34.493140 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show changes'. May 19 18:05:34.588382 osdx ubnt-cfgd[837799]: inactive May 19 18:05:34.605886 osdx INFO[837806]: FRR daemons did not change May 19 18:05:34.686675 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:05:34.692978 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:34.693471 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:34.708007 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:05:34.708386 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] Network connectivity detected May 19 18:05:34.708386 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] Dropping privileges May 19 18:05:34.708021 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:34.710188 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] Network connectivity detected May 19 18:05:34.710238 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:05:34.710238 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:05:34.710238 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] Firefox workaround initialized May 19 18:05:34.710238 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpsp5gpqmb] May 19 18:05:34.728159 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABCAse4ZWstJeqrt1hQdQoMC": x509: certificate signed by unknown authority May 19 18:05:34.728159 osdx dnscrypt-proxy[837864]: [2026-05-19 18:05:34] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run the command show host lookup teldat.com type A on DUT0 and expect the following output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:05:44.304554 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.8M, max 13.8M, 11.9M free. May 19 18:05:44.308091 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:05:44.308134 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:05:44.313329 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:05:44.498576 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:05:44.702598 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:44.780661 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:05:44.850202 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:05:44.905941 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:44.994134 osdx ubnt-cfgd[838152]: inactive May 19 18:05:45.033787 osdx INFO[838159]: FRR daemons did not change May 19 18:05:45.064090 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:05:45.121244 osdx WARNING[838230]: No supported link modes on interface eth0 May 19 18:05:45.122514 osdx modulelauncher[838230]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:05:45.122524 osdx modulelauncher[838230]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:05:45.123573 osdx modulelauncher[838230]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:05:45.123580 osdx modulelauncher[838230]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:05:45.329080 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:45.329720 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:45.352518 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:45.495260 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:05:45.555956 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:05:45.680485 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:45.734653 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:05:45.838278 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:45.885251 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:45.949059 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:46.107923 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:46.162644 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:05:46.264751 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. May 19 18:05:46.314943 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. May 19 18:05:46.416053 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. May 19 18:05:46.467212 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:05:46.563317 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show changes'. May 19 18:05:46.617859 osdx ubnt-cfgd[838344]: inactive May 19 18:05:46.636786 osdx INFO[838351]: FRR daemons did not change May 19 18:05:46.728468 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:05:46.734404 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:46.734875 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:46.747845 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:05:46.748049 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] Network connectivity detected May 19 18:05:46.748127 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] Dropping privileges May 19 18:05:46.750175 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] Network connectivity detected May 19 18:05:46.750213 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:05:46.750213 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:05:46.750256 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] Firefox workaround initialized May 19 18:05:46.750256 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpcfil8uqr] May 19 18:05:46.751162 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:46.885735 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] [RD] OK (DoH) - rtt: 128ms May 19 18:05:46.885735 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] Server with the lowest initial latency: RD (rtt: 128ms) May 19 18:05:46.885735 osdx dnscrypt-proxy[838409]: [2026-05-19 18:05:46] [NOTICE] dnscrypt-proxy is ready - live servers: 1 May 19 18:05:46.909326 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'.
Step 4: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 3fa6a7cd749d822eac8d17037f1600eb6339d7b285a5edb3613f8a2148729baa on DUT0 and expect the following output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA_pqfNdJ2CLqyNFwN_FgDrYznXsoWl7bNhP4ohSHKbqgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA_pqfNdJ2CLqyNFwN_FgDrYznXsoWl7bNhP4ohSHKbqgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:05:52.000164 osdx systemd-timedated[780476]: Changed local time to Tue 2026-05-19 18:05:52 UTC May 19 18:05:52.001343 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'set date 2026-05-19 18:05:52'. May 19 18:05:52.002515 osdx systemd-journald[505760]: Time jumped backwards, rotating. May 19 18:05:52.282762 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.8M, max 13.8M, 11.9M free. May 19 18:05:52.286524 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:05:52.286587 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:05:52.292566 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:05:52.484811 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:05:52.684813 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:52.762093 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:05:52.830736 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:05:52.926441 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:52.979626 osdx ubnt-cfgd[838703]: inactive May 19 18:05:52.997911 osdx INFO[838710]: FRR daemons did not change May 19 18:05:53.022519 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:05:53.072086 osdx WARNING[838781]: No supported link modes on interface eth0 May 19 18:05:53.073508 osdx modulelauncher[838781]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:05:53.073520 osdx modulelauncher[838781]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:05:53.074894 osdx modulelauncher[838781]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:05:53.074903 osdx modulelauncher[838781]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:05:53.271083 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:53.271533 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:53.285978 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:53.422573 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:05:53.484533 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:05:53.614616 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 3fa6a7cd749d822eac8d17037f1600eb6339d7b285a5edb3613f8a2148729baa'. May 19 18:05:53.743026 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:53.796951 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 19 18:05:53.893070 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:05:53.948128 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA_pqfNdJ2CLqyNFwN_FgDrYznXsoWl7bNhP4ohSHKbqgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. May 19 18:05:54.035526 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:05:54.099345 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:54.187634 osdx ubnt-cfgd[838888]: inactive May 19 18:05:54.208020 osdx INFO[838897]: FRR daemons did not change May 19 18:05:54.228400 osdx ca-certificates[838913]: Updating certificates in /etc/ssl/certs... May 19 18:05:54.698711 osdx ubnt-cfgd[839925]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:05:54.706214 osdx ca-certificates[839931]: 1 added, 0 removed; done. May 19 18:05:54.709005 osdx ca-certificates[839937]: Running hooks in /etc/ca-certificates/update.d... May 19 18:05:54.711729 osdx ca-certificates[839939]: done. May 19 18:05:54.798762 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:05:54.804143 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:54.804559 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:54.817472 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:05:54.817687 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] Network connectivity detected May 19 18:05:54.817737 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] Dropping privileges May 19 18:05:54.818847 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:54.819590 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] Network connectivity detected May 19 18:05:54.819623 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:05:54.819623 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:05:54.819623 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] Firefox workaround initialized May 19 18:05:54.819659 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp0gtd_gef] May 19 18:05:54.967382 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] [RD] OK (DoH) - rtt: 133ms May 19 18:05:54.967382 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] Server with the lowest initial latency: RD (rtt: 133ms) May 19 18:05:54.967382 osdx dnscrypt-proxy[839995]: [2026-05-19 18:05:54] [NOTICE] dnscrypt-proxy is ready - live servers: 1 May 19 18:05:54.967564 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'.
Step 4: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
May 19 18:06:02.281475 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.9M, max 13.8M, 11.9M free. May 19 18:06:02.281848 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:06:02.281877 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:06:02.290810 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:06:02.486253 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:06:02.687350 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:06:02.765345 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:06:02.834185 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:06:02.890829 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:06:02.981581 osdx ubnt-cfgd[841761]: inactive May 19 18:06:03.000231 osdx INFO[841768]: FRR daemons did not change May 19 18:06:03.025752 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:06:03.070877 osdx WARNING[841839]: No supported link modes on interface eth0 May 19 18:06:03.072194 osdx modulelauncher[841839]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:06:03.072205 osdx modulelauncher[841839]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:06:03.073346 osdx modulelauncher[841839]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:06:03.073354 osdx modulelauncher[841839]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:06:03.292247 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:06:03.293059 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:06:03.314787 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:06:03.451855 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:06:03.513941 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:06:03.626181 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. May 19 18:06:03.758342 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:06:03.812335 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 19 18:06:03.909039 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:06:03.961505 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. May 19 18:06:04.057610 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. May 19 18:06:04.113025 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. May 19 18:06:04.215300 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d'. May 19 18:06:04.261561 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:06:04.369158 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:06:04.427509 osdx ubnt-cfgd[841948]: inactive May 19 18:06:04.449056 osdx INFO[841957]: FRR daemons did not change May 19 18:06:04.460692 osdx ca-certificates[841973]: Updating certificates in /etc/ssl/certs... May 19 18:06:04.928439 osdx ubnt-cfgd[842985]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:06:04.936371 osdx ca-certificates[842991]: 1 added, 0 removed; done. May 19 18:06:04.939064 osdx ca-certificates[842997]: Running hooks in /etc/ca-certificates/update.d... May 19 18:06:04.941604 osdx ca-certificates[842999]: done. May 19 18:06:05.046429 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:06:05.059395 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:06:05.060462 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:06:05.079579 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:06:05.079745 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] Network connectivity detected May 19 18:06:05.079866 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] Dropping privileges May 19 18:06:05.082026 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] Network connectivity detected May 19 18:06:05.082060 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:06:05.082060 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:06:05.082095 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] Firefox workaround initialized May 19 18:06:05.082095 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpq559n7jg] May 19 18:06:05.082666 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms May 19 18:06:05.082701 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) May 19 18:06:05.082701 osdx dnscrypt-proxy[843055]: [2026-05-19 18:06:05] [NOTICE] dnscrypt-proxy is ready - live servers: 1 May 19 18:06:05.091717 osdx OSDxCLI[673163]: User 'admin' left the configuration menu.
Step 4: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d
Step 2: Run the command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d ip 10.215.168.1 port 8443 on DUT0 and expect the following output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGOVuIN_0hUCVfjsyW5kSpytJ0ohaQO3hFvmA49Rd91tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGOVuIN_0hUCVfjsyW5kSpytJ0ohaQO3hFvmA49Rd91tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
May 19 18:06:10.284969 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.9M, max 13.8M, 11.9M free. May 19 18:06:10.285666 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:06:10.285708 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:06:10.293836 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:06:10.488452 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:06:10.685721 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:06:10.765150 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:06:10.833618 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:06:10.937736 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:06:10.991627 osdx ubnt-cfgd[844816]: inactive May 19 18:06:11.011317 osdx INFO[844823]: FRR daemons did not change May 19 18:06:11.037672 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:06:11.080359 osdx WARNING[844894]: No supported link modes on interface eth0 May 19 18:06:11.081706 osdx modulelauncher[844894]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:06:11.081717 osdx modulelauncher[844894]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:06:11.082785 osdx modulelauncher[844894]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:06:11.082792 osdx modulelauncher[844894]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:06:11.279241 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:06:11.279889 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:06:11.297406 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:06:11.440362 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:06:11.501428 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:06:11.613927 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. May 19 18:06:11.697047 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d ip 10.215.168.1 port 8443'. May 19 18:06:11.845940 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:06:11.900712 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 19 18:06:11.996453 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:06:12.052734 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGOVuIN_0hUCVfjsyW5kSpytJ0ohaQO3hFvmA49Rd91tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. May 19 18:06:12.139011 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:06:12.200446 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:06:12.296111 osdx ubnt-cfgd[845003]: inactive May 19 18:06:12.315912 osdx INFO[845012]: FRR daemons did not change May 19 18:06:12.328738 osdx ca-certificates[845028]: Updating certificates in /etc/ssl/certs... May 19 18:06:12.809250 osdx ubnt-cfgd[846040]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:06:12.816861 osdx ca-certificates[846045]: 1 added, 0 removed; done. May 19 18:06:12.820633 osdx ca-certificates[846052]: Running hooks in /etc/ca-certificates/update.d... May 19 18:06:12.823409 osdx ca-certificates[846054]: done. May 19 18:06:12.902062 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:06:12.908385 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:06:12.908820 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:06:12.927046 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:06:12.927215 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] Network connectivity detected May 19 18:06:12.927267 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] Dropping privileges May 19 18:06:12.929302 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] Network connectivity detected May 19 18:06:12.929333 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:06:12.929333 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:06:12.929374 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] Firefox workaround initialized May 19 18:06:12.929374 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpp8l2thqm] May 19 18:06:12.930044 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms May 19 18:06:12.930044 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) May 19 18:06:12.930096 osdx dnscrypt-proxy[846110]: [2026-05-19 18:06:12] [NOTICE] dnscrypt-proxy is ready - live servers: 1 May 19 18:06:12.933441 osdx OSDxCLI[673163]: User 'admin' left the configuration menu.
Step 5: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16