Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 3fa6a7cd749d822eac8d17037f1600eb6339d7b285a5edb3613f8a2148729baa set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:04:20.288870 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.8M, max 13.8M, 11.9M free. May 19 18:04:20.290450 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:04:20.290494 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:04:20.298009 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:04:20.483878 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:04:20.687947 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:04:20.772045 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:04:20.844027 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:04:20.900687 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:20.993331 osdx ubnt-cfgd[821913]: inactive May 19 18:04:21.012152 osdx INFO[821920]: FRR daemons did not change May 19 18:04:21.042455 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:04:21.085601 osdx WARNING[821991]: No supported link modes on interface eth0 May 19 18:04:21.086925 osdx modulelauncher[821991]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:04:21.086936 osdx modulelauncher[821991]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:04:21.088012 osdx modulelauncher[821991]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:04:21.088019 osdx modulelauncher[821991]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:04:21.261426 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:04:21.261846 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:04:21.275922 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:04:21.411867 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:04:21.473982 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:04:22.611585 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:04:22.666060 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 19 18:04:22.761648 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:04:22.826864 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. May 19 18:04:22.917753 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. May 19 18:04:22.978512 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 3fa6a7cd749d822eac8d17037f1600eb6339d7b285a5edb3613f8a2148729baa'. May 19 18:04:23.067261 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. May 19 18:04:23.125499 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. May 19 18:04:23.219610 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:04:23.280020 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 19 18:04:23.387067 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:23.448377 osdx ubnt-cfgd[822100]: inactive May 19 18:04:23.468222 osdx INFO[822109]: FRR daemons did not change May 19 18:04:23.479893 osdx ca-certificates[822124]: Updating certificates in /etc/ssl/certs... May 19 18:04:23.940159 osdx ubnt-cfgd[823137]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:04:23.947405 osdx ca-certificates[823143]: 1 added, 0 removed; done. May 19 18:04:23.950014 osdx ca-certificates[823149]: Running hooks in /etc/ca-certificates/update.d... May 19 18:04:23.952521 osdx ca-certificates[823151]: done. May 19 18:04:24.054799 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:04:24.066570 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:04:24.067246 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:04:24.093318 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:04:24.093505 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Network connectivity detected May 19 18:04:24.093580 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Dropping privileges May 19 18:04:24.095457 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Network connectivity detected May 19 18:04:24.095494 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:04:24.095494 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:04:24.095494 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] May 19 18:04:24.095538 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Firefox workaround initialized May 19 18:04:24.095538 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp29qgfurd] May 19 18:04:24.104020 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:04:24.216226 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] [RD] OK (DoH) - rtt: 105ms May 19 18:04:24.216226 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] Server with the lowest initial latency: RD (rtt: 105ms) May 19 18:04:24.216226 osdx dnscrypt-proxy[823210]: [2026-05-19 18:04:24] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 11bbc425f86552b9414b44984944e670dc5e4f1fdd2effeb8cdcabe205226789 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:04:21.253680 osdx systemd-journald[2065]: Runtime Journal (/run/log/journal/c781b4f3f2134c23a5bd07e1836f7bfd) is 896.0K, max 6.4M, 5.6M free. May 19 18:04:21.257328 osdx systemd-journald[2065]: Received client request to rotate journal, rotating. May 19 18:04:21.257380 osdx systemd-journald[2065]: Vacuuming done, freed 0B of archived journals from /run/log/journal/c781b4f3f2134c23a5bd07e1836f7bfd. May 19 18:04:21.262589 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system journal clear'. May 19 18:04:21.442355 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:04:22.494716 osdx OSDxCLI[434456]: User 'admin' entered the configuration menu. May 19 18:04:22.569868 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. May 19 18:04:22.641110 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:04:22.726870 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service ssh'. May 19 18:04:22.789106 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:22.876087 osdx ubnt-cfgd[580268]: inactive May 19 18:04:22.942818 osdx INFO[580290]: FRR daemons did not change May 19 18:04:22.969992 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:04:23.020500 osdx WARNING[580361]: No supported link modes on interface eth0 May 19 18:04:23.021872 osdx modulelauncher[580361]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:04:23.021883 osdx modulelauncher[580361]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:04:23.023020 osdx modulelauncher[580361]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:04:23.023027 osdx modulelauncher[580361]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:04:23.101378 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... May 19 18:04:23.108857 osdx sshd[580422]: Server listening on 0.0.0.0 port 22. May 19 18:04:23.109030 osdx sshd[580422]: Server listening on :: port 22. May 19 18:04:23.109102 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. May 19 18:04:23.260394 osdx cfgd[1789]: [434456]Completed change to active configuration May 19 18:04:23.260908 osdx OSDxCLI[434456]: User 'admin' committed the configuration. May 19 18:04:23.275053 osdx OSDxCLI[434456]: User 'admin' left the configuration menu. May 19 18:04:23.421004 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. May 19 18:04:25.268966 osdx OSDxCLI[434456]: User 'admin' entered the configuration menu. May 19 18:04:25.321733 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. May 19 18:04:25.412162 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. May 19 18:04:25.463030 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. May 19 18:04:25.564006 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. May 19 18:04:25.616611 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. May 19 18:04:25.705557 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. May 19 18:04:25.757547 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 11bbc425f86552b9414b44984944e670dc5e4f1fdd2effeb8cdcabe205226789'. May 19 18:04:25.858218 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:25.916537 osdx ubnt-cfgd[580485]: inactive May 19 18:04:25.935453 osdx INFO[580494]: FRR daemons did not change May 19 18:04:25.946998 osdx ca-certificates[580510]: Updating certificates in /etc/ssl/certs... May 19 18:04:26.392412 osdx ubnt-cfgd[581522]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:04:26.399308 osdx ca-certificates[581528]: 1 added, 0 removed; done. May 19 18:04:26.401926 osdx ca-certificates[581534]: Running hooks in /etc/ca-certificates/update.d... May 19 18:04:26.404471 osdx ca-certificates[581536]: done. May 19 18:04:26.469837 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:04:26.477549 osdx cfgd[1789]: [434456]Completed change to active configuration May 19 18:04:26.478096 osdx OSDxCLI[434456]: User 'admin' committed the configuration. May 19 18:04:26.492184 osdx OSDxCLI[434456]: User 'admin' left the configuration menu. May 19 18:04:26.584088 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:04:26.584315 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] Network connectivity detected May 19 18:04:26.584315 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] Dropping privileges May 19 18:04:26.586221 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] Network connectivity detected May 19 18:04:26.586221 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:04:26.586221 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:04:26.586221 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] Firefox workaround initialized May 19 18:04:26.586221 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpw9uea1k1] May 19 18:04:26.650753 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:04:26.894113 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] [DUT0] OK (DoH) - rtt: 117ms May 19 18:04:26.894113 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 117ms) May 19 18:04:26.894113 osdx dnscrypt-proxy[581543]: [2026-05-19 18:04:26] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 3fa6a7cd749d822eac8d17037f1600eb6339d7b285a5edb3613f8a2148729baa on DUT0 and expect the following output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA_pqfNdJ2CLqyNFwN_FgDrYznXsoWl7bNhP4ohSHKbqgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA_pqfNdJ2CLqyNFwN_FgDrYznXsoWl7bNhP4ohSHKbqgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:04:34.282535 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.8M, max 13.8M, 11.9M free. May 19 18:04:34.283005 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:04:34.283039 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:04:34.291307 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:04:34.484692 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:04:34.681887 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:04:34.758279 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:04:34.827165 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:04:34.884533 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:34.971749 osdx ubnt-cfgd[824970]: inactive May 19 18:04:34.990613 osdx INFO[824977]: FRR daemons did not change May 19 18:04:35.019035 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:04:35.062800 osdx WARNING[825048]: No supported link modes on interface eth0 May 19 18:04:35.064094 osdx modulelauncher[825048]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:04:35.064105 osdx modulelauncher[825048]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:04:35.065262 osdx modulelauncher[825048]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:04:35.065270 osdx modulelauncher[825048]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:04:35.265101 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:04:35.265708 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:04:35.282504 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:04:35.420596 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:04:35.481288 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:04:36.641734 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 3fa6a7cd749d822eac8d17037f1600eb6339d7b285a5edb3613f8a2148729baa'. May 19 18:04:36.777794 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:04:36.831432 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 19 18:04:36.927102 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:04:36.982455 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA_pqfNdJ2CLqyNFwN_FgDrYznXsoWl7bNhP4ohSHKbqgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. May 19 18:04:37.072397 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. May 19 18:04:37.122321 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. May 19 18:04:37.215547 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 19 18:04:37.264843 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:04:37.361783 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 19 18:04:37.464159 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:37.521792 osdx ubnt-cfgd[825159]: inactive May 19 18:04:37.541804 osdx INFO[825168]: FRR daemons did not change May 19 18:04:37.553247 osdx ca-certificates[825184]: Updating certificates in /etc/ssl/certs... May 19 18:04:38.010823 osdx ubnt-cfgd[826196]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:04:38.018230 osdx ca-certificates[826202]: 1 added, 0 removed; done. May 19 18:04:38.020863 osdx ca-certificates[826208]: Running hooks in /etc/ca-certificates/update.d... May 19 18:04:38.023522 osdx ca-certificates[826210]: done. May 19 18:04:38.147485 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:04:38.161609 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:04:38.162118 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:04:38.176102 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:04:38.176298 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Network connectivity detected May 19 18:04:38.176378 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Dropping privileges May 19 18:04:38.177818 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:04:38.179343 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Network connectivity detected May 19 18:04:38.179392 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:04:38.179392 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:04:38.179392 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] May 19 18:04:38.179392 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Firefox workaround initialized May 19 18:04:38.179392 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Loading the set of cloaking rules from [/tmp/tmps1i_l6el] May 19 18:04:38.314593 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] [RD] OK (DoH) - rtt: 119ms May 19 18:04:38.314593 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] Server with the lowest initial latency: RD (rtt: 119ms) May 19 18:04:38.314593 osdx dnscrypt-proxy[826269]: [2026-05-19 18:04:38] [NOTICE] dnscrypt-proxy is ready - live servers: 1 May 19 18:04:38.329875 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'.
Step 4: Run the command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 11bbc425f86552b9414b44984944e670dc5e4f1fdd2effeb8cdcabe205226789 on DUT1 and expect the following output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEbvEJfhlUrlBS0SYSUTmcNxeTx_dLv_rjNyr4gUiZ4kNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEbvEJfhlUrlBS0SYSUTmcNxeTx_dLv_rjNyr4gUiZ4kNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:04:34.000163 osdx systemd-timedated[565968]: Changed local time to Tue 2026-05-19 18:04:34 UTC May 19 18:04:34.001141 osdx systemd-journald[2065]: Time jumped backwards, rotating. May 19 18:04:34.001936 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'set date 2026-05-19 18:04:34'. May 19 18:04:34.253011 osdx systemd-journald[2065]: Runtime Journal (/run/log/journal/c781b4f3f2134c23a5bd07e1836f7bfd) is 952.0K, max 6.4M, 5.5M free. May 19 18:04:34.253342 osdx systemd-journald[2065]: Received client request to rotate journal, rotating. May 19 18:04:34.253374 osdx systemd-journald[2065]: Vacuuming done, freed 0B of archived journals from /run/log/journal/c781b4f3f2134c23a5bd07e1836f7bfd. May 19 18:04:34.261991 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system journal clear'. May 19 18:04:34.441289 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:04:35.510901 osdx OSDxCLI[434456]: User 'admin' entered the configuration menu. May 19 18:04:35.587728 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. May 19 18:04:35.655649 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:04:35.741295 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service ssh'. May 19 18:04:35.802100 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:35.890176 osdx ubnt-cfgd[583298]: inactive May 19 18:04:35.955372 osdx INFO[583320]: FRR daemons did not change May 19 18:04:35.981120 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:04:36.029229 osdx WARNING[583391]: No supported link modes on interface eth0 May 19 18:04:36.030580 osdx modulelauncher[583391]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:04:36.030589 osdx modulelauncher[583391]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:04:36.031743 osdx modulelauncher[583391]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:04:36.031752 osdx modulelauncher[583391]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:04:36.121749 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... May 19 18:04:36.134429 osdx sshd[583452]: Server listening on 0.0.0.0 port 22. May 19 18:04:36.134454 osdx sshd[583452]: Server listening on :: port 22. May 19 18:04:36.134540 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. May 19 18:04:36.288089 osdx cfgd[1789]: [434456]Completed change to active configuration May 19 18:04:36.288624 osdx OSDxCLI[434456]: User 'admin' committed the configuration. May 19 18:04:36.306493 osdx OSDxCLI[434456]: User 'admin' left the configuration menu. May 19 18:04:36.449477 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. May 19 18:04:40.628407 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 11bbc425f86552b9414b44984944e670dc5e4f1fdd2effeb8cdcabe205226789'. May 19 18:04:40.763137 osdx OSDxCLI[434456]: User 'admin' entered the configuration menu. May 19 18:04:40.819120 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. May 19 18:04:40.909376 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. May 19 18:04:40.962240 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. May 19 18:04:41.059769 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEbvEJfhlUrlBS0SYSUTmcNxeTx_dLv_rjNyr4gUiZ4kNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. May 19 18:04:41.121705 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:41.207326 osdx ubnt-cfgd[583514]: inactive May 19 18:04:41.229942 osdx INFO[583523]: FRR daemons did not change May 19 18:04:41.242349 osdx ca-certificates[583539]: Updating certificates in /etc/ssl/certs... May 19 18:04:41.701291 osdx ubnt-cfgd[584551]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:04:41.708551 osdx ca-certificates[584557]: 1 added, 0 removed; done. May 19 18:04:41.711340 osdx ca-certificates[584563]: Running hooks in /etc/ca-certificates/update.d... May 19 18:04:41.714007 osdx ca-certificates[584565]: done. May 19 18:04:41.777537 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:04:41.793465 osdx cfgd[1789]: [434456]Completed change to active configuration May 19 18:04:41.794111 osdx OSDxCLI[434456]: User 'admin' committed the configuration. May 19 18:04:41.825007 osdx OSDxCLI[434456]: User 'admin' left the configuration menu. May 19 18:04:41.889085 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:41] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:04:41.889307 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:41] [NOTICE] Network connectivity detected May 19 18:04:41.889370 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:41] [NOTICE] Dropping privileges May 19 18:04:41.895245 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:41] [NOTICE] Network connectivity detected May 19 18:04:41.895337 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:41] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:04:41.895337 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:41] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:04:41.895337 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:41] [NOTICE] Firefox workaround initialized May 19 18:04:41.895337 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:41] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp5cxwg64p] May 19 18:04:41.974939 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:04:42.116076 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:42] [NOTICE] [DUT0] OK (DoH) - rtt: 119ms May 19 18:04:42.116076 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:42] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 119ms) May 19 18:04:42.116076 osdx dnscrypt-proxy[584572]: [2026-05-19 18:04:42] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
May 19 18:04:50.279950 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.8M, max 13.8M, 11.9M free. May 19 18:04:50.282032 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:04:50.282092 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:04:50.289102 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:04:50.478208 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:04:50.674922 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:04:50.753532 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:04:50.821894 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:04:50.879158 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:50.968031 osdx ubnt-cfgd[828035]: inactive May 19 18:04:50.986608 osdx INFO[828042]: FRR daemons did not change May 19 18:04:51.013980 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:04:51.058628 osdx WARNING[828113]: No supported link modes on interface eth0 May 19 18:04:51.059932 osdx modulelauncher[828113]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:04:51.059943 osdx modulelauncher[828113]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:04:51.061063 osdx modulelauncher[828113]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:04:51.061070 osdx modulelauncher[828113]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:04:51.261085 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:04:51.261561 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:04:51.276580 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:04:51.419595 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:04:51.481210 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:04:52.659269 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. May 19 18:04:52.788027 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:04:52.843269 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 19 18:04:52.938490 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:04:53.000263 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. May 19 18:04:53.091432 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. May 19 18:04:53.145256 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. May 19 18:04:53.243423 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d'. May 19 18:04:53.290098 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:04:53.388486 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. May 19 18:04:53.438792 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. May 19 18:04:53.537545 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 19 18:04:53.607857 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:53.696178 osdx ubnt-cfgd[828225]: inactive May 19 18:04:53.716120 osdx INFO[828234]: FRR daemons did not change May 19 18:04:53.727929 osdx ca-certificates[828250]: Updating certificates in /etc/ssl/certs... May 19 18:04:54.195857 osdx ubnt-cfgd[829262]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:04:54.203034 osdx ca-certificates[829268]: 1 added, 0 removed; done. May 19 18:04:54.205742 osdx ca-certificates[829274]: Running hooks in /etc/ca-certificates/update.d... May 19 18:04:54.208366 osdx ca-certificates[829276]: done. May 19 18:04:54.314261 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:04:54.322701 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:04:54.323114 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:04:54.335380 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:04:54.335572 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Network connectivity detected May 19 18:04:54.335657 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Dropping privileges May 19 18:04:54.338065 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:04:54.338661 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Network connectivity detected May 19 18:04:54.338704 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:04:54.338704 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:04:54.338704 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] May 19 18:04:54.338704 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Firefox workaround initialized May 19 18:04:54.338704 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpvinbjfx0] May 19 18:04:54.339353 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms May 19 18:04:54.339353 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) May 19 18:04:54.339461 osdx dnscrypt-proxy[829335]: [2026-05-19 18:04:54] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 11bbc425f86552b9414b44984944e670dc5e4f1fdd2effeb8cdcabe205226789 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:04:50.253220 osdx systemd-journald[2065]: Runtime Journal (/run/log/journal/c781b4f3f2134c23a5bd07e1836f7bfd) is 1000.0K, max 6.4M, 5.5M free. May 19 18:04:50.256104 osdx systemd-journald[2065]: Received client request to rotate journal, rotating. May 19 18:04:50.256151 osdx systemd-journald[2065]: Vacuuming done, freed 0B of archived journals from /run/log/journal/c781b4f3f2134c23a5bd07e1836f7bfd. May 19 18:04:50.262964 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system journal clear'. May 19 18:04:50.440999 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:04:51.518049 osdx OSDxCLI[434456]: User 'admin' entered the configuration menu. May 19 18:04:51.600394 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. May 19 18:04:51.678785 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:04:51.736996 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service ssh'. May 19 18:04:51.837124 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:51.891978 osdx ubnt-cfgd[586324]: inactive May 19 18:04:51.971669 osdx INFO[586346]: FRR daemons did not change May 19 18:04:51.996145 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:04:52.043330 osdx WARNING[586417]: No supported link modes on interface eth0 May 19 18:04:52.044705 osdx modulelauncher[586417]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:04:52.044716 osdx modulelauncher[586417]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:04:52.045916 osdx modulelauncher[586417]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:04:52.045923 osdx modulelauncher[586417]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:04:52.128759 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... May 19 18:04:52.143252 osdx sshd[586478]: Server listening on 0.0.0.0 port 22. May 19 18:04:52.143276 osdx sshd[586478]: Server listening on :: port 22. May 19 18:04:52.143360 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. May 19 18:04:52.288888 osdx cfgd[1789]: [434456]Completed change to active configuration May 19 18:04:52.289575 osdx OSDxCLI[434456]: User 'admin' committed the configuration. May 19 18:04:52.306887 osdx OSDxCLI[434456]: User 'admin' left the configuration menu. May 19 18:04:52.452782 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. May 19 18:04:54.505585 osdx OSDxCLI[434456]: User 'admin' entered the configuration menu. May 19 18:04:54.561985 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. May 19 18:04:54.658537 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. May 19 18:04:54.707571 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. May 19 18:04:54.808975 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. May 19 18:04:54.859972 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. May 19 18:04:54.954186 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. May 19 18:04:55.007920 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 11bbc425f86552b9414b44984944e670dc5e4f1fdd2effeb8cdcabe205226789'. May 19 18:04:55.105495 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'show working'. May 19 18:04:55.165707 osdx ubnt-cfgd[586540]: inactive May 19 18:04:55.184846 osdx INFO[586549]: FRR daemons did not change May 19 18:04:55.197723 osdx ca-certificates[586565]: Updating certificates in /etc/ssl/certs... May 19 18:04:55.651196 osdx ubnt-cfgd[587577]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:04:55.658101 osdx ca-certificates[587583]: 1 added, 0 removed; done. May 19 18:04:55.660835 osdx ca-certificates[587589]: Running hooks in /etc/ca-certificates/update.d... May 19 18:04:55.663474 osdx ca-certificates[587591]: done. May 19 18:04:55.732430 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:04:55.748245 osdx cfgd[1789]: [434456]Completed change to active configuration May 19 18:04:55.748746 osdx OSDxCLI[434456]: User 'admin' committed the configuration. May 19 18:04:55.759608 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:04:55.759795 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] Network connectivity detected May 19 18:04:55.759833 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] Dropping privileges May 19 18:04:55.761590 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] Network connectivity detected May 19 18:04:55.761630 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:04:55.761729 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:04:55.761729 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] Firefox workaround initialized May 19 18:04:55.761729 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpgh_xmo8g] May 19 18:04:55.764348 osdx OSDxCLI[434456]: User 'admin' left the configuration menu. May 19 18:04:55.920661 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:04:55.970166 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] [DUT0] OK (DoH) - rtt: 109ms May 19 18:04:55.970166 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 109ms) May 19 18:04:55.970166 osdx dnscrypt-proxy[587598]: [2026-05-19 18:04:55] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d
Step 2: Run the command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d ip 10.215.168.1 port 8443 on DUT0 and expect the following output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGOVuIN_0hUCVfjsyW5kSpytJ0ohaQO3hFvmA49Rd91tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGOVuIN_0hUCVfjsyW5kSpytJ0ohaQO3hFvmA49Rd91tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
May 19 18:05:04.277747 osdx systemd-journald[505760]: Runtime Journal (/run/log/journal/d1b141b298644f3ea5560bad25bf4943) is 1.8M, max 13.8M, 11.9M free. May 19 18:05:04.280114 osdx systemd-journald[505760]: Received client request to rotate journal, rotating. May 19 18:05:04.280160 osdx systemd-journald[505760]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d1b141b298644f3ea5560bad25bf4943. May 19 18:05:04.286532 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal clear'. May 19 18:05:04.480993 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:05:04.683655 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:04.762522 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 19 18:05:04.824091 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:05:04.915959 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:04.969173 osdx ubnt-cfgd[831098]: inactive May 19 18:05:04.990295 osdx INFO[831105]: FRR daemons did not change May 19 18:05:05.020114 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:05:05.061324 osdx WARNING[831176]: No supported link modes on interface eth0 May 19 18:05:05.062646 osdx modulelauncher[831176]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:05:05.062656 osdx modulelauncher[831176]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:05:05.063738 osdx modulelauncher[831176]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:05:05.063745 osdx modulelauncher[831176]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:05:05.239891 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:05.240535 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:05.255562 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:05.395352 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 19 18:05:05.456810 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:05:06.587748 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. May 19 18:05:06.672316 osdx OSDxCLI[673163]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 63:95:b8:83:7f:d2:15:02:55:f8:ec:c9:6e:64:4a:9c:ad:27:4a:21:69:03:b7:84:5b:e6:03:8f:51:77:dd:6d ip 10.215.168.1 port 8443'. May 19 18:05:06.815826 osdx OSDxCLI[673163]: User 'admin' entered the configuration menu. May 19 18:05:06.870950 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 19 18:05:06.964483 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 19 18:05:07.020676 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGOVuIN_0hUCVfjsyW5kSpytJ0ohaQO3hFvmA49Rd91tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. May 19 18:05:07.105287 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 19 18:05:07.158028 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. May 19 18:05:07.249861 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. May 19 18:05:07.301452 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 19 18:05:07.403193 osdx OSDxCLI[673163]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:07.465095 osdx ubnt-cfgd[831288]: inactive May 19 18:05:07.486367 osdx INFO[831297]: FRR daemons did not change May 19 18:05:07.498253 osdx ca-certificates[831312]: Updating certificates in /etc/ssl/certs... May 19 18:05:07.981572 osdx ubnt-cfgd[832325]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:05:07.988810 osdx ca-certificates[832331]: 1 added, 0 removed; done. May 19 18:05:07.991523 osdx ca-certificates[832337]: Running hooks in /etc/ca-certificates/update.d... May 19 18:05:07.994170 osdx ca-certificates[832339]: done. May 19 18:05:08.104535 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:05:08.118201 osdx cfgd[1918]: [673163]Completed change to active configuration May 19 18:05:08.118992 osdx OSDxCLI[673163]: User 'admin' committed the configuration. May 19 18:05:08.135991 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:05:08.136305 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Network connectivity detected May 19 18:05:08.136305 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Dropping privileges May 19 18:05:08.136429 osdx OSDxCLI[673163]: User 'admin' left the configuration menu. May 19 18:05:08.138238 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Network connectivity detected May 19 18:05:08.138272 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:05:08.138272 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:05:08.138272 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] May 19 18:05:08.138324 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Firefox workaround initialized May 19 18:05:08.138324 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpyjdai97l] May 19 18:05:08.138881 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms May 19 18:05:08.138899 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) May 19 18:05:08.138899 osdx dnscrypt-proxy[832398]: [2026-05-19 18:05:08] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run the command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 11bbc425f86552b9414b44984944e670dc5e4f1fdd2effeb8cdcabe205226789 on DUT1 and expect the following output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEbvEJfhlUrlBS0SYSUTmcNxeTx_dLv_rjNyr4gUiZ4kNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEbvEJfhlUrlBS0SYSUTmcNxeTx_dLv_rjNyr4gUiZ4kNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
May 19 18:05:04.251236 osdx systemd-journald[2065]: Runtime Journal (/run/log/journal/c781b4f3f2134c23a5bd07e1836f7bfd) is 1000.0K, max 6.4M, 5.5M free. May 19 18:05:04.255399 osdx systemd-journald[2065]: Received client request to rotate journal, rotating. May 19 18:05:04.255465 osdx systemd-journald[2065]: Vacuuming done, freed 0B of archived journals from /run/log/journal/c781b4f3f2134c23a5bd07e1836f7bfd. May 19 18:05:04.260802 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system journal clear'. May 19 18:05:04.445367 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system coredump delete all'. May 19 18:05:05.487780 osdx OSDxCLI[434456]: User 'admin' entered the configuration menu. May 19 18:05:05.566569 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. May 19 18:05:05.636693 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 19 18:05:05.725797 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service ssh'. May 19 18:05:05.784724 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:05.874270 osdx ubnt-cfgd[589350]: inactive May 19 18:05:05.937758 osdx INFO[589372]: FRR daemons did not change May 19 18:05:05.964725 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 19 18:05:06.008419 osdx WARNING[589443]: No supported link modes on interface eth0 May 19 18:05:06.009728 osdx modulelauncher[589443]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 19 18:05:06.009740 osdx modulelauncher[589443]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 19 18:05:06.010884 osdx modulelauncher[589443]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 19 18:05:06.010892 osdx modulelauncher[589443]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 19 18:05:06.097322 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... May 19 18:05:06.114068 osdx sshd[589504]: Server listening on 0.0.0.0 port 22. May 19 18:05:06.114092 osdx sshd[589504]: Server listening on :: port 22. May 19 18:05:06.114193 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. May 19 18:05:06.264148 osdx cfgd[1789]: [434456]Completed change to active configuration May 19 18:05:06.264731 osdx OSDxCLI[434456]: User 'admin' committed the configuration. May 19 18:05:06.280937 osdx OSDxCLI[434456]: User 'admin' left the configuration menu. May 19 18:05:06.418824 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. May 19 18:05:08.313022 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 11bbc425f86552b9414b44984944e670dc5e4f1fdd2effeb8cdcabe205226789'. May 19 18:05:08.453110 osdx OSDxCLI[434456]: User 'admin' entered the configuration menu. May 19 18:05:08.510272 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. May 19 18:05:08.601057 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. May 19 18:05:08.648925 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. May 19 18:05:08.753003 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEbvEJfhlUrlBS0SYSUTmcNxeTx_dLv_rjNyr4gUiZ4kNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. May 19 18:05:08.809566 osdx OSDxCLI[434456]: User 'admin' added a new cfg line: 'show working'. May 19 18:05:08.902931 osdx ubnt-cfgd[589566]: inactive May 19 18:05:08.922708 osdx INFO[589575]: FRR daemons did not change May 19 18:05:08.935103 osdx ca-certificates[589591]: Updating certificates in /etc/ssl/certs... May 19 18:05:09.394407 osdx ubnt-cfgd[590603]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 19 18:05:09.401286 osdx ca-certificates[590609]: 1 added, 0 removed; done. May 19 18:05:09.404050 osdx ca-certificates[590615]: Running hooks in /etc/ca-certificates/update.d... May 19 18:05:09.406641 osdx ca-certificates[590617]: done. May 19 18:05:09.465037 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 19 18:05:09.476973 osdx cfgd[1789]: [434456]Completed change to active configuration May 19 18:05:09.477451 osdx OSDxCLI[434456]: User 'admin' committed the configuration. May 19 18:05:09.491672 osdx OSDxCLI[434456]: User 'admin' left the configuration menu. May 19 18:05:09.592231 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:09] [NOTICE] dnscrypt-proxy 2.0.45 May 19 18:05:09.592735 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:09] [NOTICE] Network connectivity detected May 19 18:05:09.592735 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:09] [NOTICE] Dropping privileges May 19 18:05:09.594548 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:09] [NOTICE] Network connectivity detected May 19 18:05:09.594636 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:09] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 19 18:05:09.594692 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:09] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 19 18:05:09.594692 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:09] [NOTICE] Firefox workaround initialized May 19 18:05:09.594692 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:09] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpfqxaypr7] May 19 18:05:09.642497 osdx OSDxCLI[434456]: User 'admin' executed a new command: 'system journal show | cat'. May 19 18:05:10.088176 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:10] [NOTICE] [DUT0] OK (DoH) - rtt: 137ms May 19 18:05:10.088176 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:10] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 137ms) May 19 18:05:10.088176 osdx dnscrypt-proxy[590624]: [2026-05-19 18:05:10] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13