Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 981fe98eb7a219769fd87dc4007c1189e24536fae0b43e352b1e9401008d0c2b set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:23:15.368828 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:23:15.369928 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:23:15.370002 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:23:15.382480 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:23:15.623281 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:23:15.895303 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:16.014600 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:23:16.082386 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:23:16.228624 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:16.332738 osdx ubnt-cfgd[1019830]: inactive Jun 03 18:23:16.359640 osdx INFO[1019837]: FRR daemons did not change Jun 03 18:23:16.397967 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:23:16.447813 osdx WARNING[1019908]: No supported link modes on interface eth0 Jun 03 18:23:16.449420 osdx modulelauncher[1019908]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:23:16.449431 osdx modulelauncher[1019908]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:23:16.450842 osdx modulelauncher[1019908]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:23:16.450849 osdx modulelauncher[1019908]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:23:16.677551 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:16.678093 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:16.699369 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:16.857857 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:23:16.938431 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:23:17.099944 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:17.170669 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 03 18:23:17.271355 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:23:17.335828 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 03 18:23:17.427355 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 03 18:23:17.537010 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 981fe98eb7a219769fd87dc4007c1189e24536fae0b43e352b1e9401008d0c2b'. Jun 03 18:23:17.591436 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:23:17.731754 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:17.797557 osdx ubnt-cfgd[1020014]: inactive Jun 03 18:23:17.821396 osdx INFO[1020023]: FRR daemons did not change Jun 03 18:23:17.835282 osdx ca-certificates[1020039]: Updating certificates in /etc/ssl/certs... Jun 03 18:23:18.415654 osdx ubnt-cfgd[1021051]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:23:18.423878 osdx ca-certificates[1021056]: 1 added, 0 removed; done. Jun 03 18:23:18.426861 osdx ca-certificates[1021063]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:23:18.429618 osdx ca-certificates[1021065]: done. Jun 03 18:23:18.554391 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:23:18.564323 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:18.565310 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:18.591367 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:23:18.591649 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] Network connectivity detected Jun 03 18:23:18.591682 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] Dropping privileges Jun 03 18:23:18.592624 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:18.594169 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] Network connectivity detected Jun 03 18:23:18.594226 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:23:18.594226 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:23:18.594226 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] Firefox workaround initialized Jun 03 18:23:18.594226 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpsd4t_m1z] Jun 03 18:23:18.624339 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] [RD] OK (DoH) - rtt: 8ms Jun 03 18:23:18.624339 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] Server with the lowest initial latency: RD (rtt: 8ms) Jun 03 18:23:18.624339 osdx dnscrypt-proxy[1021121]: [2026-06-03 18:23:18] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run the command system journal show | cat on DUT0 and check whether the output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Jun 03 18:23:25.330069 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:23:25.330531 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:23:25.330568 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:23:25.339826 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:23:25.553012 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:23:25.788278 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:25.880591 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:23:25.946882 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:23:26.093053 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:26.186193 osdx ubnt-cfgd[1022882]: inactive Jun 03 18:23:26.212319 osdx INFO[1022889]: FRR daemons did not change Jun 03 18:23:26.242475 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:23:26.290099 osdx WARNING[1022960]: No supported link modes on interface eth0 Jun 03 18:23:26.291948 osdx modulelauncher[1022960]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:23:26.291966 osdx modulelauncher[1022960]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:23:26.293693 osdx modulelauncher[1022960]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:23:26.293704 osdx modulelauncher[1022960]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:23:26.510002 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:26.510548 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:26.542653 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:26.703561 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:23:26.802925 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:23:26.965505 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:27.024083 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:23:27.144310 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:27.209051 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:27.281889 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:27.448845 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:27.546374 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:23:27.647055 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 03 18:23:27.700705 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 03 18:23:27.790808 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:23:27.848697 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show changes'. Jun 03 18:23:27.951251 osdx ubnt-cfgd[1023073]: inactive Jun 03 18:23:27.974427 osdx INFO[1023080]: FRR daemons did not change Jun 03 18:23:28.082924 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:23:28.090755 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:28.091361 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:28.107658 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:23:28.107960 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] Network connectivity detected Jun 03 18:23:28.107960 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] Dropping privileges Jun 03 18:23:28.110317 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] Network connectivity detected Jun 03 18:23:28.110394 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:23:28.110394 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:23:28.110394 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] Firefox workaround initialized Jun 03 18:23:28.110394 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpc4ukjsiu] Jun 03 18:23:28.118154 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:28.127908 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABB7wCa9CO_6HHMbJmd15oz0": x509: certificate signed by unknown authority Jun 03 18:23:28.127908 osdx dnscrypt-proxy[1023138]: [2026-06-03 18:23:28] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run the command show host lookup teldat.com type A on DUT0 and expect the following output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:23:38.370821 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:23:38.374054 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:23:38.374137 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:23:38.382485 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:23:38.643031 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:23:39.026278 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:39.179736 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:23:39.322807 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:23:39.417815 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:39.570376 osdx ubnt-cfgd[1023426]: inactive Jun 03 18:23:39.594644 osdx INFO[1023433]: FRR daemons did not change Jun 03 18:23:39.634047 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:23:39.714413 osdx WARNING[1023504]: No supported link modes on interface eth0 Jun 03 18:23:39.716110 osdx modulelauncher[1023504]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:23:39.716125 osdx modulelauncher[1023504]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:23:39.717538 osdx modulelauncher[1023504]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:23:39.717549 osdx modulelauncher[1023504]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:23:39.929350 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:39.929898 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:39.955660 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:40.105137 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:23:40.185129 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:23:40.375769 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:40.439369 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:23:40.550278 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:40.605250 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:40.664672 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:40.866150 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:40.946632 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:23:41.057074 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 03 18:23:41.130356 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 03 18:23:41.233775 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Jun 03 18:23:41.294315 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:23:41.416776 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show changes'. Jun 03 18:23:41.521619 osdx ubnt-cfgd[1023618]: inactive Jun 03 18:23:41.580105 osdx INFO[1023625]: FRR daemons did not change Jun 03 18:23:41.695536 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:23:41.712740 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:41.713982 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:41.731539 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:23:41.732386 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] Network connectivity detected Jun 03 18:23:41.732386 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] Dropping privileges Jun 03 18:23:41.736195 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] Network connectivity detected Jun 03 18:23:41.736195 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:23:41.736195 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:23:41.736195 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] Firefox workaround initialized Jun 03 18:23:41.736195 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpo2j1gmlp] Jun 03 18:23:41.746356 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:41.758675 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] [RD] OK (DoH) - rtt: 10ms Jun 03 18:23:41.758675 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] Server with the lowest initial latency: RD (rtt: 10ms) Jun 03 18:23:41.758675 osdx dnscrypt-proxy[1023683]: [2026-06-03 18:23:41] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 981fe98eb7a219769fd87dc4007c1189e24536fae0b43e352b1e9401008d0c2b on DUT0 and expect the following output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCYH-mOt6IZdp_YfcQAfBGJ4kU2-uC0PjUrHpQBAI0MKwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCYH-mOt6IZdp_YfcQAfBGJ4kU2-uC0PjUrHpQBAI0MKwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:23:47.307695 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:23:47.308310 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:23:47.308350 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:23:47.317911 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:23:47.534665 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:23:47.764181 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:47.847625 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:23:47.921531 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:23:48.023120 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:48.080338 osdx ubnt-cfgd[1023972]: inactive Jun 03 18:23:48.101068 osdx INFO[1023979]: FRR daemons did not change Jun 03 18:23:48.131767 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:23:48.181407 osdx WARNING[1024050]: No supported link modes on interface eth0 Jun 03 18:23:48.182931 osdx modulelauncher[1024050]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:23:48.182948 osdx modulelauncher[1024050]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:23:48.184327 osdx modulelauncher[1024050]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:23:48.184338 osdx modulelauncher[1024050]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:23:48.387601 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:48.388160 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:48.415043 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:48.589482 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:23:48.668787 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:23:48.842657 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 981fe98eb7a219769fd87dc4007c1189e24536fae0b43e352b1e9401008d0c2b'. Jun 03 18:23:48.977915 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:49.039127 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 03 18:23:49.140735 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:23:49.203433 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCYH-mOt6IZdp_YfcQAfBGJ4kU2-uC0PjUrHpQBAI0MKwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Jun 03 18:23:49.311849 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:23:49.410049 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:49.500953 osdx ubnt-cfgd[1024157]: inactive Jun 03 18:23:49.523762 osdx INFO[1024166]: FRR daemons did not change Jun 03 18:23:49.536549 osdx ca-certificates[1024181]: Updating certificates in /etc/ssl/certs... Jun 03 18:23:50.106712 osdx ubnt-cfgd[1025194]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:23:50.116709 osdx ca-certificates[1025199]: 1 added, 0 removed; done. Jun 03 18:23:50.120661 osdx ca-certificates[1025206]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:23:50.124896 osdx ca-certificates[1025208]: done. Jun 03 18:23:50.240232 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:23:50.249652 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:50.250205 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:50.262961 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:23:50.263244 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] Network connectivity detected Jun 03 18:23:50.263299 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] Dropping privileges Jun 03 18:23:50.265969 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] Network connectivity detected Jun 03 18:23:50.266044 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:23:50.266044 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:23:50.266044 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] Firefox workaround initialized Jun 03 18:23:50.266044 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp2h8t383v] Jun 03 18:23:50.278706 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:50.293801 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] [RD] OK (DoH) - rtt: 10ms Jun 03 18:23:50.293801 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] Server with the lowest initial latency: RD (rtt: 10ms) Jun 03 18:23:50.293801 osdx dnscrypt-proxy[1025264]: [2026-06-03 18:23:50] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 'c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 03 18:23:57.416610 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:23:57.419508 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:23:57.419598 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:23:57.444985 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:23:57.759188 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:23:58.078551 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:58.243506 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:23:58.317708 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:23:58.385937 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:23:58.475253 osdx ubnt-cfgd[1027025]: inactive Jun 03 18:23:58.500799 osdx INFO[1027032]: FRR daemons did not change Jun 03 18:23:58.535477 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:23:58.587294 osdx WARNING[1027103]: No supported link modes on interface eth0 Jun 03 18:23:58.588810 osdx modulelauncher[1027103]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:23:58.588821 osdx modulelauncher[1027103]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:23:58.590354 osdx modulelauncher[1027103]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:23:58.590363 osdx modulelauncher[1027103]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:23:58.819345 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:23:58.819877 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:23:58.836747 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:23:58.986099 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:23:59.054405 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:23:59.196946 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 03 18:23:59.348259 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:23:59.422683 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 03 18:23:59.525411 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:23:59.596415 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Jun 03 18:23:59.707617 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Jun 03 18:23:59.789697 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Jun 03 18:23:59.889849 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44'. Jun 03 18:24:00.009285 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:24:00.114321 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:24:00.235417 osdx ubnt-cfgd[1027212]: inactive Jun 03 18:24:00.262739 osdx INFO[1027221]: FRR daemons did not change Jun 03 18:24:00.281420 osdx ca-certificates[1027237]: Updating certificates in /etc/ssl/certs... Jun 03 18:24:00.867060 osdx ubnt-cfgd[1028249]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:24:00.875269 osdx ca-certificates[1028255]: 1 added, 0 removed; done. Jun 03 18:24:00.878096 osdx ca-certificates[1028261]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:24:00.880950 osdx ca-certificates[1028263]: done. Jun 03 18:24:00.987885 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:24:00.994638 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:24:00.995112 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:24:01.009014 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:24:01.009255 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] Network connectivity detected Jun 03 18:24:01.009289 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] Dropping privileges Jun 03 18:24:01.011577 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] Network connectivity detected Jun 03 18:24:01.011627 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:24:01.011627 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:24:01.011627 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] Firefox workaround initialized Jun 03 18:24:01.011627 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpvef5nqfl] Jun 03 18:24:01.012400 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 03 18:24:01.012400 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 03 18:24:01.012400 osdx dnscrypt-proxy[1028319]: [2026-06-03 18:24:01] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jun 03 18:24:01.023457 osdx OSDxCLI[893656]: User 'admin' left the configuration menu.
Step 4: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44
Step 2: Run the command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44 ip 10.215.168.1 port 8443 on DUT0 and expect the following output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIMlrr705Sop2QX1nx-oZt5vq-m7eX4JBLcPElFBpdslEGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIMlrr705Sop2QX1nx-oZt5vq-m7eX4JBLcPElFBpdslEGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 03 18:24:07.368147 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:24:07.369665 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:24:07.369721 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:24:07.384780 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:24:07.672284 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:24:07.955672 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:24:08.047331 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:24:08.137967 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:24:08.235834 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:24:08.332979 osdx ubnt-cfgd[1030080]: inactive Jun 03 18:24:08.355646 osdx INFO[1030087]: FRR daemons did not change Jun 03 18:24:08.389674 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:24:08.445087 osdx WARNING[1030158]: No supported link modes on interface eth0 Jun 03 18:24:08.446897 osdx modulelauncher[1030158]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:24:08.446911 osdx modulelauncher[1030158]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:24:08.448258 osdx modulelauncher[1030158]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:24:08.448269 osdx modulelauncher[1030158]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:24:08.661300 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:24:08.686653 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:24:08.702882 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:24:08.844187 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:24:08.957800 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:24:09.072495 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 03 18:24:09.169978 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44 ip 10.215.168.1 port 8443'. Jun 03 18:24:09.351092 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:24:09.410072 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 03 18:24:09.500172 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:24:09.563173 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIMlrr705Sop2QX1nx-oZt5vq-m7eX4JBLcPElFBpdslEGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Jun 03 18:24:09.689861 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:24:09.797601 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:24:09.918098 osdx ubnt-cfgd[1030267]: inactive Jun 03 18:24:09.949843 osdx INFO[1030276]: FRR daemons did not change Jun 03 18:24:09.966453 osdx ca-certificates[1030292]: Updating certificates in /etc/ssl/certs... Jun 03 18:24:10.541433 osdx ubnt-cfgd[1031304]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:24:10.549576 osdx ca-certificates[1031310]: 1 added, 0 removed; done. Jun 03 18:24:10.553446 osdx ca-certificates[1031316]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:24:10.557105 osdx ca-certificates[1031318]: done. Jun 03 18:24:10.645971 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:24:10.655498 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:24:10.659353 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:24:10.675815 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:24:10.676057 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] Network connectivity detected Jun 03 18:24:10.676205 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] Dropping privileges Jun 03 18:24:10.678772 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] Network connectivity detected Jun 03 18:24:10.678835 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:24:10.678835 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:24:10.678835 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] Firefox workaround initialized Jun 03 18:24:10.678835 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpivw88338] Jun 03 18:24:10.679701 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 03 18:24:10.679759 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 03 18:24:10.679759 osdx dnscrypt-proxy[1031374]: [2026-06-03 18:24:10] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jun 03 18:24:10.684555 osdx OSDxCLI[893656]: User 'admin' left the configuration menu.
Step 5: Run the command show host lookup teldat.com type A on DUT0 and check whether the output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16