Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 981fe98eb7a219769fd87dc4007c1189e24536fae0b43e352b1e9401008d0c2b set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:22:08.294763 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:22:08.298298 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:22:08.298378 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:22:08.308224 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:22:08.564290 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:22:08.893725 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:22:09.033345 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:22:09.085542 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:22:09.193961 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:09.261190 osdx ubnt-cfgd[1007195]: inactive Jun 03 18:22:09.284345 osdx INFO[1007202]: FRR daemons did not change Jun 03 18:22:09.314295 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:22:09.370707 osdx WARNING[1007273]: No supported link modes on interface eth0 Jun 03 18:22:09.372678 osdx modulelauncher[1007273]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:22:09.372695 osdx modulelauncher[1007273]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:22:09.374152 osdx modulelauncher[1007273]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:22:09.374178 osdx modulelauncher[1007273]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:22:09.593852 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:22:09.594468 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:22:09.615761 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:22:09.779520 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:22:09.850880 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:22:11.120645 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:22:11.188413 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 03 18:22:11.294251 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:22:11.369926 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 03 18:22:11.455964 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 03 18:22:11.519849 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 981fe98eb7a219769fd87dc4007c1189e24536fae0b43e352b1e9401008d0c2b'. Jun 03 18:22:11.610698 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 03 18:22:11.667835 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 03 18:22:11.770898 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:22:11.841438 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 03 18:22:11.970198 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:12.097476 osdx ubnt-cfgd[1007382]: inactive Jun 03 18:22:12.122683 osdx INFO[1007391]: FRR daemons did not change Jun 03 18:22:12.142768 osdx ca-certificates[1007405]: Updating certificates in /etc/ssl/certs... Jun 03 18:22:12.752079 osdx ubnt-cfgd[1008419]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:22:12.760572 osdx ca-certificates[1008425]: 1 added, 0 removed; done. Jun 03 18:22:12.763684 osdx ca-certificates[1008431]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:22:12.766639 osdx ca-certificates[1008433]: done. Jun 03 18:22:12.890646 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:22:12.896488 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:22:12.896933 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:22:12.918339 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:22:12.918565 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Network connectivity detected Jun 03 18:22:12.918743 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Dropping privileges Jun 03 18:22:12.921403 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Network connectivity detected Jun 03 18:22:12.921479 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:22:12.921479 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:22:12.921479 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 03 18:22:12.921479 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Firefox workaround initialized Jun 03 18:22:12.921479 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpr4_6f5eo] Jun 03 18:22:12.923556 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:22:12.950559 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] [RD] OK (DoH) - rtt: 8ms Jun 03 18:22:12.950559 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] Server with the lowest initial latency: RD (rtt: 8ms) Jun 03 18:22:12.950559 osdx dnscrypt-proxy[1008492]: [2026-06-03 18:22:12] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash b2e6088ce6361c99a9ce7ef28c6a3b7f4633266f4de889275caf493cd3886a6f set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:22:08.276934 osdx systemd-journald[2044]: Runtime Journal (/run/log/journal/5f949ce1ec2e4c3196487af568d04dde) is 896.0K, max 6.4M, 5.6M free. Jun 03 18:22:08.278363 osdx systemd-journald[2044]: Received client request to rotate journal, rotating. Jun 03 18:22:08.278417 osdx systemd-journald[2044]: Vacuuming done, freed 0B of archived journals from /run/log/journal/5f949ce1ec2e4c3196487af568d04dde. Jun 03 18:22:08.286674 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:22:08.542341 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:22:09.882869 osdx OSDxCLI[623229]: User 'admin' entered the configuration menu. Jun 03 18:22:09.975990 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 03 18:22:10.045742 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:22:10.142459 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service ssh'. Jun 03 18:22:10.224285 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:10.309735 osdx ubnt-cfgd[751853]: inactive Jun 03 18:22:10.390624 osdx INFO[751875]: FRR daemons did not change Jun 03 18:22:10.422356 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:22:10.469335 osdx WARNING[751946]: No supported link modes on interface eth0 Jun 03 18:22:10.470776 osdx modulelauncher[751946]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:22:10.470793 osdx modulelauncher[751946]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:22:10.472092 osdx modulelauncher[751946]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 03 18:22:10.472102 osdx modulelauncher[751946]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 03 18:22:10.554708 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 03 18:22:10.567301 osdx sshd[752007]: Server listening on 0.0.0.0 port 22. Jun 03 18:22:10.567326 osdx sshd[752007]: Server listening on :: port 22. Jun 03 18:22:10.567429 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 03 18:22:10.710558 osdx cfgd[1768]: [623229]Completed change to active configuration Jun 03 18:22:10.711432 osdx OSDxCLI[623229]: User 'admin' committed the configuration. Jun 03 18:22:10.755592 osdx OSDxCLI[623229]: User 'admin' left the configuration menu. Jun 03 18:22:10.910012 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 03 18:22:13.097423 osdx OSDxCLI[623229]: User 'admin' entered the configuration menu. Jun 03 18:22:13.157367 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 03 18:22:13.252465 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 03 18:22:13.308638 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 03 18:22:13.414977 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Jun 03 18:22:13.479585 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Jun 03 18:22:13.612804 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Jun 03 18:22:13.672567 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash b2e6088ce6361c99a9ce7ef28c6a3b7f4633266f4de889275caf493cd3886a6f'. Jun 03 18:22:13.765888 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:13.828447 osdx ubnt-cfgd[752069]: inactive Jun 03 18:22:13.848929 osdx INFO[752078]: FRR daemons did not change Jun 03 18:22:13.861002 osdx ca-certificates[752094]: Updating certificates in /etc/ssl/certs... Jun 03 18:22:14.349632 osdx ubnt-cfgd[753106]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:22:14.357145 osdx ca-certificates[753112]: 1 added, 0 removed; done. Jun 03 18:22:14.360030 osdx ca-certificates[753118]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:22:14.362733 osdx ca-certificates[753120]: done. Jun 03 18:22:14.438794 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:22:14.453178 osdx cfgd[1768]: [623229]Completed change to active configuration Jun 03 18:22:14.453737 osdx OSDxCLI[623229]: User 'admin' committed the configuration. Jun 03 18:22:14.465937 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:22:14.466219 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] Network connectivity detected Jun 03 18:22:14.466262 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] Dropping privileges Jun 03 18:22:14.469583 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] Network connectivity detected Jun 03 18:22:14.469583 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:22:14.469583 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:22:14.469583 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] Firefox workaround initialized Jun 03 18:22:14.469583 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] Loading the set of cloaking rules from [/tmp/tmptpd1wipo] Jun 03 18:22:14.469523 osdx OSDxCLI[623229]: User 'admin' left the configuration menu. Jun 03 18:22:14.556104 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] [DUT0] OK (DoH) - rtt: 9ms Jun 03 18:22:14.556104 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 9ms) Jun 03 18:22:14.556104 osdx dnscrypt-proxy[753127]: [2026-06-03 18:22:14] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 981fe98eb7a219769fd87dc4007c1189e24536fae0b43e352b1e9401008d0c2b on DUT0 and expect the following output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCYH-mOt6IZdp_YfcQAfBGJ4kU2-uC0PjUrHpQBAI0MKwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCYH-mOt6IZdp_YfcQAfBGJ4kU2-uC0PjUrHpQBAI0MKwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:22:21.320082 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:22:21.324080 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:22:21.324152 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:22:21.329991 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:22:21.582408 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:22:21.837920 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:22:21.931700 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:22:22.006090 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:22:22.111643 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:22.179198 osdx ubnt-cfgd[1010252]: inactive Jun 03 18:22:22.198909 osdx INFO[1010259]: FRR daemons did not change Jun 03 18:22:22.228082 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:22:22.271589 osdx WARNING[1010330]: No supported link modes on interface eth0 Jun 03 18:22:22.273121 osdx modulelauncher[1010330]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:22:22.273135 osdx modulelauncher[1010330]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:22:22.274406 osdx modulelauncher[1010330]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:22:22.274413 osdx modulelauncher[1010330]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:22:22.483965 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:22:22.522071 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:22:22.539303 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:22:22.684180 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:22:22.775610 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:22:24.070790 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 981fe98eb7a219769fd87dc4007c1189e24536fae0b43e352b1e9401008d0c2b'. Jun 03 18:22:24.225426 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:22:24.285561 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 03 18:22:24.387288 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:22:24.443030 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCYH-mOt6IZdp_YfcQAfBGJ4kU2-uC0PjUrHpQBAI0MKwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Jun 03 18:22:24.532755 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 03 18:22:24.584857 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 03 18:22:24.690529 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 03 18:22:24.742354 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:22:24.868377 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 03 18:22:24.974406 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:25.033053 osdx ubnt-cfgd[1010441]: inactive Jun 03 18:22:25.056916 osdx INFO[1010450]: FRR daemons did not change Jun 03 18:22:25.069076 osdx ca-certificates[1010466]: Updating certificates in /etc/ssl/certs... Jun 03 18:22:25.595096 osdx ubnt-cfgd[1011478]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:22:25.603427 osdx ca-certificates[1011484]: 1 added, 0 removed; done. Jun 03 18:22:25.606363 osdx ca-certificates[1011490]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:22:25.609311 osdx ca-certificates[1011492]: done. Jun 03 18:22:25.736510 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:22:25.744222 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:22:25.744779 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:22:25.762206 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:22:25.763511 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:22:25.763674 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Network connectivity detected Jun 03 18:22:25.763834 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Dropping privileges Jun 03 18:22:25.766117 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Network connectivity detected Jun 03 18:22:25.766181 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:22:25.766181 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:22:25.766181 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 03 18:22:25.766181 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Firefox workaround initialized Jun 03 18:22:25.766181 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpqyeef08d] Jun 03 18:22:25.793849 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] [RD] OK (DoH) - rtt: 8ms Jun 03 18:22:25.793849 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] Server with the lowest initial latency: RD (rtt: 8ms) Jun 03 18:22:25.793849 osdx dnscrypt-proxy[1011551]: [2026-06-03 18:22:25] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run the command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash b2e6088ce6361c99a9ce7ef28c6a3b7f4633266f4de889275caf493cd3886a6f on DUT1 and expect the following output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgsuYIjOY2HJmpzn7yjGo7f0YzJm9N6IknXK9JPNOIam8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgsuYIjOY2HJmpzn7yjGo7f0YzJm9N6IknXK9JPNOIam8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:22:21.295902 osdx systemd-journald[2044]: Runtime Journal (/run/log/journal/5f949ce1ec2e4c3196487af568d04dde) is 928.0K, max 6.4M, 5.5M free. Jun 03 18:22:21.296838 osdx systemd-journald[2044]: Received client request to rotate journal, rotating. Jun 03 18:22:21.296885 osdx systemd-journald[2044]: Vacuuming done, freed 0B of archived journals from /run/log/journal/5f949ce1ec2e4c3196487af568d04dde. Jun 03 18:22:21.306353 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:22:21.529252 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:22:22.773167 osdx OSDxCLI[623229]: User 'admin' entered the configuration menu. Jun 03 18:22:22.883343 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 03 18:22:22.955616 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:22:23.050344 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service ssh'. Jun 03 18:22:23.132919 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:23.231824 osdx ubnt-cfgd[754875]: inactive Jun 03 18:22:23.301114 osdx INFO[754897]: FRR daemons did not change Jun 03 18:22:23.328871 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:22:23.380568 osdx WARNING[754968]: No supported link modes on interface eth0 Jun 03 18:22:23.382180 osdx modulelauncher[754968]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:22:23.382197 osdx modulelauncher[754968]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:22:23.383515 osdx modulelauncher[754968]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 03 18:22:23.383526 osdx modulelauncher[754968]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 03 18:22:23.485358 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 03 18:22:23.496142 osdx sshd[755029]: Server listening on 0.0.0.0 port 22. Jun 03 18:22:23.496168 osdx sshd[755029]: Server listening on :: port 22. Jun 03 18:22:23.496259 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 03 18:22:23.652037 osdx cfgd[1768]: [623229]Completed change to active configuration Jun 03 18:22:23.652704 osdx OSDxCLI[623229]: User 'admin' committed the configuration. Jun 03 18:22:23.672434 osdx OSDxCLI[623229]: User 'admin' left the configuration menu. Jun 03 18:22:23.832207 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 03 18:22:25.976647 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash b2e6088ce6361c99a9ce7ef28c6a3b7f4633266f4de889275caf493cd3886a6f'. Jun 03 18:22:26.145592 osdx OSDxCLI[623229]: User 'admin' entered the configuration menu. Jun 03 18:22:26.227223 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 03 18:22:26.339444 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 03 18:22:26.404541 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 03 18:22:26.505358 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgsuYIjOY2HJmpzn7yjGo7f0YzJm9N6IknXK9JPNOIam8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Jun 03 18:22:26.588311 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:26.682777 osdx ubnt-cfgd[755091]: inactive Jun 03 18:22:26.705229 osdx INFO[755100]: FRR daemons did not change Jun 03 18:22:26.718948 osdx ca-certificates[755116]: Updating certificates in /etc/ssl/certs... Jun 03 18:22:27.232639 osdx ubnt-cfgd[756128]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:22:27.240542 osdx ca-certificates[756134]: 1 added, 0 removed; done. Jun 03 18:22:27.243249 osdx ca-certificates[756140]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:22:27.246002 osdx ca-certificates[756142]: done. Jun 03 18:22:27.321287 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:22:27.329285 osdx cfgd[1768]: [623229]Completed change to active configuration Jun 03 18:22:27.329731 osdx OSDxCLI[623229]: User 'admin' committed the configuration. Jun 03 18:22:27.344547 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:22:27.344841 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] Network connectivity detected Jun 03 18:22:27.344841 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] Dropping privileges Jun 03 18:22:27.347057 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] Network connectivity detected Jun 03 18:22:27.347292 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:22:27.347292 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:22:27.347292 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] Firefox workaround initialized Jun 03 18:22:27.347292 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp281h6cky] Jun 03 18:22:27.347714 osdx OSDxCLI[623229]: User 'admin' left the configuration menu. Jun 03 18:22:27.427732 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] [DUT0] OK (DoH) - rtt: 10ms Jun 03 18:22:27.427732 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 10ms) Jun 03 18:22:27.427732 osdx dnscrypt-proxy[756149]: [2026-06-03 18:22:27] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 'c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 03 18:22:35.358937 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 1.8M, max 13.8M, 11.9M free. Jun 03 18:22:35.360859 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:22:35.360904 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:22:35.377310 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:22:35.652187 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:22:36.054118 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:22:36.188674 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:22:36.244052 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:22:36.363655 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:36.434228 osdx ubnt-cfgd[1013310]: inactive Jun 03 18:22:36.521250 osdx INFO[1013317]: FRR daemons did not change Jun 03 18:22:36.555143 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:22:36.614483 osdx WARNING[1013388]: No supported link modes on interface eth0 Jun 03 18:22:36.616210 osdx modulelauncher[1013388]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:22:36.616224 osdx modulelauncher[1013388]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:22:36.617812 osdx modulelauncher[1013388]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:22:36.617824 osdx modulelauncher[1013388]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:22:36.859684 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:22:36.860245 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:22:36.882511 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:22:37.046025 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:22:37.119601 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:22:38.579136 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 03 18:22:38.756792 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:22:38.862881 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 03 18:22:38.991878 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:22:39.081679 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Jun 03 18:22:39.211560 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Jun 03 18:22:39.274733 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Jun 03 18:22:39.387049 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44'. Jun 03 18:22:39.447746 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:22:39.570708 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 03 18:22:39.665176 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 03 18:22:39.733286 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 03 18:22:39.844115 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:39.923271 osdx ubnt-cfgd[1013500]: inactive Jun 03 18:22:39.950241 osdx INFO[1013509]: FRR daemons did not change Jun 03 18:22:39.965226 osdx ca-certificates[1013525]: Updating certificates in /etc/ssl/certs... Jun 03 18:22:40.578594 osdx ubnt-cfgd[1014537]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:22:40.589467 osdx ca-certificates[1014543]: 1 added, 0 removed; done. Jun 03 18:22:40.592587 osdx ca-certificates[1014549]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:22:40.595541 osdx ca-certificates[1014551]: done. Jun 03 18:22:40.711445 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:22:40.719308 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:22:40.719754 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:22:40.739018 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:22:40.739315 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Network connectivity detected Jun 03 18:22:40.739364 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Dropping privileges Jun 03 18:22:40.741584 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Network connectivity detected Jun 03 18:22:40.741658 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:22:40.741658 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:22:40.741658 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 03 18:22:40.741658 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Firefox workaround initialized Jun 03 18:22:40.741658 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp5ifotqvk] Jun 03 18:22:40.742404 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 03 18:22:40.742404 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 03 18:22:40.742404 osdx dnscrypt-proxy[1014610]: [2026-06-03 18:22:40] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jun 03 18:22:40.748250 osdx OSDxCLI[893656]: User 'admin' left the configuration menu.
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash b2e6088ce6361c99a9ce7ef28c6a3b7f4633266f4de889275caf493cd3886a6f set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:22:36.311287 osdx systemd-journald[2044]: Runtime Journal (/run/log/journal/5f949ce1ec2e4c3196487af568d04dde) is 952.0K, max 6.4M, 5.5M free. Jun 03 18:22:36.314752 osdx systemd-journald[2044]: Received client request to rotate journal, rotating. Jun 03 18:22:36.314826 osdx systemd-journald[2044]: Vacuuming done, freed 0B of archived journals from /run/log/journal/5f949ce1ec2e4c3196487af568d04dde. Jun 03 18:22:36.325554 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:22:36.631377 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:22:38.183407 osdx OSDxCLI[623229]: User 'admin' entered the configuration menu. Jun 03 18:22:38.286552 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 03 18:22:38.376774 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:22:38.449944 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service ssh'. Jun 03 18:22:38.573160 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:38.660461 osdx ubnt-cfgd[757898]: inactive Jun 03 18:22:38.747067 osdx INFO[757920]: FRR daemons did not change Jun 03 18:22:38.782746 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:22:38.841416 osdx WARNING[757991]: No supported link modes on interface eth0 Jun 03 18:22:38.843485 osdx modulelauncher[757991]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:22:38.843504 osdx modulelauncher[757991]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:22:38.845060 osdx modulelauncher[757991]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 03 18:22:38.845069 osdx modulelauncher[757991]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 03 18:22:38.947044 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 03 18:22:38.958298 osdx sshd[758052]: Server listening on 0.0.0.0 port 22. Jun 03 18:22:38.958322 osdx sshd[758052]: Server listening on :: port 22. Jun 03 18:22:38.958418 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 03 18:22:39.118352 osdx cfgd[1768]: [623229]Completed change to active configuration Jun 03 18:22:39.119898 osdx OSDxCLI[623229]: User 'admin' committed the configuration. Jun 03 18:22:39.144523 osdx OSDxCLI[623229]: User 'admin' left the configuration menu. Jun 03 18:22:39.310965 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 03 18:22:41.985712 osdx OSDxCLI[623229]: User 'admin' entered the configuration menu. Jun 03 18:22:42.097719 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 03 18:22:42.154019 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 03 18:22:42.278164 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 03 18:22:42.347380 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Jun 03 18:22:42.447719 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Jun 03 18:22:42.545378 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Jun 03 18:22:42.660880 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash b2e6088ce6361c99a9ce7ef28c6a3b7f4633266f4de889275caf493cd3886a6f'. Jun 03 18:22:42.738125 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:42.832234 osdx ubnt-cfgd[758114]: inactive Jun 03 18:22:42.855402 osdx INFO[758123]: FRR daemons did not change Jun 03 18:22:42.871164 osdx ca-certificates[758139]: Updating certificates in /etc/ssl/certs... Jun 03 18:22:43.432477 osdx ubnt-cfgd[759151]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:22:43.442393 osdx ca-certificates[759157]: 1 added, 0 removed; done. Jun 03 18:22:43.445235 osdx ca-certificates[759163]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:22:43.447928 osdx ca-certificates[759165]: done. Jun 03 18:22:43.519312 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:22:43.528312 osdx cfgd[1768]: [623229]Completed change to active configuration Jun 03 18:22:43.528755 osdx OSDxCLI[623229]: User 'admin' committed the configuration. Jun 03 18:22:43.554642 osdx OSDxCLI[623229]: User 'admin' left the configuration menu. Jun 03 18:22:43.564757 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:22:43.564969 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] Network connectivity detected Jun 03 18:22:43.564969 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] Dropping privileges Jun 03 18:22:43.566851 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] Network connectivity detected Jun 03 18:22:43.566898 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:22:43.566898 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:22:43.566947 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] Firefox workaround initialized Jun 03 18:22:43.566947 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp_jl3co24] Jun 03 18:22:43.668754 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] [DUT0] OK (DoH) - rtt: 11ms Jun 03 18:22:43.668754 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 11ms) Jun 03 18:22:43.668754 osdx dnscrypt-proxy[759172]: [2026-06-03 18:22:43] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44
Step 2: Run the command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44 ip 10.215.168.1 port 8443 on DUT0 and expect the following output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIMlrr705Sop2QX1nx-oZt5vq-m7eX4JBLcPElFBpdslEGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIMlrr705Sop2QX1nx-oZt5vq-m7eX4JBLcPElFBpdslEGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 03 18:22:50.329240 osdx systemd-journald[262779]: Runtime Journal (/run/log/journal/140771393e044d28bd27951346e92000) is 3.4M, max 13.8M, 10.3M free. Jun 03 18:22:50.330326 osdx systemd-journald[262779]: Received client request to rotate journal, rotating. Jun 03 18:22:50.330385 osdx systemd-journald[262779]: Vacuuming done, freed 0B of archived journals from /run/log/journal/140771393e044d28bd27951346e92000. Jun 03 18:22:50.338953 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:22:50.549254 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:22:50.891011 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:22:50.984087 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 03 18:22:51.069969 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:22:51.187219 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:51.256497 osdx ubnt-cfgd[1016372]: inactive Jun 03 18:22:51.278346 osdx INFO[1016379]: FRR daemons did not change Jun 03 18:22:51.310317 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:22:51.360871 osdx WARNING[1016450]: No supported link modes on interface eth0 Jun 03 18:22:51.362550 osdx modulelauncher[1016450]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:22:51.362590 osdx modulelauncher[1016450]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:22:51.364162 osdx modulelauncher[1016450]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 03 18:22:51.364183 osdx modulelauncher[1016450]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 03 18:22:51.566025 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:22:51.585279 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:22:51.601388 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:22:51.745439 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 03 18:22:51.814116 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:22:53.226003 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 03 18:22:53.330902 osdx OSDxCLI[893656]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key c9:6b:af:bd:39:4a:8a:76:41:7d:67:c7:ea:19:b7:9b:ea:fa:6e:de:5f:82:41:2d:c3:c4:94:50:69:76:c9:44 ip 10.215.168.1 port 8443'. Jun 03 18:22:53.484267 osdx OSDxCLI[893656]: User 'admin' entered the configuration menu. Jun 03 18:22:53.565427 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 03 18:22:53.681727 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 03 18:22:53.749832 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIMlrr705Sop2QX1nx-oZt5vq-m7eX4JBLcPElFBpdslEGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Jun 03 18:22:53.856791 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 03 18:22:53.920829 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 03 18:22:54.017988 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 03 18:22:54.085378 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 03 18:22:54.209501 osdx OSDxCLI[893656]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:54.288282 osdx ubnt-cfgd[1016562]: inactive Jun 03 18:22:54.312150 osdx INFO[1016571]: FRR daemons did not change Jun 03 18:22:54.326523 osdx ca-certificates[1016587]: Updating certificates in /etc/ssl/certs... Jun 03 18:22:54.976607 osdx ubnt-cfgd[1017599]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:22:54.986742 osdx ca-certificates[1017605]: 1 added, 0 removed; done. Jun 03 18:22:54.989612 osdx ca-certificates[1017611]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:22:54.992468 osdx ca-certificates[1017613]: done. Jun 03 18:22:55.134849 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:22:55.145454 osdx cfgd[1899]: [893656]Completed change to active configuration Jun 03 18:22:55.146446 osdx OSDxCLI[893656]: User 'admin' committed the configuration. Jun 03 18:22:55.162517 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:22:55.163478 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Network connectivity detected Jun 03 18:22:55.164712 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Dropping privileges Jun 03 18:22:55.166836 osdx OSDxCLI[893656]: User 'admin' left the configuration menu. Jun 03 18:22:55.168912 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Network connectivity detected Jun 03 18:22:55.168986 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:22:55.168986 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:22:55.168986 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 03 18:22:55.168986 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Firefox workaround initialized Jun 03 18:22:55.168986 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp7x799n_u] Jun 03 18:22:55.170101 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 03 18:22:55.170101 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 03 18:22:55.170101 osdx dnscrypt-proxy[1017672]: [2026-06-03 18:22:55] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run the command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash b2e6088ce6361c99a9ce7ef28c6a3b7f4633266f4de889275caf493cd3886a6f on DUT1 and expect the following output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgsuYIjOY2HJmpzn7yjGo7f0YzJm9N6IknXK9JPNOIam8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgsuYIjOY2HJmpzn7yjGo7f0YzJm9N6IknXK9JPNOIam8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 03 18:22:50.000798 osdx systemd-timedated[751211]: Changed local time to Wed 2026-06-03 18:22:50 UTC Jun 03 18:22:50.002205 osdx systemd-journald[2044]: Time jumped backwards, rotating. Jun 03 18:22:50.002709 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'set date 2026-06-03 18:22:50'. Jun 03 18:22:50.287906 osdx systemd-journald[2044]: Runtime Journal (/run/log/journal/5f949ce1ec2e4c3196487af568d04dde) is 952.0K, max 6.4M, 5.5M free. Jun 03 18:22:50.290220 osdx systemd-journald[2044]: Received client request to rotate journal, rotating. Jun 03 18:22:50.290291 osdx systemd-journald[2044]: Vacuuming done, freed 0B of archived journals from /run/log/journal/5f949ce1ec2e4c3196487af568d04dde. Jun 03 18:22:50.298718 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system journal clear'. Jun 03 18:22:50.502647 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system coredump delete all'. Jun 03 18:22:51.857434 osdx OSDxCLI[623229]: User 'admin' entered the configuration menu. Jun 03 18:22:51.961236 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 03 18:22:52.036061 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 03 18:22:52.148647 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service ssh'. Jun 03 18:22:52.229853 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:52.340900 osdx ubnt-cfgd[760922]: inactive Jun 03 18:22:52.427121 osdx INFO[760944]: FRR daemons did not change Jun 03 18:22:52.462200 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 03 18:22:52.533699 osdx WARNING[761015]: No supported link modes on interface eth0 Jun 03 18:22:52.536021 osdx modulelauncher[761015]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 03 18:22:52.536041 osdx modulelauncher[761015]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 03 18:22:52.537671 osdx modulelauncher[761015]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 03 18:22:52.537683 osdx modulelauncher[761015]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 03 18:22:52.658642 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 03 18:22:52.675598 osdx sshd[761076]: Server listening on 0.0.0.0 port 22. Jun 03 18:22:52.675628 osdx sshd[761076]: Server listening on :: port 22. Jun 03 18:22:52.675749 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 03 18:22:52.833153 osdx cfgd[1768]: [623229]Completed change to active configuration Jun 03 18:22:52.833658 osdx OSDxCLI[623229]: User 'admin' committed the configuration. Jun 03 18:22:52.849058 osdx OSDxCLI[623229]: User 'admin' left the configuration menu. Jun 03 18:22:53.021375 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 03 18:22:55.503938 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash b2e6088ce6361c99a9ce7ef28c6a3b7f4633266f4de889275caf493cd3886a6f'. Jun 03 18:22:55.679139 osdx OSDxCLI[623229]: User 'admin' entered the configuration menu. Jun 03 18:22:55.763536 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 03 18:22:55.865616 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 03 18:22:55.937000 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 03 18:22:56.065172 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgsuYIjOY2HJmpzn7yjGo7f0YzJm9N6IknXK9JPNOIam8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Jun 03 18:22:56.141979 osdx OSDxCLI[623229]: User 'admin' added a new cfg line: 'show working'. Jun 03 18:22:56.243825 osdx ubnt-cfgd[761138]: inactive Jun 03 18:22:56.267922 osdx INFO[761147]: FRR daemons did not change Jun 03 18:22:56.283100 osdx ca-certificates[761163]: Updating certificates in /etc/ssl/certs... Jun 03 18:22:56.906617 osdx ubnt-cfgd[762175]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 03 18:22:56.915559 osdx ca-certificates[762180]: 1 added, 0 removed; done. Jun 03 18:22:56.919230 osdx ca-certificates[762187]: Running hooks in /etc/ca-certificates/update.d... Jun 03 18:22:56.923104 osdx ca-certificates[762189]: done. Jun 03 18:22:57.014586 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 03 18:22:57.027382 osdx cfgd[1768]: [623229]Completed change to active configuration Jun 03 18:22:57.028735 osdx OSDxCLI[623229]: User 'admin' committed the configuration. Jun 03 18:22:57.063888 osdx OSDxCLI[623229]: User 'admin' left the configuration menu. Jun 03 18:22:57.095372 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] dnscrypt-proxy 2.0.45 Jun 03 18:22:57.096211 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] Network connectivity detected Jun 03 18:22:57.096211 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] Dropping privileges Jun 03 18:22:57.098790 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] Network connectivity detected Jun 03 18:22:57.098864 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 03 18:22:57.098864 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 03 18:22:57.098864 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] Firefox workaround initialized Jun 03 18:22:57.098864 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpvf2zp7zo] Jun 03 18:22:57.230778 osdx OSDxCLI[623229]: User 'admin' executed a new command: 'system journal show | cat'. Jun 03 18:22:57.283116 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] [DUT0] OK (DoH) - rtt: 9ms Jun 03 18:22:57.283116 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 9ms) Jun 03 18:22:57.283116 osdx dnscrypt-proxy[762196]: [2026-06-03 18:22:57] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13