Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash a40f12bde09499f71a7f233a3d6b7dab165d2d4b8f21456db726f7a863d7a414 set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jul 24 10:16:51.376598 osdx systemd-journald[2180]: Runtime Journal (/run/log/journal/3a8dbab828fc40a183893e468c03e10b) is 1.8M, max 13.8M, 11.9M free. Jul 24 10:16:51.377115 osdx systemd-journald[2180]: Received client request to rotate journal, rotating. Jul 24 10:16:51.377178 osdx systemd-journald[2180]: Vacuuming done, freed 0B of archived journals from /run/log/journal/3a8dbab828fc40a183893e468c03e10b. Jul 24 10:16:51.390026 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system journal clear'. Jul 24 10:16:51.633459 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system coredump delete all'. Jul 24 10:16:51.915426 osdx OSDxCLI[414651]: User 'admin' entered the configuration menu. Jul 24 10:16:52.015669 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jul 24 10:16:52.115983 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jul 24 10:16:52.185862 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:16:52.270102 osdx ubnt-cfgd[455950]: inactive Jul 24 10:16:52.292707 osdx INFO[455959]: FRR daemons did not change Jul 24 10:16:52.320749 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jul 24 10:16:52.367991 osdx WARNING[456030]: No supported link modes on interface eth0 Jul 24 10:16:52.369388 osdx modulelauncher[456030]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jul 24 10:16:52.369401 osdx modulelauncher[456030]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jul 24 10:16:52.370536 osdx modulelauncher[456030]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jul 24 10:16:52.370545 osdx modulelauncher[456030]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jul 24 10:16:52.583033 osdx cfgd[1923]: [414651]Completed change to active configuration Jul 24 10:16:52.583532 osdx OSDxCLI[414651]: User 'admin' committed the configuration. Jul 24 10:16:52.609407 osdx OSDxCLI[414651]: User 'admin' left the configuration menu. Jul 24 10:16:52.763022 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jul 24 10:16:52.832063 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system journal show | cat'. Jul 24 10:16:54.207704 osdx OSDxCLI[414651]: User 'admin' entered the configuration menu. Jul 24 10:16:54.278656 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jul 24 10:16:54.398584 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jul 24 10:16:54.464477 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jul 24 10:16:54.592981 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jul 24 10:16:54.669869 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash a40f12bde09499f71a7f233a3d6b7dab165d2d4b8f21456db726f7a863d7a414'. Jul 24 10:16:54.764004 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jul 24 10:16:54.826583 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jul 24 10:16:54.957107 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jul 24 10:16:55.023919 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jul 24 10:16:55.159936 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:16:55.224577 osdx ubnt-cfgd[456140]: inactive Jul 24 10:16:55.246041 osdx INFO[456149]: FRR daemons did not change Jul 24 10:16:55.258891 osdx ca-certificates[456165]: Updating certificates in /etc/ssl/certs... Jul 24 10:16:55.802690 osdx ubnt-cfgd[457177]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jul 24 10:16:55.812563 osdx ca-certificates[457183]: 1 added, 0 removed; done. Jul 24 10:16:55.815584 osdx ca-certificates[457189]: Running hooks in /etc/ca-certificates/update.d... Jul 24 10:16:55.818572 osdx ca-certificates[457191]: done. Jul 24 10:16:55.941168 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jul 24 10:16:55.949564 osdx cfgd[1923]: [414651]Completed change to active configuration Jul 24 10:16:55.950119 osdx OSDxCLI[414651]: User 'admin' committed the configuration. Jul 24 10:16:55.966480 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] dnscrypt-proxy 2.0.45 Jul 24 10:16:55.966675 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] Network connectivity detected Jul 24 10:16:55.966732 osdx OSDxCLI[414651]: User 'admin' left the configuration menu. Jul 24 10:16:55.967008 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] Dropping privileges Jul 24 10:16:55.969123 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] Network connectivity detected Jul 24 10:16:55.969169 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jul 24 10:16:55.969169 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jul 24 10:16:55.969169 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jul 24 10:16:55.969169 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] Firefox workaround initialized Jul 24 10:16:55.969229 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:55] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpko95d0ve] Jul 24 10:16:56.101225 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:56] [NOTICE] [RD] OK (DoH) - rtt: 112ms Jul 24 10:16:56.101225 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:56] [NOTICE] Server with the lowest initial latency: RD (rtt: 112ms) Jul 24 10:16:56.101225 osdx dnscrypt-proxy[457250]: [2026-07-24 10:16:56] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 0f551edfd32638f26294f3ca8ed0d316e40e1d601b4a8b3e3a555494793e76df set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jul 24 10:16:51.316303 osdx systemd-journald[2060]: Runtime Journal (/run/log/journal/81882c36df9d4e5d8ea319c786369faf) is 896.0K, max 6.4M, 5.6M free. Jul 24 10:16:51.319565 osdx systemd-journald[2060]: Received client request to rotate journal, rotating. Jul 24 10:16:51.319634 osdx systemd-journald[2060]: Vacuuming done, freed 0B of archived journals from /run/log/journal/81882c36df9d4e5d8ea319c786369faf. Jul 24 10:16:51.326514 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system journal clear'. Jul 24 10:16:51.606493 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system coredump delete all'. Jul 24 10:16:52.839110 osdx OSDxCLI[2419]: User 'admin' entered the configuration menu. Jul 24 10:16:52.979905 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jul 24 10:16:53.045668 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jul 24 10:16:53.108012 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service ssh'. Jul 24 10:16:53.220619 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:16:53.305802 osdx ubnt-cfgd[348230]: inactive Jul 24 10:16:53.384339 osdx INFO[348254]: FRR daemons did not change Jul 24 10:16:53.415549 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jul 24 10:16:53.465891 osdx WARNING[348325]: No supported link modes on interface eth0 Jul 24 10:16:53.467227 osdx modulelauncher[348325]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jul 24 10:16:53.467242 osdx modulelauncher[348325]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jul 24 10:16:53.468488 osdx modulelauncher[348325]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jul 24 10:16:53.468495 osdx modulelauncher[348325]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jul 24 10:16:53.555615 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jul 24 10:16:53.567759 osdx sshd[348386]: Server listening on 0.0.0.0 port 22. Jul 24 10:16:53.567788 osdx sshd[348386]: Server listening on :: port 22. Jul 24 10:16:53.567896 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jul 24 10:16:53.745132 osdx cfgd[1777]: [2419]Completed change to active configuration Jul 24 10:16:53.746011 osdx OSDxCLI[2419]: User 'admin' committed the configuration. Jul 24 10:16:53.763219 osdx OSDxCLI[2419]: User 'admin' left the configuration menu. Jul 24 10:16:53.929612 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jul 24 10:16:56.263881 osdx OSDxCLI[2419]: User 'admin' entered the configuration menu. Jul 24 10:16:56.324342 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jul 24 10:16:56.420518 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jul 24 10:16:56.485393 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jul 24 10:16:56.579348 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Jul 24 10:16:56.645148 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Jul 24 10:16:56.745338 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Jul 24 10:16:56.809718 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 0f551edfd32638f26294f3ca8ed0d316e40e1d601b4a8b3e3a555494793e76df'. Jul 24 10:16:56.934767 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:16:57.082166 osdx ubnt-cfgd[348449]: inactive Jul 24 10:16:57.106786 osdx INFO[348458]: FRR daemons did not change Jul 24 10:16:57.142760 osdx ca-certificates[348474]: Updating certificates in /etc/ssl/certs... Jul 24 10:16:57.813551 osdx ubnt-cfgd[349486]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jul 24 10:16:57.826543 osdx ca-certificates[349490]: 1 added, 0 removed; done. Jul 24 10:16:57.830717 osdx ca-certificates[349498]: Running hooks in /etc/ca-certificates/update.d... Jul 24 10:16:57.834760 osdx ca-certificates[349500]: done. Jul 24 10:16:57.952057 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jul 24 10:16:57.968839 osdx cfgd[1777]: [2419]Completed change to active configuration Jul 24 10:16:57.969697 osdx OSDxCLI[2419]: User 'admin' committed the configuration. Jul 24 10:16:58.017097 osdx OSDxCLI[2419]: User 'admin' left the configuration menu. Jul 24 10:16:58.191882 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system journal show | cat'. Jul 24 10:16:58.250595 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] dnscrypt-proxy 2.0.45 Jul 24 10:16:58.250838 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] Network connectivity detected Jul 24 10:16:58.251010 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] Dropping privileges Jul 24 10:16:58.253215 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] Network connectivity detected Jul 24 10:16:58.253277 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jul 24 10:16:58.253277 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jul 24 10:16:58.253277 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] Firefox workaround initialized Jul 24 10:16:58.253277 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpn39qgj66] Jul 24 10:16:58.530729 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] [DUT0] OK (DoH) - rtt: 160ms Jul 24 10:16:58.530729 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 160ms) Jul 24 10:16:58.530729 osdx dnscrypt-proxy[349507]: [2026-07-24 10:16:58] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash a40f12bde09499f71a7f233a3d6b7dab165d2d4b8f21456db726f7a863d7a414 on DUT0 and expect the following output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCkDxK94JSZ9xp_Izo9a32rFl0tS48hRW23JveoY9ekFApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCkDxK94JSZ9xp_Izo9a32rFl0tS48hRW23JveoY9ekFApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jul 24 10:17:08.343066 osdx systemd-journald[2180]: Runtime Journal (/run/log/journal/3a8dbab828fc40a183893e468c03e10b) is 1.8M, max 13.8M, 11.9M free. Jul 24 10:17:08.344937 osdx systemd-journald[2180]: Received client request to rotate journal, rotating. Jul 24 10:17:08.344997 osdx systemd-journald[2180]: Vacuuming done, freed 0B of archived journals from /run/log/journal/3a8dbab828fc40a183893e468c03e10b. Jul 24 10:17:08.353185 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system journal clear'. Jul 24 10:17:08.628694 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system coredump delete all'. Jul 24 10:17:08.907025 osdx OSDxCLI[414651]: User 'admin' entered the configuration menu. Jul 24 10:17:09.014584 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jul 24 10:17:09.094035 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jul 24 10:17:09.244818 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:09.325820 osdx ubnt-cfgd[459024]: inactive Jul 24 10:17:09.354499 osdx INFO[459033]: FRR daemons did not change Jul 24 10:17:09.384968 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jul 24 10:17:09.438050 osdx WARNING[459104]: No supported link modes on interface eth0 Jul 24 10:17:09.439858 osdx modulelauncher[459104]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jul 24 10:17:09.439870 osdx modulelauncher[459104]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jul 24 10:17:09.441428 osdx modulelauncher[459104]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jul 24 10:17:09.441439 osdx modulelauncher[459104]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jul 24 10:17:09.671850 osdx cfgd[1923]: [414651]Completed change to active configuration Jul 24 10:17:09.672407 osdx OSDxCLI[414651]: User 'admin' committed the configuration. Jul 24 10:17:09.692279 osdx OSDxCLI[414651]: User 'admin' left the configuration menu. Jul 24 10:17:09.891538 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jul 24 10:17:09.999942 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system journal show | cat'. Jul 24 10:17:11.318776 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash a40f12bde09499f71a7f233a3d6b7dab165d2d4b8f21456db726f7a863d7a414'. Jul 24 10:17:11.454906 osdx OSDxCLI[414651]: User 'admin' entered the configuration menu. Jul 24 10:17:11.516176 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jul 24 10:17:11.614829 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jul 24 10:17:11.693685 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCkDxK94JSZ9xp_Izo9a32rFl0tS48hRW23JveoY9ekFApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Jul 24 10:17:11.794664 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jul 24 10:17:11.848020 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jul 24 10:17:11.944404 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jul 24 10:17:12.019030 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jul 24 10:17:12.126101 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jul 24 10:17:12.238011 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:12.316709 osdx ubnt-cfgd[459216]: inactive Jul 24 10:17:12.341700 osdx INFO[459225]: FRR daemons did not change Jul 24 10:17:12.355290 osdx ca-certificates[459241]: Updating certificates in /etc/ssl/certs... Jul 24 10:17:12.895155 osdx ubnt-cfgd[460253]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jul 24 10:17:12.903485 osdx ca-certificates[460259]: 1 added, 0 removed; done. Jul 24 10:17:12.906327 osdx ca-certificates[460265]: Running hooks in /etc/ca-certificates/update.d... Jul 24 10:17:12.909558 osdx ca-certificates[460267]: done. Jul 24 10:17:13.045308 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jul 24 10:17:13.054125 osdx cfgd[1923]: [414651]Completed change to active configuration Jul 24 10:17:13.054624 osdx OSDxCLI[414651]: User 'admin' committed the configuration. Jul 24 10:17:13.076679 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] dnscrypt-proxy 2.0.45 Jul 24 10:17:13.076938 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Network connectivity detected Jul 24 10:17:13.077034 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Dropping privileges Jul 24 10:17:13.079406 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Network connectivity detected Jul 24 10:17:13.079466 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jul 24 10:17:13.079466 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jul 24 10:17:13.079466 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jul 24 10:17:13.079466 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Firefox workaround initialized Jul 24 10:17:13.079466 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpdtbigz8o] Jul 24 10:17:13.081956 osdx OSDxCLI[414651]: User 'admin' left the configuration menu. Jul 24 10:17:13.220175 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] [RD] OK (DoH) - rtt: 118ms Jul 24 10:17:13.220175 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] Server with the lowest initial latency: RD (rtt: 118ms) Jul 24 10:17:13.220175 osdx dnscrypt-proxy[460326]: [2026-07-24 10:17:13] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run the command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 0f551edfd32638f26294f3ca8ed0d316e40e1d601b4a8b3e3a555494793e76df on DUT1 and expect the following output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgD1Ue39MmOPJilPPKjtDTFuQOHWAbSos-OlVUlHk-dt8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgD1Ue39MmOPJilPPKjtDTFuQOHWAbSos-OlVUlHk-dt8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jul 24 10:17:08.294065 osdx systemd-journald[2060]: Runtime Journal (/run/log/journal/81882c36df9d4e5d8ea319c786369faf) is 928.0K, max 6.4M, 5.5M free. Jul 24 10:17:08.298082 osdx systemd-journald[2060]: Received client request to rotate journal, rotating. Jul 24 10:17:08.298157 osdx systemd-journald[2060]: Vacuuming done, freed 0B of archived journals from /run/log/journal/81882c36df9d4e5d8ea319c786369faf. Jul 24 10:17:08.304346 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system journal clear'. Jul 24 10:17:08.581906 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system coredump delete all'. Jul 24 10:17:10.006538 osdx OSDxCLI[2419]: User 'admin' entered the configuration menu. Jul 24 10:17:10.154769 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jul 24 10:17:10.222455 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jul 24 10:17:10.319547 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service ssh'. Jul 24 10:17:10.396506 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:10.489639 osdx ubnt-cfgd[351277]: inactive Jul 24 10:17:10.567089 osdx INFO[351301]: FRR daemons did not change Jul 24 10:17:10.598488 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jul 24 10:17:10.649102 osdx WARNING[351372]: No supported link modes on interface eth0 Jul 24 10:17:10.650593 osdx modulelauncher[351372]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jul 24 10:17:10.650611 osdx modulelauncher[351372]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jul 24 10:17:10.651863 osdx modulelauncher[351372]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jul 24 10:17:10.651873 osdx modulelauncher[351372]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jul 24 10:17:10.742297 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jul 24 10:17:10.753306 osdx sshd[351433]: Server listening on 0.0.0.0 port 22. Jul 24 10:17:10.753330 osdx sshd[351433]: Server listening on :: port 22. Jul 24 10:17:10.753422 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jul 24 10:17:10.914969 osdx cfgd[1777]: [2419]Completed change to active configuration Jul 24 10:17:10.915725 osdx OSDxCLI[2419]: User 'admin' committed the configuration. Jul 24 10:17:10.931565 osdx OSDxCLI[2419]: User 'admin' left the configuration menu. Jul 24 10:17:11.080390 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jul 24 10:17:13.404919 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 0f551edfd32638f26294f3ca8ed0d316e40e1d601b4a8b3e3a555494793e76df'. Jul 24 10:17:13.560807 osdx OSDxCLI[2419]: User 'admin' entered the configuration menu. Jul 24 10:17:13.630927 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jul 24 10:17:13.729923 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jul 24 10:17:13.818239 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jul 24 10:17:13.936467 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgD1Ue39MmOPJilPPKjtDTFuQOHWAbSos-OlVUlHk-dt8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Jul 24 10:17:14.062373 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:14.170459 osdx ubnt-cfgd[351496]: inactive Jul 24 10:17:14.195545 osdx INFO[351505]: FRR daemons did not change Jul 24 10:17:14.210887 osdx ca-certificates[351521]: Updating certificates in /etc/ssl/certs... Jul 24 10:17:14.932929 osdx ubnt-cfgd[352533]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jul 24 10:17:14.941410 osdx ca-certificates[352538]: 1 added, 0 removed; done. Jul 24 10:17:14.945336 osdx ca-certificates[352545]: Running hooks in /etc/ca-certificates/update.d... Jul 24 10:17:14.949671 osdx ca-certificates[352547]: done. Jul 24 10:17:15.054519 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jul 24 10:17:15.067035 osdx cfgd[1777]: [2419]Completed change to active configuration Jul 24 10:17:15.068063 osdx OSDxCLI[2419]: User 'admin' committed the configuration. Jul 24 10:17:15.100654 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] dnscrypt-proxy 2.0.45 Jul 24 10:17:15.100972 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] Network connectivity detected Jul 24 10:17:15.100972 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] Dropping privileges Jul 24 10:17:15.103119 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] Network connectivity detected Jul 24 10:17:15.103216 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jul 24 10:17:15.103216 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jul 24 10:17:15.103216 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] Firefox workaround initialized Jul 24 10:17:15.103216 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp9uj8dnkz] Jul 24 10:17:15.112730 osdx OSDxCLI[2419]: User 'admin' left the configuration menu. Jul 24 10:17:15.344141 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system journal show | cat'. Jul 24 10:17:15.501386 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] [DUT0] OK (DoH) - rtt: 107ms Jul 24 10:17:15.501386 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 107ms) Jul 24 10:17:15.501386 osdx dnscrypt-proxy[352554]: [2026-07-24 10:17:15] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
48:04:61:71:18:d9:24:fd:46:4f:dd:f9:88:99:37:da:f1:ca:f6:eb:51:14:93:33:06:66:c1:2a:0b:e1:e7:a7
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '48:04:61:71:18:d9:24:fd:46:4f:dd:f9:88:99:37:da:f1:ca:f6:eb:51:14:93:33:06:66:c1:2a:0b:e1:e7:a7' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jul 24 10:17:25.328990 osdx systemd-journald[2180]: Runtime Journal (/run/log/journal/3a8dbab828fc40a183893e468c03e10b) is 1.8M, max 13.8M, 11.9M free. Jul 24 10:17:25.330253 osdx systemd-journald[2180]: Received client request to rotate journal, rotating. Jul 24 10:17:25.330321 osdx systemd-journald[2180]: Vacuuming done, freed 0B of archived journals from /run/log/journal/3a8dbab828fc40a183893e468c03e10b. Jul 24 10:17:25.340069 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system journal clear'. Jul 24 10:17:25.578324 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system coredump delete all'. Jul 24 10:17:25.842868 osdx OSDxCLI[414651]: User 'admin' entered the configuration menu. Jul 24 10:17:25.930976 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jul 24 10:17:25.994014 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jul 24 10:17:26.104666 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:26.199755 osdx ubnt-cfgd[462098]: inactive Jul 24 10:17:26.241967 osdx INFO[462107]: FRR daemons did not change Jul 24 10:17:26.278259 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jul 24 10:17:26.344610 osdx WARNING[462178]: No supported link modes on interface eth0 Jul 24 10:17:26.346724 osdx modulelauncher[462178]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jul 24 10:17:26.346738 osdx modulelauncher[462178]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jul 24 10:17:26.348309 osdx modulelauncher[462178]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jul 24 10:17:26.348320 osdx modulelauncher[462178]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jul 24 10:17:26.581251 osdx cfgd[1923]: [414651]Completed change to active configuration Jul 24 10:17:26.581960 osdx OSDxCLI[414651]: User 'admin' committed the configuration. Jul 24 10:17:26.616333 osdx OSDxCLI[414651]: User 'admin' left the configuration menu. Jul 24 10:17:26.825868 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jul 24 10:17:26.912257 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system journal show | cat'. Jul 24 10:17:28.479762 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jul 24 10:17:28.635386 osdx OSDxCLI[414651]: User 'admin' entered the configuration menu. Jul 24 10:17:28.712047 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jul 24 10:17:28.829024 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jul 24 10:17:28.924734 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Jul 24 10:17:29.042708 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Jul 24 10:17:29.149458 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Jul 24 10:17:29.224161 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 48:04:61:71:18:d9:24:fd:46:4f:dd:f9:88:99:37:da:f1:ca:f6:eb:51:14:93:33:06:66:c1:2a:0b:e1:e7:a7'. Jul 24 10:17:29.315344 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jul 24 10:17:29.394535 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jul 24 10:17:29.516223 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jul 24 10:17:29.579655 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jul 24 10:17:29.694062 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:29.754941 osdx ubnt-cfgd[462291]: inactive Jul 24 10:17:29.781576 osdx INFO[462300]: FRR daemons did not change Jul 24 10:17:29.797094 osdx ca-certificates[462316]: Updating certificates in /etc/ssl/certs... Jul 24 10:17:30.410469 osdx ubnt-cfgd[463328]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jul 24 10:17:30.419255 osdx ca-certificates[463333]: 1 added, 0 removed; done. Jul 24 10:17:30.423064 osdx ca-certificates[463340]: Running hooks in /etc/ca-certificates/update.d... Jul 24 10:17:30.426874 osdx ca-certificates[463342]: done. Jul 24 10:17:30.566692 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jul 24 10:17:30.576263 osdx cfgd[1923]: [414651]Completed change to active configuration Jul 24 10:17:30.576846 osdx OSDxCLI[414651]: User 'admin' committed the configuration. Jul 24 10:17:30.594870 osdx OSDxCLI[414651]: User 'admin' left the configuration menu. Jul 24 10:17:30.595906 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] dnscrypt-proxy 2.0.45 Jul 24 10:17:30.596128 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Network connectivity detected Jul 24 10:17:30.596314 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Dropping privileges Jul 24 10:17:30.598986 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Network connectivity detected Jul 24 10:17:30.599068 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jul 24 10:17:30.599068 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jul 24 10:17:30.599068 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jul 24 10:17:30.599068 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Firefox workaround initialized Jul 24 10:17:30.599068 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp0ct8jp4g] Jul 24 10:17:30.599929 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jul 24 10:17:30.599929 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jul 24 10:17:30.599929 osdx dnscrypt-proxy[463401]: [2026-07-24 10:17:30] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 0f551edfd32638f26294f3ca8ed0d316e40e1d601b4a8b3e3a555494793e76df set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jul 24 10:17:25.305797 osdx systemd-journald[2060]: Runtime Journal (/run/log/journal/81882c36df9d4e5d8ea319c786369faf) is 952.0K, max 6.4M, 5.5M free. Jul 24 10:17:25.309409 osdx systemd-journald[2060]: Received client request to rotate journal, rotating. Jul 24 10:17:25.309469 osdx systemd-journald[2060]: Vacuuming done, freed 0B of archived journals from /run/log/journal/81882c36df9d4e5d8ea319c786369faf. Jul 24 10:17:25.319663 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system journal clear'. Jul 24 10:17:25.523269 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system coredump delete all'. Jul 24 10:17:26.948698 osdx OSDxCLI[2419]: User 'admin' entered the configuration menu. Jul 24 10:17:27.087149 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jul 24 10:17:27.174740 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jul 24 10:17:27.235432 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service ssh'. Jul 24 10:17:27.375861 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:27.450958 osdx ubnt-cfgd[354322]: inactive Jul 24 10:17:27.555353 osdx INFO[354346]: FRR daemons did not change Jul 24 10:17:27.609840 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jul 24 10:17:27.675980 osdx WARNING[354417]: No supported link modes on interface eth0 Jul 24 10:17:27.678160 osdx modulelauncher[354417]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jul 24 10:17:27.678175 osdx modulelauncher[354417]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jul 24 10:17:27.680198 osdx modulelauncher[354417]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jul 24 10:17:27.680209 osdx modulelauncher[354417]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jul 24 10:17:27.785707 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jul 24 10:17:27.800275 osdx sshd[354478]: Server listening on 0.0.0.0 port 22. Jul 24 10:17:27.800564 osdx sshd[354478]: Server listening on :: port 22. Jul 24 10:17:27.800769 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jul 24 10:17:28.044238 osdx cfgd[1777]: [2419]Completed change to active configuration Jul 24 10:17:28.045411 osdx OSDxCLI[2419]: User 'admin' committed the configuration. Jul 24 10:17:28.069982 osdx OSDxCLI[2419]: User 'admin' left the configuration menu. Jul 24 10:17:28.257143 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jul 24 10:17:30.783556 osdx OSDxCLI[2419]: User 'admin' entered the configuration menu. Jul 24 10:17:30.890483 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jul 24 10:17:30.974156 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jul 24 10:17:31.084447 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jul 24 10:17:31.167935 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Jul 24 10:17:31.279972 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Jul 24 10:17:31.365164 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Jul 24 10:17:31.471009 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 0f551edfd32638f26294f3ca8ed0d316e40e1d601b4a8b3e3a555494793e76df'. Jul 24 10:17:31.594504 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:31.692997 osdx ubnt-cfgd[354541]: inactive Jul 24 10:17:31.717690 osdx INFO[354550]: FRR daemons did not change Jul 24 10:17:31.734466 osdx ca-certificates[354566]: Updating certificates in /etc/ssl/certs... Jul 24 10:17:32.268498 osdx ubnt-cfgd[355578]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jul 24 10:17:32.276298 osdx ca-certificates[355583]: 1 added, 0 removed; done. Jul 24 10:17:32.280871 osdx ca-certificates[355590]: Running hooks in /etc/ca-certificates/update.d... Jul 24 10:17:32.283927 osdx ca-certificates[355592]: done. Jul 24 10:17:32.361790 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jul 24 10:17:32.377658 osdx cfgd[1777]: [2419]Completed change to active configuration Jul 24 10:17:32.378220 osdx OSDxCLI[2419]: User 'admin' committed the configuration. Jul 24 10:17:32.398232 osdx OSDxCLI[2419]: User 'admin' left the configuration menu. Jul 24 10:17:32.418660 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] dnscrypt-proxy 2.0.45 Jul 24 10:17:32.418937 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] Network connectivity detected Jul 24 10:17:32.418937 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] Dropping privileges Jul 24 10:17:32.420845 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] Network connectivity detected Jul 24 10:17:32.420911 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jul 24 10:17:32.420911 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jul 24 10:17:32.420911 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] Firefox workaround initialized Jul 24 10:17:32.420911 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpg18mqc4k] Jul 24 10:17:32.700171 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system journal show | cat'. Jul 24 10:17:32.719908 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] [DUT0] OK (DoH) - rtt: 119ms Jul 24 10:17:32.719908 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 119ms) Jul 24 10:17:32.719908 osdx dnscrypt-proxy[355599]: [2026-07-24 10:17:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run the command service dns proxy dnscrypt public-key running://dnscrypt.crt on DUT0 and expect the following output:
Show output
48:04:61:71:18:d9:24:fd:46:4f:dd:f9:88:99:37:da:f1:ca:f6:eb:51:14:93:33:06:66:c1:2a:0b:e1:e7:a7
Step 2: Run the command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 48:04:61:71:18:d9:24:fd:46:4f:dd:f9:88:99:37:da:f1:ca:f6:eb:51:14:93:33:06:66:c1:2a:0b:e1:e7:a7 ip 10.215.168.1 port 8443 on DUT0 and expect the following output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEgEYXEY2ST9Rk_d-YiZN9rxyvbrURSTMwZmwSoL4eenGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEgEYXEY2ST9Rk_d-YiZN9rxyvbrURSTMwZmwSoL4eenGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | cat on DUT0 and check whether the output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jul 24 10:17:41.000222 osdx systemd-timedated[414993]: Changed local time to Fri 2026-07-24 10:17:41 UTC Jul 24 10:17:41.001648 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'set date 2026-07-24 10:17:41'. Jul 24 10:17:41.002053 osdx systemd-journald[2180]: Time jumped backwards, rotating. Jul 24 10:17:41.320572 osdx systemd-journald[2180]: Runtime Journal (/run/log/journal/3a8dbab828fc40a183893e468c03e10b) is 1.8M, max 13.8M, 11.9M free. Jul 24 10:17:41.322060 osdx systemd-journald[2180]: Received client request to rotate journal, rotating. Jul 24 10:17:41.322129 osdx systemd-journald[2180]: Vacuuming done, freed 0B of archived journals from /run/log/journal/3a8dbab828fc40a183893e468c03e10b. Jul 24 10:17:41.330028 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system journal clear'. Jul 24 10:17:41.532877 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system coredump delete all'. Jul 24 10:17:41.795721 osdx OSDxCLI[414651]: User 'admin' entered the configuration menu. Jul 24 10:17:41.883157 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jul 24 10:17:41.956158 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jul 24 10:17:42.076854 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:42.139241 osdx ubnt-cfgd[465174]: inactive Jul 24 10:17:42.165065 osdx INFO[465183]: FRR daemons did not change Jul 24 10:17:42.198064 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jul 24 10:17:42.252146 osdx WARNING[465254]: No supported link modes on interface eth0 Jul 24 10:17:42.253953 osdx modulelauncher[465254]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jul 24 10:17:42.253968 osdx modulelauncher[465254]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jul 24 10:17:42.255297 osdx modulelauncher[465254]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jul 24 10:17:42.255307 osdx modulelauncher[465254]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jul 24 10:17:42.473229 osdx cfgd[1923]: [414651]Completed change to active configuration Jul 24 10:17:42.473881 osdx OSDxCLI[414651]: User 'admin' committed the configuration. Jul 24 10:17:42.501069 osdx OSDxCLI[414651]: User 'admin' left the configuration menu. Jul 24 10:17:42.683666 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jul 24 10:17:42.796231 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'system journal show | cat'. Jul 24 10:17:44.234669 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jul 24 10:17:44.339697 osdx OSDxCLI[414651]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 48:04:61:71:18:d9:24:fd:46:4f:dd:f9:88:99:37:da:f1:ca:f6:eb:51:14:93:33:06:66:c1:2a:0b:e1:e7:a7 ip 10.215.168.1 port 8443'. Jul 24 10:17:44.519559 osdx OSDxCLI[414651]: User 'admin' entered the configuration menu. Jul 24 10:17:44.594963 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jul 24 10:17:44.689194 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jul 24 10:17:44.769454 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEgEYXEY2ST9Rk_d-YiZN9rxyvbrURSTMwZmwSoL4eenGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Jul 24 10:17:44.878960 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jul 24 10:17:44.938804 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jul 24 10:17:45.066136 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jul 24 10:17:45.140377 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jul 24 10:17:45.275166 osdx OSDxCLI[414651]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:45.350454 osdx ubnt-cfgd[465367]: inactive Jul 24 10:17:45.384062 osdx INFO[465376]: FRR daemons did not change Jul 24 10:17:45.400241 osdx ca-certificates[465392]: Updating certificates in /etc/ssl/certs... Jul 24 10:17:46.149817 osdx ubnt-cfgd[466404]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jul 24 10:17:46.159413 osdx ca-certificates[466410]: 1 added, 0 removed; done. Jul 24 10:17:46.166437 osdx ca-certificates[466414]: Running hooks in /etc/ca-certificates/update.d... Jul 24 10:17:46.170153 osdx ca-certificates[466418]: done. Jul 24 10:17:46.306574 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jul 24 10:17:46.318627 osdx cfgd[1923]: [414651]Completed change to active configuration Jul 24 10:17:46.319165 osdx OSDxCLI[414651]: User 'admin' committed the configuration. Jul 24 10:17:46.329171 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] dnscrypt-proxy 2.0.45 Jul 24 10:17:46.329414 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Network connectivity detected Jul 24 10:17:46.329523 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Dropping privileges Jul 24 10:17:46.332042 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Network connectivity detected Jul 24 10:17:46.332127 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jul 24 10:17:46.332127 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jul 24 10:17:46.332127 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jul 24 10:17:46.332127 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Firefox workaround initialized Jul 24 10:17:46.332127 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpnsax8g35] Jul 24 10:17:46.333312 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jul 24 10:17:46.333375 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jul 24 10:17:46.333375 osdx dnscrypt-proxy[466477]: [2026-07-24 10:17:46] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jul 24 10:17:46.351524 osdx OSDxCLI[414651]: User 'admin' left the configuration menu.
Step 5: Run the command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 0f551edfd32638f26294f3ca8ed0d316e40e1d601b4a8b3e3a555494793e76df on DUT1 and expect the following output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgD1Ue39MmOPJilPPKjtDTFuQOHWAbSos-OlVUlHk-dt8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgD1Ue39MmOPJilPPKjtDTFuQOHWAbSos-OlVUlHk-dt8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run the command system journal show | cat on DUT1 and check whether the output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jul 24 10:17:42.287690 osdx systemd-journald[2060]: Runtime Journal (/run/log/journal/81882c36df9d4e5d8ea319c786369faf) is 952.0K, max 6.4M, 5.5M free. Jul 24 10:17:42.291557 osdx systemd-journald[2060]: Received client request to rotate journal, rotating. Jul 24 10:17:42.291630 osdx systemd-journald[2060]: Vacuuming done, freed 0B of archived journals from /run/log/journal/81882c36df9d4e5d8ea319c786369faf. Jul 24 10:17:42.299074 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system journal clear'. Jul 24 10:17:42.492801 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system coredump delete all'. Jul 24 10:17:43.903192 osdx OSDxCLI[2419]: User 'admin' entered the configuration menu. Jul 24 10:17:44.032648 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jul 24 10:17:44.110804 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jul 24 10:17:44.247756 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service ssh'. Jul 24 10:17:44.316334 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:44.398558 osdx ubnt-cfgd[357366]: inactive Jul 24 10:17:44.486035 osdx INFO[357390]: FRR daemons did not change Jul 24 10:17:44.519783 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jul 24 10:17:44.579921 osdx WARNING[357461]: No supported link modes on interface eth0 Jul 24 10:17:44.581585 osdx modulelauncher[357461]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jul 24 10:17:44.581598 osdx modulelauncher[357461]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jul 24 10:17:44.583057 osdx modulelauncher[357461]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jul 24 10:17:44.583067 osdx modulelauncher[357461]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jul 24 10:17:44.679888 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jul 24 10:17:44.691084 osdx sshd[357522]: Server listening on 0.0.0.0 port 22. Jul 24 10:17:44.691109 osdx sshd[357522]: Server listening on :: port 22. Jul 24 10:17:44.691198 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jul 24 10:17:44.865702 osdx cfgd[1777]: [2419]Completed change to active configuration Jul 24 10:17:44.866724 osdx OSDxCLI[2419]: User 'admin' committed the configuration. Jul 24 10:17:44.885990 osdx OSDxCLI[2419]: User 'admin' left the configuration menu. Jul 24 10:17:45.055291 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jul 24 10:17:47.664179 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 0f551edfd32638f26294f3ca8ed0d316e40e1d601b4a8b3e3a555494793e76df'. Jul 24 10:17:47.829184 osdx OSDxCLI[2419]: User 'admin' entered the configuration menu. Jul 24 10:17:47.901574 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jul 24 10:17:48.029202 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jul 24 10:17:48.099996 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jul 24 10:17:48.203636 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgD1Ue39MmOPJilPPKjtDTFuQOHWAbSos-OlVUlHk-dt8NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Jul 24 10:17:48.275537 osdx OSDxCLI[2419]: User 'admin' added a new cfg line: 'show working'. Jul 24 10:17:48.378471 osdx ubnt-cfgd[357585]: inactive Jul 24 10:17:48.400520 osdx INFO[357594]: FRR daemons did not change Jul 24 10:17:48.416578 osdx ca-certificates[357610]: Updating certificates in /etc/ssl/certs... Jul 24 10:17:49.111073 osdx ubnt-cfgd[358622]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jul 24 10:17:49.122205 osdx ca-certificates[358628]: 1 added, 0 removed; done. Jul 24 10:17:49.126082 osdx ca-certificates[358634]: Running hooks in /etc/ca-certificates/update.d... Jul 24 10:17:49.130113 osdx ca-certificates[358636]: done. Jul 24 10:17:49.228163 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jul 24 10:17:49.245810 osdx cfgd[1777]: [2419]Completed change to active configuration Jul 24 10:17:49.246502 osdx OSDxCLI[2419]: User 'admin' committed the configuration. Jul 24 10:17:49.261938 osdx OSDxCLI[2419]: User 'admin' left the configuration menu. Jul 24 10:17:49.274944 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:49] [NOTICE] dnscrypt-proxy 2.0.45 Jul 24 10:17:49.275354 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:49] [NOTICE] Network connectivity detected Jul 24 10:17:49.275732 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:49] [NOTICE] Dropping privileges Jul 24 10:17:49.278751 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:49] [NOTICE] Network connectivity detected Jul 24 10:17:49.278838 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:49] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jul 24 10:17:49.278838 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:49] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jul 24 10:17:49.278838 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:49] [NOTICE] Firefox workaround initialized Jul 24 10:17:49.278838 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:49] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp3zebyock] Jul 24 10:17:49.447681 osdx OSDxCLI[2419]: User 'admin' executed a new command: 'system journal show | cat'. Jul 24 10:17:50.417068 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:50] [CRITICAL] [DUT0] may be a lying resolver Jul 24 10:17:50.417068 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:50] [NOTICE] [DUT0] OK (DoH) - rtt: 1021ms Jul 24 10:17:50.417390 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:50] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 1021ms) Jul 24 10:17:50.417390 osdx dnscrypt-proxy[358643]: [2026-07-24 10:17:50] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run the command show host lookup teldat.com type A on DUT1 and check whether the output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13