Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 81d8c57444e7a6865033e179e51a88281aac172403e7e688603f628babda0cbd set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 02 09:56:42.000204 osdx systemd-timedated[293181]: Changed local time to Tue 2026-06-02 09:56:42 UTC Jun 02 09:56:42.000876 osdx systemd-journald[148515]: Time jumped backwards, rotating. Jun 02 09:56:42.001372 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'set date 2026-06-02 09:56:42'. Jun 02 09:56:42.358933 osdx sudo[336141]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:56:42.362859 osdx systemd-journald[148515]: Runtime Journal (/run/log/journal/a0363f0a73514b24b35c4ba7ae73dc6e) is 1.8M, max 13.8M, 11.9M free. Jun 02 09:56:42.364852 osdx systemd-journald[148515]: Received client request to rotate journal, rotating. Jun 02 09:56:42.364903 osdx systemd-journald[148515]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a0363f0a73514b24b35c4ba7ae73dc6e. Jun 02 09:56:42.368023 osdx sudo[336140]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:56:42.374976 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system journal clear'. Jun 02 09:56:42.750387 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system coredump delete all'. Jun 02 09:56:43.058871 osdx OSDxCLI[171599]: User 'admin' entered the configuration menu. Jun 02 09:56:43.150005 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 02 09:56:43.228189 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 02 09:56:43.296626 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:56:43.391480 osdx ubnt-cfgd[336167]: inactive Jun 02 09:56:43.415036 osdx INFO[336175]: FRR daemons did not change Jun 02 09:56:43.440854 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 02 09:56:43.512585 osdx cfgd[1665]: [171599]Completed change to active configuration Jun 02 09:56:43.523670 osdx OSDxCLI[171599]: User 'admin' committed the configuration. Jun 02 09:56:43.553745 osdx OSDxCLI[171599]: User 'admin' left the configuration menu. Jun 02 09:56:43.732635 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 02 09:56:44.855624 osdx OSDxCLI[171599]: User 'admin' entered the configuration menu. Jun 02 09:56:44.917297 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 02 09:56:45.015593 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 02 09:56:45.099075 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 02 09:56:45.204486 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 02 09:56:45.319524 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 81d8c57444e7a6865033e179e51a88281aac172403e7e688603f628babda0cbd'. Jun 02 09:56:45.381668 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 02 09:56:45.481350 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 02 09:56:45.538997 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 02 09:56:45.652809 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 02 09:56:45.771360 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:56:45.852311 osdx ubnt-cfgd[336332]: inactive Jun 02 09:56:45.877653 osdx INFO[336340]: FRR daemons did not change Jun 02 09:56:45.881302 osdx sudo[336343]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:56:45.890125 osdx ca-certificates[336356]: Updating certificates in /etc/ssl/certs... Jun 02 09:56:46.392141 osdx ubnt-cfgd[337354]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 02 09:56:46.399982 osdx ca-certificates[337360]: 1 added, 0 removed; done. Jun 02 09:56:46.403004 osdx ca-certificates[337366]: Running hooks in /etc/ca-certificates/update.d... Jun 02 09:56:46.405783 osdx ca-certificates[337368]: done. Jun 02 09:56:46.533187 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 02 09:56:46.534682 osdx cfgd[1665]: [171599]Completed change to active configuration Jun 02 09:56:46.539541 osdx OSDxCLI[171599]: User 'admin' committed the configuration. Jun 02 09:56:46.577444 osdx OSDxCLI[171599]: User 'admin' left the configuration menu. Jun 02 09:56:46.578197 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] dnscrypt-proxy 2.0.45 Jun 02 09:56:46.578405 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Network connectivity detected Jun 02 09:56:46.578486 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Dropping privileges Jun 02 09:56:46.580554 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Network connectivity detected Jun 02 09:56:46.580610 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 02 09:56:46.580610 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 02 09:56:46.580610 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 02 09:56:46.580610 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Firefox workaround initialized Jun 02 09:56:46.580684 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpqvedx8d5] Jun 02 09:56:46.733347 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system journal show | cat'. Jun 02 09:56:46.734021 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] [RD] OK (DoH) - rtt: 129ms Jun 02 09:56:46.734021 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] Server with the lowest initial latency: RD (rtt: 129ms) Jun 02 09:56:46.734021 osdx dnscrypt-proxy[337428]: [2026-06-02 09:56:46] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 3d036172e0af6101991d3acf79249b31702f8b773cb6c56d9122641927accec0 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
^(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 02 09:56:42.417014 osdx systemd-journald[1765]: Runtime Journal (/run/log/journal/27bca15c163b4997962c56740a934d39) is 900.0K, max 6.5M, 5.6M free. Jun 02 09:56:42.418163 osdx systemd-journald[1765]: Received client request to rotate journal, rotating. Jun 02 09:56:42.418212 osdx systemd-journald[1765]: Vacuuming done, freed 0B of archived journals from /run/log/journal/27bca15c163b4997962c56740a934d39. Jun 02 09:56:42.426695 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system journal clear'. Jun 02 09:56:42.759513 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system coredump delete all'. Jun 02 09:56:43.809483 osdx OSDxCLI[68402]: User 'admin' entered the configuration menu. Jun 02 09:56:43.899128 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 02 09:56:44.006224 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 02 09:56:44.071391 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service ssh'. Jun 02 09:56:44.180304 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:56:44.244338 osdx ubnt-cfgd[163536]: inactive Jun 02 09:56:44.271826 osdx INFO[163550]: FRR daemons did not change Jun 02 09:56:44.298165 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 02 09:56:44.442454 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 02 09:56:44.456873 osdx sshd[163666]: Server listening on 0.0.0.0 port 22. Jun 02 09:56:44.457102 osdx sshd[163666]: Server listening on :: port 22. Jun 02 09:56:44.457236 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 02 09:56:44.479634 osdx cfgd[1460]: [68402]Completed change to active configuration Jun 02 09:56:44.490888 osdx OSDxCLI[68402]: User 'admin' committed the configuration. Jun 02 09:56:44.508071 osdx OSDxCLI[68402]: User 'admin' left the configuration menu. Jun 02 09:56:44.660541 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 02 09:56:48.941412 osdx OSDxCLI[68402]: User 'admin' entered the configuration menu. Jun 02 09:56:49.012505 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 02 09:56:49.108668 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 02 09:56:49.176967 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 02 09:56:49.290768 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Jun 02 09:56:49.348494 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Jun 02 09:56:49.436215 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Jun 02 09:56:49.499176 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 3d036172e0af6101991d3acf79249b31702f8b773cb6c56d9122641927accec0'. Jun 02 09:56:49.608176 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:56:49.694627 osdx ubnt-cfgd[163721]: inactive Jun 02 09:56:49.715055 osdx INFO[163729]: FRR daemons did not change Jun 02 09:56:49.730675 osdx ca-certificates[163744]: Updating certificates in /etc/ssl/certs... Jun 02 09:56:50.222652 osdx ubnt-cfgd[164743]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 02 09:56:50.229836 osdx ca-certificates[164748]: 1 added, 0 removed; done. Jun 02 09:56:50.232551 osdx ca-certificates[164755]: Running hooks in /etc/ca-certificates/update.d... Jun 02 09:56:50.235081 osdx ca-certificates[164757]: done. Jun 02 09:56:50.302581 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 02 09:56:50.304289 osdx cfgd[1460]: [68402]Completed change to active configuration Jun 02 09:56:50.307499 osdx OSDxCLI[68402]: User 'admin' committed the configuration. Jun 02 09:56:50.323447 osdx OSDxCLI[68402]: User 'admin' left the configuration menu. Jun 02 09:56:50.375378 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] dnscrypt-proxy 2.0.45 Jun 02 09:56:50.375701 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] Network connectivity detected Jun 02 09:56:50.375962 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] Dropping privileges Jun 02 09:56:50.378097 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] Network connectivity detected Jun 02 09:56:50.378200 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 02 09:56:50.378242 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 02 09:56:50.378288 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] Firefox workaround initialized Jun 02 09:56:50.378320 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpcvleuxkm] Jun 02 09:56:50.508003 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system journal show | cat'. Jun 02 09:56:50.656817 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] [DUT0] OK (DoH) - rtt: 125ms Jun 02 09:56:50.656817 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 125ms) Jun 02 09:56:50.656817 osdx dnscrypt-proxy[164764]: [2026-06-02 09:56:50] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 81d8c57444e7a6865033e179e51a88281aac172403e7e688603f628babda0cbd at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCB2MV0ROemhlAz4XnlGogoGqwXJAPn5ohgP2KLq9oMvQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCB2MV0ROemhlAz4XnlGogoGqwXJAPn5ohgP2KLq9oMvQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 02 09:56:59.312781 osdx systemd-journald[148515]: Runtime Journal (/run/log/journal/a0363f0a73514b24b35c4ba7ae73dc6e) is 1.9M, max 13.8M, 11.8M free. Jun 02 09:56:59.314717 osdx systemd-journald[148515]: Received client request to rotate journal, rotating. Jun 02 09:56:59.314791 osdx systemd-journald[148515]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a0363f0a73514b24b35c4ba7ae73dc6e. Jun 02 09:56:59.317162 osdx sudo[339106]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:56:59.325950 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system journal clear'. Jun 02 09:56:59.604538 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system coredump delete all'. Jun 02 09:56:59.862055 osdx OSDxCLI[171599]: User 'admin' entered the configuration menu. Jun 02 09:56:59.969681 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 02 09:57:00.042792 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 02 09:57:00.163913 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:00.238954 osdx ubnt-cfgd[339133]: inactive Jun 02 09:57:00.260522 osdx INFO[339141]: FRR daemons did not change Jun 02 09:57:00.290716 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 02 09:57:00.374637 osdx cfgd[1665]: [171599]Completed change to active configuration Jun 02 09:57:00.388317 osdx OSDxCLI[171599]: User 'admin' committed the configuration. Jun 02 09:57:00.405445 osdx OSDxCLI[171599]: User 'admin' left the configuration menu. Jun 02 09:57:00.583120 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 02 09:57:01.833610 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 81d8c57444e7a6865033e179e51a88281aac172403e7e688603f628babda0cbd'. Jun 02 09:57:01.976852 osdx OSDxCLI[171599]: User 'admin' entered the configuration menu. Jun 02 09:57:02.050904 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 02 09:57:02.151412 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 02 09:57:02.213858 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCB2MV0ROemhlAz4XnlGogoGqwXJAPn5ohgP2KLq9oMvQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Jun 02 09:57:02.309610 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 02 09:57:02.367077 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 02 09:57:02.473377 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 02 09:57:02.537039 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 02 09:57:02.641817 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 02 09:57:02.751030 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:02.829351 osdx ubnt-cfgd[339300]: inactive Jun 02 09:57:02.855668 osdx INFO[339308]: FRR daemons did not change Jun 02 09:57:02.859339 osdx sudo[339311]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:57:02.868187 osdx ca-certificates[339323]: Updating certificates in /etc/ssl/certs... Jun 02 09:57:03.407680 osdx ubnt-cfgd[340322]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 02 09:57:03.415497 osdx ca-certificates[340327]: 1 added, 0 removed; done. Jun 02 09:57:03.419381 osdx ca-certificates[340334]: Running hooks in /etc/ca-certificates/update.d... Jun 02 09:57:03.423130 osdx ca-certificates[340336]: done. Jun 02 09:57:03.543165 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 02 09:57:03.544720 osdx cfgd[1665]: [171599]Completed change to active configuration Jun 02 09:57:03.546898 osdx OSDxCLI[171599]: User 'admin' committed the configuration. Jun 02 09:57:03.572751 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] dnscrypt-proxy 2.0.45 Jun 02 09:57:03.572993 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Network connectivity detected Jun 02 09:57:03.573045 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Dropping privileges Jun 02 09:57:03.575268 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Network connectivity detected Jun 02 09:57:03.575298 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 02 09:57:03.575298 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 02 09:57:03.575338 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 02 09:57:03.575338 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Firefox workaround initialized Jun 02 09:57:03.575338 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp0fkfqzou] Jun 02 09:57:03.575951 osdx OSDxCLI[171599]: User 'admin' left the configuration menu. Jun 02 09:57:03.704104 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] [RD] OK (DoH) - rtt: 102ms Jun 02 09:57:03.704218 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] Server with the lowest initial latency: RD (rtt: 102ms) Jun 02 09:57:03.704255 osdx dnscrypt-proxy[340396]: [2026-06-02 09:57:03] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 3d036172e0af6101991d3acf79249b31702f8b773cb6c56d9122641927accec0 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgPQNhcuCvYQGZHTrPeSSbMXAvi3c8tsVtkSJkGSeszsANZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgPQNhcuCvYQGZHTrPeSSbMXAvi3c8tsVtkSJkGSeszsANZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
^(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 02 09:56:59.311898 osdx systemd-journald[1765]: Runtime Journal (/run/log/journal/27bca15c163b4997962c56740a934d39) is 928.0K, max 6.5M, 5.6M free. Jun 02 09:56:59.315051 osdx systemd-journald[1765]: Received client request to rotate journal, rotating. Jun 02 09:56:59.315155 osdx systemd-journald[1765]: Vacuuming done, freed 0B of archived journals from /run/log/journal/27bca15c163b4997962c56740a934d39. Jun 02 09:56:59.324551 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system journal clear'. Jun 02 09:56:59.555279 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system coredump delete all'. Jun 02 09:57:00.669312 osdx OSDxCLI[68402]: User 'admin' entered the configuration menu. Jun 02 09:57:00.800002 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 02 09:57:00.876126 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 02 09:57:01.011701 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service ssh'. Jun 02 09:57:01.096310 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:01.194885 osdx ubnt-cfgd[166442]: inactive Jun 02 09:57:01.219829 osdx INFO[166456]: FRR daemons did not change Jun 02 09:57:01.247019 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 02 09:57:01.399274 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 02 09:57:01.411487 osdx sshd[166572]: Server listening on 0.0.0.0 port 22. Jun 02 09:57:01.411694 osdx sshd[166572]: Server listening on :: port 22. Jun 02 09:57:01.411813 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 02 09:57:01.434072 osdx cfgd[1460]: [68402]Completed change to active configuration Jun 02 09:57:01.445358 osdx OSDxCLI[68402]: User 'admin' committed the configuration. Jun 02 09:57:01.462858 osdx OSDxCLI[68402]: User 'admin' left the configuration menu. Jun 02 09:57:01.601783 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 02 09:57:03.769205 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 3d036172e0af6101991d3acf79249b31702f8b773cb6c56d9122641927accec0'. Jun 02 09:57:03.945942 osdx OSDxCLI[68402]: User 'admin' entered the configuration menu. Jun 02 09:57:04.043728 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 02 09:57:04.159898 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 02 09:57:04.230500 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 02 09:57:04.333413 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgPQNhcuCvYQGZHTrPeSSbMXAvi3c8tsVtkSJkGSeszsANZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Jun 02 09:57:04.403849 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:04.493604 osdx ubnt-cfgd[166627]: inactive Jun 02 09:57:04.535390 osdx INFO[166635]: FRR daemons did not change Jun 02 09:57:04.550620 osdx ca-certificates[166651]: Updating certificates in /etc/ssl/certs... Jun 02 09:57:05.016327 osdx ubnt-cfgd[167649]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 02 09:57:05.026096 osdx ca-certificates[167656]: 1 added, 0 removed; done. Jun 02 09:57:05.029121 osdx ca-certificates[167661]: Running hooks in /etc/ca-certificates/update.d... Jun 02 09:57:05.031984 osdx ca-certificates[167663]: done. Jun 02 09:57:05.115322 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 02 09:57:05.116625 osdx cfgd[1460]: [68402]Completed change to active configuration Jun 02 09:57:05.119182 osdx OSDxCLI[68402]: User 'admin' committed the configuration. Jun 02 09:57:05.146403 osdx OSDxCLI[68402]: User 'admin' left the configuration menu. Jun 02 09:57:05.147493 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] dnscrypt-proxy 2.0.45 Jun 02 09:57:05.147619 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] Network connectivity detected Jun 02 09:57:05.147822 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] Dropping privileges Jun 02 09:57:05.149620 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] Network connectivity detected Jun 02 09:57:05.149656 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 02 09:57:05.149656 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 02 09:57:05.149683 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] Firefox workaround initialized Jun 02 09:57:05.149683 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp8k9sew0a] Jun 02 09:57:05.321500 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system journal show | cat'. Jun 02 09:57:05.351980 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] [DUT0] OK (DoH) - rtt: 114ms Jun 02 09:57:05.351980 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 114ms) Jun 02 09:57:05.351980 osdx dnscrypt-proxy[167670]: [2026-06-02 09:57:05] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
81:c3:68:73:11:1c:f8:ce:2c:8d:cf:15:21:92:36:9b:30:71:93:b0:0e:c0:bc:ec:97:25:a9:f7:1b:71:66:5d
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '81:c3:68:73:11:1c:f8:ce:2c:8d:cf:15:21:92:36:9b:30:71:93:b0:0e:c0:bc:ec:97:25:a9:f7:1b:71:66:5d' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 02 09:57:13.000202 osdx systemd-timedated[293181]: Changed local time to Tue 2026-06-02 09:57:13 UTC Jun 02 09:57:13.001269 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'set date 2026-06-02 09:57:13'. Jun 02 09:57:13.001843 osdx systemd-journald[148515]: Time jumped backwards, rotating. Jun 02 09:57:13.327865 osdx sudo[342070]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:57:13.331218 osdx systemd-journald[148515]: Runtime Journal (/run/log/journal/a0363f0a73514b24b35c4ba7ae73dc6e) is 1.8M, max 13.8M, 11.9M free. Jun 02 09:57:13.333843 osdx systemd-journald[148515]: Received client request to rotate journal, rotating. Jun 02 09:57:13.333909 osdx systemd-journald[148515]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a0363f0a73514b24b35c4ba7ae73dc6e. Jun 02 09:57:13.336075 osdx sudo[342069]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:57:13.342091 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system journal clear'. Jun 02 09:57:13.578661 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system coredump delete all'. Jun 02 09:57:13.831982 osdx OSDxCLI[171599]: User 'admin' entered the configuration menu. Jun 02 09:57:13.927823 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 02 09:57:14.013049 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 02 09:57:14.123346 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:14.189070 osdx ubnt-cfgd[342096]: inactive Jun 02 09:57:14.211742 osdx INFO[342104]: FRR daemons did not change Jun 02 09:57:14.237847 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 02 09:57:14.313441 osdx cfgd[1665]: [171599]Completed change to active configuration Jun 02 09:57:14.324735 osdx OSDxCLI[171599]: User 'admin' committed the configuration. Jun 02 09:57:14.352325 osdx OSDxCLI[171599]: User 'admin' left the configuration menu. Jun 02 09:57:14.532102 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 02 09:57:15.643573 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 02 09:57:15.785546 osdx OSDxCLI[171599]: User 'admin' entered the configuration menu. Jun 02 09:57:15.852215 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 02 09:57:15.957840 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 02 09:57:16.017685 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Jun 02 09:57:16.118354 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Jun 02 09:57:16.181047 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Jun 02 09:57:16.271223 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 81:c3:68:73:11:1c:f8:ce:2c:8d:cf:15:21:92:36:9b:30:71:93:b0:0e:c0:bc:ec:97:25:a9:f7:1b:71:66:5d'. Jun 02 09:57:16.322397 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 02 09:57:16.423064 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 02 09:57:16.541059 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 02 09:57:16.598871 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 02 09:57:16.709254 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:16.779655 osdx ubnt-cfgd[342264]: inactive Jun 02 09:57:16.806954 osdx INFO[342272]: FRR daemons did not change Jun 02 09:57:16.811744 osdx sudo[342275]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:57:16.820473 osdx ca-certificates[342288]: Updating certificates in /etc/ssl/certs... Jun 02 09:57:17.350799 osdx ubnt-cfgd[343286]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 02 09:57:17.360552 osdx ca-certificates[343291]: 1 added, 0 removed; done. Jun 02 09:57:17.364429 osdx ca-certificates[343298]: Running hooks in /etc/ca-certificates/update.d... Jun 02 09:57:17.367858 osdx ca-certificates[343300]: done. Jun 02 09:57:17.486130 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 02 09:57:17.487268 osdx cfgd[1665]: [171599]Completed change to active configuration Jun 02 09:57:17.489249 osdx OSDxCLI[171599]: User 'admin' committed the configuration. Jun 02 09:57:17.507668 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] dnscrypt-proxy 2.0.45 Jun 02 09:57:17.507668 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Network connectivity detected Jun 02 09:57:17.507985 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Dropping privileges Jun 02 09:57:17.509375 osdx OSDxCLI[171599]: User 'admin' left the configuration menu. Jun 02 09:57:17.510458 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Network connectivity detected Jun 02 09:57:17.510556 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 02 09:57:17.510595 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 02 09:57:17.510632 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 02 09:57:17.510676 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Firefox workaround initialized Jun 02 09:57:17.510703 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpro21m9x_] Jun 02 09:57:17.511218 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 02 09:57:17.511254 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 02 09:57:17.511254 osdx dnscrypt-proxy[343360]: [2026-06-02 09:57:17] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 3d036172e0af6101991d3acf79249b31702f8b773cb6c56d9122641927accec0 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
^(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 02 09:57:13.301099 osdx systemd-journald[1765]: Runtime Journal (/run/log/journal/27bca15c163b4997962c56740a934d39) is 952.0K, max 6.5M, 5.5M free. Jun 02 09:57:13.304714 osdx systemd-journald[1765]: Received client request to rotate journal, rotating. Jun 02 09:57:13.304776 osdx systemd-journald[1765]: Vacuuming done, freed 0B of archived journals from /run/log/journal/27bca15c163b4997962c56740a934d39. Jun 02 09:57:13.311072 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system journal clear'. Jun 02 09:57:13.541878 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system coredump delete all'. Jun 02 09:57:14.546434 osdx OSDxCLI[68402]: User 'admin' entered the configuration menu. Jun 02 09:57:14.651155 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 02 09:57:14.723536 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 02 09:57:14.818665 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service ssh'. Jun 02 09:57:14.886307 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:15.006958 osdx ubnt-cfgd[169349]: inactive Jun 02 09:57:15.031467 osdx INFO[169363]: FRR daemons did not change Jun 02 09:57:15.060716 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 02 09:57:15.213021 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 02 09:57:15.225465 osdx sshd[169479]: Server listening on 0.0.0.0 port 22. Jun 02 09:57:15.225781 osdx sshd[169479]: Server listening on :: port 22. Jun 02 09:57:15.225991 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 02 09:57:15.252331 osdx cfgd[1460]: [68402]Completed change to active configuration Jun 02 09:57:15.263534 osdx OSDxCLI[68402]: User 'admin' committed the configuration. Jun 02 09:57:15.291994 osdx OSDxCLI[68402]: User 'admin' left the configuration menu. Jun 02 09:57:15.448750 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 02 09:57:17.818989 osdx OSDxCLI[68402]: User 'admin' entered the configuration menu. Jun 02 09:57:17.894880 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 02 09:57:17.984689 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 02 09:57:18.096415 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 02 09:57:18.180632 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Jun 02 09:57:18.255469 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Jun 02 09:57:18.368982 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Jun 02 09:57:18.498934 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 3d036172e0af6101991d3acf79249b31702f8b773cb6c56d9122641927accec0'. Jun 02 09:57:18.581195 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:18.669157 osdx ubnt-cfgd[169534]: inactive Jun 02 09:57:18.698123 osdx INFO[169542]: FRR daemons did not change Jun 02 09:57:18.711300 osdx ca-certificates[169558]: Updating certificates in /etc/ssl/certs... Jun 02 09:57:19.216551 osdx ubnt-cfgd[170556]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 02 09:57:19.225436 osdx ca-certificates[170561]: 1 added, 0 removed; done. Jun 02 09:57:19.228712 osdx ca-certificates[170568]: Running hooks in /etc/ca-certificates/update.d... Jun 02 09:57:19.231836 osdx ca-certificates[170570]: done. Jun 02 09:57:19.308978 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 02 09:57:19.310616 osdx cfgd[1460]: [68402]Completed change to active configuration Jun 02 09:57:19.312969 osdx OSDxCLI[68402]: User 'admin' committed the configuration. Jun 02 09:57:19.331851 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] dnscrypt-proxy 2.0.45 Jun 02 09:57:19.332054 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] Network connectivity detected Jun 02 09:57:19.332110 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] Dropping privileges Jun 02 09:57:19.334310 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] Network connectivity detected Jun 02 09:57:19.334310 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 02 09:57:19.334310 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 02 09:57:19.334310 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] Firefox workaround initialized Jun 02 09:57:19.334310 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp2jheu68p] Jun 02 09:57:19.343074 osdx OSDxCLI[68402]: User 'admin' left the configuration menu. Jun 02 09:57:19.509283 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system journal show | cat'. Jun 02 09:57:19.535306 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] [DUT0] OK (DoH) - rtt: 114ms Jun 02 09:57:19.535306 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 114ms) Jun 02 09:57:19.535306 osdx dnscrypt-proxy[170577]: [2026-06-02 09:57:19] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
81:c3:68:73:11:1c:f8:ce:2c:8d:cf:15:21:92:36:9b:30:71:93:b0:0e:c0:bc:ec:97:25:a9:f7:1b:71:66:5d
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 81:c3:68:73:11:1c:f8:ce:2c:8d:cf:15:21:92:36:9b:30:71:93:b0:0e:c0:bc:ec:97:25:a9:f7:1b:71:66:5d ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIHDaHMRHPjOLI3PFSGSNpswcZOwDsC87JclqfcbcWZdGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIHDaHMRHPjOLI3PFSGSNpswcZOwDsC87JclqfcbcWZdGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 02 09:57:28.319026 osdx systemd-journald[148515]: Runtime Journal (/run/log/journal/a0363f0a73514b24b35c4ba7ae73dc6e) is 1.9M, max 13.8M, 11.8M free. Jun 02 09:57:28.321820 osdx systemd-journald[148515]: Received client request to rotate journal, rotating. Jun 02 09:57:28.321890 osdx systemd-journald[148515]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a0363f0a73514b24b35c4ba7ae73dc6e. Jun 02 09:57:28.324603 osdx sudo[345034]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:57:28.331866 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system journal clear'. Jun 02 09:57:28.564848 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'system coredump delete all'. Jun 02 09:57:28.865214 osdx OSDxCLI[171599]: User 'admin' entered the configuration menu. Jun 02 09:57:28.960127 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 02 09:57:29.044009 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 02 09:57:29.155177 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:29.217488 osdx ubnt-cfgd[345061]: inactive Jun 02 09:57:29.242737 osdx INFO[345069]: FRR daemons did not change Jun 02 09:57:29.269826 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 02 09:57:29.344315 osdx cfgd[1665]: [171599]Completed change to active configuration Jun 02 09:57:29.357199 osdx OSDxCLI[171599]: User 'admin' committed the configuration. Jun 02 09:57:29.373515 osdx OSDxCLI[171599]: User 'admin' left the configuration menu. Jun 02 09:57:29.522159 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 02 09:57:30.762567 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 02 09:57:30.869196 osdx OSDxCLI[171599]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 81:c3:68:73:11:1c:f8:ce:2c:8d:cf:15:21:92:36:9b:30:71:93:b0:0e:c0:bc:ec:97:25:a9:f7:1b:71:66:5d ip 10.215.168.1 port 8443'. Jun 02 09:57:31.047046 osdx OSDxCLI[171599]: User 'admin' entered the configuration menu. Jun 02 09:57:31.109327 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 02 09:57:31.225391 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 02 09:57:31.290691 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIHDaHMRHPjOLI3PFSGSNpswcZOwDsC87JclqfcbcWZdGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Jun 02 09:57:31.386202 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 02 09:57:31.460528 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 02 09:57:31.559120 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 02 09:57:31.629083 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 02 09:57:31.743567 osdx OSDxCLI[171599]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:31.818404 osdx ubnt-cfgd[345229]: inactive Jun 02 09:57:31.842486 osdx INFO[345237]: FRR daemons did not change Jun 02 09:57:31.846651 osdx sudo[345240]: pam_limits(sudo:session): invalid line '@200:215 hard maxlogins ' - skipped Jun 02 09:57:31.856338 osdx ca-certificates[345253]: Updating certificates in /etc/ssl/certs... Jun 02 09:57:32.430811 osdx ubnt-cfgd[346251]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 02 09:57:32.439430 osdx ca-certificates[346257]: 1 added, 0 removed; done. Jun 02 09:57:32.442338 osdx ca-certificates[346263]: Running hooks in /etc/ca-certificates/update.d... Jun 02 09:57:32.446119 osdx ca-certificates[346265]: done. Jun 02 09:57:32.594239 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 02 09:57:32.595568 osdx cfgd[1665]: [171599]Completed change to active configuration Jun 02 09:57:32.598030 osdx OSDxCLI[171599]: User 'admin' committed the configuration. Jun 02 09:57:32.618726 osdx OSDxCLI[171599]: User 'admin' left the configuration menu. Jun 02 09:57:32.624949 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] dnscrypt-proxy 2.0.45 Jun 02 09:57:32.625153 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Network connectivity detected Jun 02 09:57:32.625357 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Dropping privileges Jun 02 09:57:32.628145 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Network connectivity detected Jun 02 09:57:32.628239 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 02 09:57:32.628297 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 02 09:57:32.628349 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 02 09:57:32.628419 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Firefox workaround initialized Jun 02 09:57:32.628454 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpoirwtxka] Jun 02 09:57:32.629384 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 02 09:57:32.629384 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 02 09:57:32.629445 osdx dnscrypt-proxy[346325]: [2026-06-02 09:57:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 3d036172e0af6101991d3acf79249b31702f8b773cb6c56d9122641927accec0 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgPQNhcuCvYQGZHTrPeSSbMXAvi3c8tsVtkSJkGSeszsANZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgPQNhcuCvYQGZHTrPeSSbMXAvi3c8tsVtkSJkGSeszsANZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
^(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 02 09:57:28.314508 osdx systemd-journald[1765]: Runtime Journal (/run/log/journal/27bca15c163b4997962c56740a934d39) is 948.0K, max 6.5M, 5.5M free. Jun 02 09:57:28.317821 osdx systemd-journald[1765]: Received client request to rotate journal, rotating. Jun 02 09:57:28.317889 osdx systemd-journald[1765]: Vacuuming done, freed 0B of archived journals from /run/log/journal/27bca15c163b4997962c56740a934d39. Jun 02 09:57:28.327623 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system journal clear'. Jun 02 09:57:28.549888 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system coredump delete all'. Jun 02 09:57:29.582556 osdx OSDxCLI[68402]: User 'admin' entered the configuration menu. Jun 02 09:57:29.713353 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 02 09:57:29.768651 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 02 09:57:29.859694 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service ssh'. Jun 02 09:57:29.948770 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:30.048078 osdx ubnt-cfgd[172255]: inactive Jun 02 09:57:30.074306 osdx INFO[172269]: FRR daemons did not change Jun 02 09:57:30.101819 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 02 09:57:30.262218 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 02 09:57:30.277110 osdx sshd[172385]: Server listening on 0.0.0.0 port 22. Jun 02 09:57:30.277335 osdx sshd[172385]: Server listening on :: port 22. Jun 02 09:57:30.277459 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 02 09:57:30.299259 osdx cfgd[1460]: [68402]Completed change to active configuration Jun 02 09:57:30.314314 osdx OSDxCLI[68402]: User 'admin' committed the configuration. Jun 02 09:57:30.333706 osdx OSDxCLI[68402]: User 'admin' left the configuration menu. Jun 02 09:57:30.538416 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 02 09:57:32.844705 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 3d036172e0af6101991d3acf79249b31702f8b773cb6c56d9122641927accec0'. Jun 02 09:57:33.024300 osdx OSDxCLI[68402]: User 'admin' entered the configuration menu. Jun 02 09:57:33.088091 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 02 09:57:33.195829 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 02 09:57:33.291085 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 02 09:57:33.396142 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgPQNhcuCvYQGZHTrPeSSbMXAvi3c8tsVtkSJkGSeszsANZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Jun 02 09:57:33.567596 osdx OSDxCLI[68402]: User 'admin' added a new cfg line: 'show working'. Jun 02 09:57:33.646615 osdx ubnt-cfgd[172440]: inactive Jun 02 09:57:33.669128 osdx INFO[172448]: FRR daemons did not change Jun 02 09:57:33.681450 osdx ca-certificates[172463]: Updating certificates in /etc/ssl/certs... Jun 02 09:57:34.246507 osdx ubnt-cfgd[173462]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 02 09:57:34.254956 osdx ca-certificates[173469]: 1 added, 0 removed; done. Jun 02 09:57:34.258215 osdx ca-certificates[173474]: Running hooks in /etc/ca-certificates/update.d... Jun 02 09:57:34.261255 osdx ca-certificates[173476]: done. Jun 02 09:57:34.334180 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 02 09:57:34.336017 osdx cfgd[1460]: [68402]Completed change to active configuration Jun 02 09:57:34.340219 osdx OSDxCLI[68402]: User 'admin' committed the configuration. Jun 02 09:57:34.362269 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] dnscrypt-proxy 2.0.45 Jun 02 09:57:34.362541 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] Network connectivity detected Jun 02 09:57:34.362541 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] Dropping privileges Jun 02 09:57:34.364782 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] Network connectivity detected Jun 02 09:57:34.364782 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 02 09:57:34.364782 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 02 09:57:34.364782 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] Firefox workaround initialized Jun 02 09:57:34.364782 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] Loading the set of cloaking rules from [/tmp/tmps3a0ej0k] Jun 02 09:57:34.366466 osdx OSDxCLI[68402]: User 'admin' left the configuration menu. Jun 02 09:57:34.576877 osdx OSDxCLI[68402]: User 'admin' executed a new command: 'system journal show | cat'. Jun 02 09:57:34.577198 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] [DUT0] OK (DoH) - rtt: 116ms Jun 02 09:57:34.577198 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 116ms) Jun 02 09:57:34.577198 osdx dnscrypt-proxy[173485]: [2026-06-02 09:57:34] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13