Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 3da01845fbcfc1579f9eca2d995ba22ecb78951c4fead8f8e986fc6d1e954848 set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 20 17:38:11.324306 osdx systemd-journald[222010]: Runtime Journal (/run/log/journal/82a9756ca47e4d589aa55e1b1a6b94de) is 1.8M, max 13.8M, 11.9M free. Oct 20 17:38:11.327709 osdx systemd-journald[222010]: Received client request to rotate journal, rotating. Oct 20 17:38:11.327760 osdx systemd-journald[222010]: Vacuuming done, freed 0B of archived journals from /run/log/journal/82a9756ca47e4d589aa55e1b1a6b94de. Oct 20 17:38:11.334963 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system journal clear'. Oct 20 17:38:11.588957 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system coredump delete all'. Oct 20 17:38:11.835811 osdx OSDxCLI[399276]: User 'admin' entered the configuration menu. Oct 20 17:38:11.923036 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 20 17:38:12.025439 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 20 17:38:12.091627 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:12.191165 osdx ubnt-cfgd[550165]: inactive Oct 20 17:38:12.213350 osdx INFO[550173]: FRR daemons did not change Oct 20 17:38:12.235716 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 20 17:38:12.320772 osdx cfgd[1655]: [399276]Completed change to active configuration Oct 20 17:38:12.334821 osdx OSDxCLI[399276]: User 'admin' committed the configuration. Oct 20 17:38:12.353320 osdx OSDxCLI[399276]: User 'admin' left the configuration menu. Oct 20 17:38:12.486710 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 20 17:38:13.618390 osdx OSDxCLI[399276]: User 'admin' entered the configuration menu. Oct 20 17:38:13.681014 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 20 17:38:13.795857 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 20 17:38:13.864822 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Oct 20 17:38:13.982226 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Oct 20 17:38:14.048646 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 3da01845fbcfc1579f9eca2d995ba22ecb78951c4fead8f8e986fc6d1e954848'. Oct 20 17:38:14.135975 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Oct 20 17:38:14.202660 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Oct 20 17:38:14.289197 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 20 17:38:14.348224 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 20 17:38:14.472407 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:14.539860 osdx ubnt-cfgd[550328]: inactive Oct 20 17:38:14.558988 osdx INFO[550336]: FRR daemons did not change Oct 20 17:38:14.571475 osdx ca-certificates[550352]: Updating certificates in /etc/ssl/certs... Oct 20 17:38:15.076695 osdx ubnt-cfgd[551350]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 20 17:38:15.085796 osdx ca-certificates[551356]: 1 added, 0 removed; done. Oct 20 17:38:15.089003 osdx ca-certificates[551362]: Running hooks in /etc/ca-certificates/update.d... Oct 20 17:38:15.091848 osdx ca-certificates[551364]: done. Oct 20 17:38:15.228121 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 20 17:38:15.229446 osdx cfgd[1655]: [399276]Completed change to active configuration Oct 20 17:38:15.231837 osdx OSDxCLI[399276]: User 'admin' committed the configuration. Oct 20 17:38:15.249150 osdx OSDxCLI[399276]: User 'admin' left the configuration menu. Oct 20 17:38:15.253449 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] dnscrypt-proxy 2.0.45 Oct 20 17:38:15.253620 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Network connectivity detected Oct 20 17:38:15.253746 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Dropping privileges Oct 20 17:38:15.255984 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Network connectivity detected Oct 20 17:38:15.256028 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 20 17:38:15.256028 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 20 17:38:15.256028 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Oct 20 17:38:15.256081 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Firefox workaround initialized Oct 20 17:38:15.256081 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp0c567x6h] Oct 20 17:38:15.403442 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system journal show | cat'. Oct 20 17:38:15.437887 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] [RD] OK (DoH) - rtt: 119ms Oct 20 17:38:15.437887 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] Server with the lowest initial latency: RD (rtt: 119ms) Oct 20 17:38:15.437887 osdx dnscrypt-proxy[551424]: [2025-10-20 17:38:15] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 02fc894f94d2d0ce793c20cf0dad847959e1fc67f24f2cab13d3d4098682db86 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
^(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 20 17:38:11.295762 osdx systemd-journald[1753]: Runtime Journal (/run/log/journal/4442b1c48b0b445ebeebca784f5233e7) is 900.0K, max 6.5M, 5.6M free. Oct 20 17:38:11.298866 osdx systemd-journald[1753]: Received client request to rotate journal, rotating. Oct 20 17:38:11.298914 osdx systemd-journald[1753]: Vacuuming done, freed 0B of archived journals from /run/log/journal/4442b1c48b0b445ebeebca784f5233e7. Oct 20 17:38:11.306277 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system journal clear'. Oct 20 17:38:11.536485 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system coredump delete all'. Oct 20 17:38:12.490224 osdx OSDxCLI[216315]: User 'admin' entered the configuration menu. Oct 20 17:38:12.589953 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Oct 20 17:38:12.662434 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 20 17:38:12.787939 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service ssh'. Oct 20 17:38:12.871436 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:12.952327 osdx ubnt-cfgd[314560]: inactive Oct 20 17:38:13.053698 osdx INFO[314579]: FRR daemons did not change Oct 20 17:38:13.074885 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 20 17:38:13.211192 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Oct 20 17:38:13.225385 osdx sshd[314702]: Server listening on 0.0.0.0 port 22. Oct 20 17:38:13.225635 osdx sshd[314702]: Server listening on :: port 22. Oct 20 17:38:13.225770 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Oct 20 17:38:13.226716 osdx cfgd[1444]: [216315]Completed change to active configuration Oct 20 17:38:13.240916 osdx OSDxCLI[216315]: User 'admin' committed the configuration. Oct 20 17:38:13.258346 osdx OSDxCLI[216315]: User 'admin' left the configuration menu. Oct 20 17:38:13.393996 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Oct 20 17:38:17.669208 osdx OSDxCLI[216315]: User 'admin' entered the configuration menu. Oct 20 17:38:17.736620 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Oct 20 17:38:17.825502 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Oct 20 17:38:17.890830 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Oct 20 17:38:17.991417 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Oct 20 17:38:18.065361 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Oct 20 17:38:18.124305 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Oct 20 17:38:18.236114 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 02fc894f94d2d0ce793c20cf0dad847959e1fc67f24f2cab13d3d4098682db86'. Oct 20 17:38:18.318051 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:18.418944 osdx ubnt-cfgd[314747]: inactive Oct 20 17:38:18.442519 osdx INFO[314755]: FRR daemons did not change Oct 20 17:38:18.458521 osdx ca-certificates[314771]: Updating certificates in /etc/ssl/certs... Oct 20 17:38:18.941944 osdx ubnt-cfgd[315769]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 20 17:38:18.949721 osdx ca-certificates[315774]: 1 added, 0 removed; done. Oct 20 17:38:18.952934 osdx ca-certificates[315781]: Running hooks in /etc/ca-certificates/update.d... Oct 20 17:38:18.955955 osdx ca-certificates[315783]: done. Oct 20 17:38:19.047393 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 20 17:38:19.049471 osdx cfgd[1444]: [216315]Completed change to active configuration Oct 20 17:38:19.053307 osdx OSDxCLI[216315]: User 'admin' committed the configuration. Oct 20 17:38:19.081844 osdx OSDxCLI[216315]: User 'admin' left the configuration menu. Oct 20 17:38:19.085829 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:19] [NOTICE] dnscrypt-proxy 2.0.45 Oct 20 17:38:19.086026 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:19] [NOTICE] Network connectivity detected Oct 20 17:38:19.086085 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:19] [NOTICE] Dropping privileges Oct 20 17:38:19.088439 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:19] [NOTICE] Network connectivity detected Oct 20 17:38:19.088439 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:19] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 20 17:38:19.088439 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:19] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 20 17:38:19.088439 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:19] [NOTICE] Firefox workaround initialized Oct 20 17:38:19.088439 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:19] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp4dj1t5g5] Oct 20 17:38:19.464711 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system journal show | cat'. Oct 20 17:38:21.172650 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:21] [NOTICE] System DNS configuration not usable yet, exceptionally resolving [dns.dut0] using fallback resolvers over tcp Oct 20 17:38:21.304118 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:21] [NOTICE] [DUT0] OK (DoH) - rtt: 110ms Oct 20 17:38:21.304118 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:21] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 110ms) Oct 20 17:38:21.304118 osdx dnscrypt-proxy[315790]: [2025-10-20 17:38:21] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 3da01845fbcfc1579f9eca2d995ba22ecb78951c4fead8f8e986fc6d1e954848 at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA9oBhF-8_BV5-eyi2ZW6Iuy3iVHE_q2PjphvxtHpVISApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA9oBhF-8_BV5-eyi2ZW6Iuy3iVHE_q2PjphvxtHpVISApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 20 17:38:28.328286 osdx systemd-journald[222010]: Runtime Journal (/run/log/journal/82a9756ca47e4d589aa55e1b1a6b94de) is 1.8M, max 13.8M, 11.9M free. Oct 20 17:38:28.329412 osdx systemd-journald[222010]: Received client request to rotate journal, rotating. Oct 20 17:38:28.329473 osdx systemd-journald[222010]: Vacuuming done, freed 0B of archived journals from /run/log/journal/82a9756ca47e4d589aa55e1b1a6b94de. Oct 20 17:38:28.342283 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system journal clear'. Oct 20 17:38:28.618050 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system coredump delete all'. Oct 20 17:38:28.852082 osdx OSDxCLI[399276]: User 'admin' entered the configuration menu. Oct 20 17:38:28.935285 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 20 17:38:29.008992 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 20 17:38:29.114229 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:29.173195 osdx ubnt-cfgd[553129]: inactive Oct 20 17:38:29.192495 osdx INFO[553137]: FRR daemons did not change Oct 20 17:38:29.213397 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 20 17:38:29.286529 osdx cfgd[1655]: [399276]Completed change to active configuration Oct 20 17:38:29.298140 osdx OSDxCLI[399276]: User 'admin' committed the configuration. Oct 20 17:38:29.324817 osdx OSDxCLI[399276]: User 'admin' left the configuration menu. Oct 20 17:38:29.482338 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 20 17:38:30.638547 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 3da01845fbcfc1579f9eca2d995ba22ecb78951c4fead8f8e986fc6d1e954848'. Oct 20 17:38:30.785282 osdx OSDxCLI[399276]: User 'admin' entered the configuration menu. Oct 20 17:38:30.871736 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 20 17:38:30.970708 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 20 17:38:31.033621 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSA9oBhF-8_BV5-eyi2ZW6Iuy3iVHE_q2PjphvxtHpVISApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Oct 20 17:38:31.124207 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Oct 20 17:38:31.180328 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Oct 20 17:38:31.277226 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 20 17:38:31.332445 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 20 17:38:31.431406 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 20 17:38:31.498305 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:31.597577 osdx ubnt-cfgd[553294]: inactive Oct 20 17:38:31.616349 osdx INFO[553302]: FRR daemons did not change Oct 20 17:38:31.629096 osdx ca-certificates[553318]: Updating certificates in /etc/ssl/certs... Oct 20 17:38:32.106007 osdx ubnt-cfgd[554316]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 20 17:38:32.113218 osdx ca-certificates[554321]: 1 added, 0 removed; done. Oct 20 17:38:32.116259 osdx ca-certificates[554328]: Running hooks in /etc/ca-certificates/update.d... Oct 20 17:38:32.119990 osdx ca-certificates[554330]: done. Oct 20 17:38:32.245671 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 20 17:38:32.246765 osdx cfgd[1655]: [399276]Completed change to active configuration Oct 20 17:38:32.249156 osdx OSDxCLI[399276]: User 'admin' committed the configuration. Oct 20 17:38:32.278706 osdx OSDxCLI[399276]: User 'admin' left the configuration menu. Oct 20 17:38:32.286599 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] dnscrypt-proxy 2.0.45 Oct 20 17:38:32.286991 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Network connectivity detected Oct 20 17:38:32.287357 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Dropping privileges Oct 20 17:38:32.290955 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Network connectivity detected Oct 20 17:38:32.291033 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 20 17:38:32.291059 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 20 17:38:32.291095 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Oct 20 17:38:32.291141 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Firefox workaround initialized Oct 20 17:38:32.291164 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmprao4fv5a] Oct 20 17:38:32.432607 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system journal show | cat'. Oct 20 17:38:32.461363 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] [RD] OK (DoH) - rtt: 108ms Oct 20 17:38:32.461363 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] Server with the lowest initial latency: RD (rtt: 108ms) Oct 20 17:38:32.461363 osdx dnscrypt-proxy[554390]: [2025-10-20 17:38:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 02fc894f94d2d0ce793c20cf0dad847959e1fc67f24f2cab13d3d4098682db86 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgAvyJT5TS0M55PCDPDa2EeVnh_GfyTyyrE9PUCYaC24YNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgAvyJT5TS0M55PCDPDa2EeVnh_GfyTyyrE9PUCYaC24YNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
^(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 20 17:38:28.358897 osdx systemd-journald[1753]: Runtime Journal (/run/log/journal/4442b1c48b0b445ebeebca784f5233e7) is 924.0K, max 6.5M, 5.6M free. Oct 20 17:38:28.362338 osdx systemd-journald[1753]: Received client request to rotate journal, rotating. Oct 20 17:38:28.362394 osdx systemd-journald[1753]: Vacuuming done, freed 0B of archived journals from /run/log/journal/4442b1c48b0b445ebeebca784f5233e7. Oct 20 17:38:28.369685 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system journal clear'. Oct 20 17:38:28.581939 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system coredump delete all'. Oct 20 17:38:29.590954 osdx OSDxCLI[216315]: User 'admin' entered the configuration menu. Oct 20 17:38:29.672588 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Oct 20 17:38:29.770218 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 20 17:38:29.826577 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service ssh'. Oct 20 17:38:29.932613 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:29.990665 osdx ubnt-cfgd[317471]: inactive Oct 20 17:38:30.074044 osdx INFO[317490]: FRR daemons did not change Oct 20 17:38:30.098338 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 20 17:38:30.226676 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Oct 20 17:38:30.238786 osdx sshd[317613]: Server listening on 0.0.0.0 port 22. Oct 20 17:38:30.238987 osdx sshd[317613]: Server listening on :: port 22. Oct 20 17:38:30.239104 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Oct 20 17:38:30.239922 osdx cfgd[1444]: [216315]Completed change to active configuration Oct 20 17:38:30.251447 osdx OSDxCLI[216315]: User 'admin' committed the configuration. Oct 20 17:38:30.281993 osdx OSDxCLI[216315]: User 'admin' left the configuration menu. Oct 20 17:38:30.434324 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Oct 20 17:38:34.561871 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 02fc894f94d2d0ce793c20cf0dad847959e1fc67f24f2cab13d3d4098682db86'. Oct 20 17:38:34.706807 osdx OSDxCLI[216315]: User 'admin' entered the configuration menu. Oct 20 17:38:34.770236 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Oct 20 17:38:34.865376 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Oct 20 17:38:34.920987 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Oct 20 17:38:35.061553 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgAvyJT5TS0M55PCDPDa2EeVnh_GfyTyyrE9PUCYaC24YNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Oct 20 17:38:35.123152 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:35.216158 osdx ubnt-cfgd[317658]: inactive Oct 20 17:38:35.234979 osdx INFO[317666]: FRR daemons did not change Oct 20 17:38:35.247160 osdx ca-certificates[317682]: Updating certificates in /etc/ssl/certs... Oct 20 17:38:35.710487 osdx ubnt-cfgd[318680]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 20 17:38:35.718855 osdx ca-certificates[318687]: 1 added, 0 removed; done. Oct 20 17:38:35.721970 osdx ca-certificates[318692]: Running hooks in /etc/ca-certificates/update.d... Oct 20 17:38:35.724990 osdx ca-certificates[318694]: done. Oct 20 17:38:35.806783 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 20 17:38:35.808804 osdx cfgd[1444]: [216315]Completed change to active configuration Oct 20 17:38:35.810832 osdx OSDxCLI[216315]: User 'admin' committed the configuration. Oct 20 17:38:35.827212 osdx OSDxCLI[216315]: User 'admin' left the configuration menu. Oct 20 17:38:35.832910 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:35] [NOTICE] dnscrypt-proxy 2.0.45 Oct 20 17:38:35.833117 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:35] [NOTICE] Network connectivity detected Oct 20 17:38:35.833142 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:35] [NOTICE] Dropping privileges Oct 20 17:38:35.835132 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:35] [NOTICE] Network connectivity detected Oct 20 17:38:35.835162 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:35] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 20 17:38:35.835162 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:35] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 20 17:38:35.835207 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:35] [NOTICE] Firefox workaround initialized Oct 20 17:38:35.835207 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:35] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp592a50ce] Oct 20 17:38:35.988468 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system journal show | cat'. Oct 20 17:38:36.073538 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:36] [NOTICE] [DUT0] OK (DoH) - rtt: 145ms Oct 20 17:38:36.073538 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:36] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 145ms) Oct 20 17:38:36.073538 osdx dnscrypt-proxy[318701]: [2025-10-20 17:38:36] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
46:48:bf:33:d4:d9:ab:9a:0e:b5:c2:6d:61:04:8c:80:5d:50:c5:29:47:c5:0b:ef:04:3c:a3:2e:d7:98:89:0a
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '46:48:bf:33:d4:d9:ab:9a:0e:b5:c2:6d:61:04:8c:80:5d:50:c5:29:47:c5:0b:ef:04:3c:a3:2e:d7:98:89:0a' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Oct 20 17:38:43.000169 osdx systemd-timedated[497481]: Changed local time to Mon 2025-10-20 17:38:43 UTC Oct 20 17:38:43.001759 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'set date 2025-10-20 17:38:43'. Oct 20 17:38:43.002697 osdx systemd-journald[222010]: Time jumped backwards, rotating. Oct 20 17:38:43.326158 osdx systemd-journald[222010]: Runtime Journal (/run/log/journal/82a9756ca47e4d589aa55e1b1a6b94de) is 1.8M, max 13.8M, 11.9M free. Oct 20 17:38:43.326725 osdx systemd-journald[222010]: Received client request to rotate journal, rotating. Oct 20 17:38:43.326769 osdx systemd-journald[222010]: Vacuuming done, freed 0B of archived journals from /run/log/journal/82a9756ca47e4d589aa55e1b1a6b94de. Oct 20 17:38:43.335728 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system journal clear'. Oct 20 17:38:43.546180 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system coredump delete all'. Oct 20 17:38:43.766324 osdx OSDxCLI[399276]: User 'admin' entered the configuration menu. Oct 20 17:38:43.842933 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 20 17:38:43.948445 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 20 17:38:44.011413 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:44.108800 osdx ubnt-cfgd[556097]: inactive Oct 20 17:38:44.128241 osdx INFO[556105]: FRR daemons did not change Oct 20 17:38:44.146712 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 20 17:38:44.219219 osdx cfgd[1655]: [399276]Completed change to active configuration Oct 20 17:38:44.230799 osdx OSDxCLI[399276]: User 'admin' committed the configuration. Oct 20 17:38:44.248384 osdx OSDxCLI[399276]: User 'admin' left the configuration menu. Oct 20 17:38:44.397570 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 20 17:38:45.546626 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Oct 20 17:38:45.687595 osdx OSDxCLI[399276]: User 'admin' entered the configuration menu. Oct 20 17:38:45.751144 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 20 17:38:45.849094 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 20 17:38:45.979484 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Oct 20 17:38:46.075074 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Oct 20 17:38:46.133775 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Oct 20 17:38:46.237587 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 46:48:bf:33:d4:d9:ab:9a:0e:b5:c2:6d:61:04:8c:80:5d:50:c5:29:47:c5:0b:ef:04:3c:a3:2e:d7:98:89:0a'. Oct 20 17:38:46.298674 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 20 17:38:46.402912 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Oct 20 17:38:46.482553 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Oct 20 17:38:46.579325 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 20 17:38:46.706364 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:46.789789 osdx ubnt-cfgd[556263]: inactive Oct 20 17:38:46.814998 osdx INFO[556271]: FRR daemons did not change Oct 20 17:38:46.828141 osdx ca-certificates[556287]: Updating certificates in /etc/ssl/certs... Oct 20 17:38:47.336018 osdx ubnt-cfgd[557285]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 20 17:38:47.343999 osdx ca-certificates[557291]: 1 added, 0 removed; done. Oct 20 17:38:47.346926 osdx ca-certificates[557297]: Running hooks in /etc/ca-certificates/update.d... Oct 20 17:38:47.350569 osdx ca-certificates[557299]: done. Oct 20 17:38:47.483062 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 20 17:38:47.484737 osdx cfgd[1655]: [399276]Completed change to active configuration Oct 20 17:38:47.487030 osdx OSDxCLI[399276]: User 'admin' committed the configuration. Oct 20 17:38:47.511706 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] dnscrypt-proxy 2.0.45 Oct 20 17:38:47.511967 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Network connectivity detected Oct 20 17:38:47.512004 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Dropping privileges Oct 20 17:38:47.514050 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Network connectivity detected Oct 20 17:38:47.514050 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 20 17:38:47.514050 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 20 17:38:47.514146 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Oct 20 17:38:47.514146 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Firefox workaround initialized Oct 20 17:38:47.514146 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpfu7_15dw] Oct 20 17:38:47.540260 osdx OSDxCLI[399276]: User 'admin' left the configuration menu. Oct 20 17:38:47.548825 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] [RD] OK (DNSCrypt) - rtt: 34ms Oct 20 17:38:47.548825 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] Server with the lowest initial latency: RD (rtt: 34ms) Oct 20 17:38:47.548945 osdx dnscrypt-proxy[557359]: [2025-10-20 17:38:47] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 02fc894f94d2d0ce793c20cf0dad847959e1fc67f24f2cab13d3d4098682db86 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
^(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 20 17:38:43.000162 osdx systemd-timedated[304234]: Changed local time to Mon 2025-10-20 17:38:43 UTC Oct 20 17:38:43.002037 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'set date 2025-10-20 17:38:43'. Oct 20 17:38:43.003455 osdx systemd-journald[1753]: Time jumped backwards, rotating. Oct 20 17:38:43.301056 osdx systemd-journald[1753]: Runtime Journal (/run/log/journal/4442b1c48b0b445ebeebca784f5233e7) is 948.0K, max 6.5M, 5.5M free. Oct 20 17:38:43.303478 osdx systemd-journald[1753]: Received client request to rotate journal, rotating. Oct 20 17:38:43.303532 osdx systemd-journald[1753]: Vacuuming done, freed 0B of archived journals from /run/log/journal/4442b1c48b0b445ebeebca784f5233e7. Oct 20 17:38:43.310649 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system journal clear'. Oct 20 17:38:43.505911 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system coredump delete all'. Oct 20 17:38:44.420011 osdx OSDxCLI[216315]: User 'admin' entered the configuration menu. Oct 20 17:38:44.497224 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Oct 20 17:38:44.660526 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 20 17:38:44.737244 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service ssh'. Oct 20 17:38:44.845483 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:44.910247 osdx ubnt-cfgd[320383]: inactive Oct 20 17:38:44.980000 osdx INFO[320402]: FRR daemons did not change Oct 20 17:38:44.999455 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 20 17:38:45.119675 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Oct 20 17:38:45.135068 osdx sshd[320525]: Server listening on 0.0.0.0 port 22. Oct 20 17:38:45.135336 osdx sshd[320525]: Server listening on :: port 22. Oct 20 17:38:45.135520 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Oct 20 17:38:45.136917 osdx cfgd[1444]: [216315]Completed change to active configuration Oct 20 17:38:45.148444 osdx OSDxCLI[216315]: User 'admin' committed the configuration. Oct 20 17:38:45.166879 osdx OSDxCLI[216315]: User 'admin' left the configuration menu. Oct 20 17:38:45.326478 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Oct 20 17:38:47.750291 osdx OSDxCLI[216315]: User 'admin' entered the configuration menu. Oct 20 17:38:47.816976 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Oct 20 17:38:47.914656 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Oct 20 17:38:47.988069 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Oct 20 17:38:48.098510 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Oct 20 17:38:48.162353 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Oct 20 17:38:48.259739 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Oct 20 17:38:48.327088 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 02fc894f94d2d0ce793c20cf0dad847959e1fc67f24f2cab13d3d4098682db86'. Oct 20 17:38:48.446157 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:38:48.530752 osdx ubnt-cfgd[320570]: inactive Oct 20 17:38:48.551796 osdx INFO[320578]: FRR daemons did not change Oct 20 17:38:48.564875 osdx ca-certificates[320594]: Updating certificates in /etc/ssl/certs... Oct 20 17:38:49.072928 osdx ubnt-cfgd[321592]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 20 17:38:49.080718 osdx ca-certificates[321599]: 1 added, 0 removed; done. Oct 20 17:38:49.083842 osdx ca-certificates[321604]: Running hooks in /etc/ca-certificates/update.d... Oct 20 17:38:49.087559 osdx ca-certificates[321606]: done. Oct 20 17:38:49.167916 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 20 17:38:49.169901 osdx cfgd[1444]: [216315]Completed change to active configuration Oct 20 17:38:49.172996 osdx OSDxCLI[216315]: User 'admin' committed the configuration. Oct 20 17:38:49.198876 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] dnscrypt-proxy 2.0.45 Oct 20 17:38:49.199111 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] Network connectivity detected Oct 20 17:38:49.199202 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] Dropping privileges Oct 20 17:38:49.201608 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] Network connectivity detected Oct 20 17:38:49.201726 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 20 17:38:49.201759 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 20 17:38:49.201812 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] Firefox workaround initialized Oct 20 17:38:49.201838 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp80s_vvlz] Oct 20 17:38:49.243801 osdx OSDxCLI[216315]: User 'admin' left the configuration menu. Oct 20 17:38:49.381043 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system journal show | cat'. Oct 20 17:38:49.399778 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] [DUT0] OK (DoH) - rtt: 117ms Oct 20 17:38:49.399778 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 117ms) Oct 20 17:38:49.399778 osdx dnscrypt-proxy[321613]: [2025-10-20 17:38:49] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
46:48:bf:33:d4:d9:ab:9a:0e:b5:c2:6d:61:04:8c:80:5d:50:c5:29:47:c5:0b:ef:04:3c:a3:2e:d7:98:89:0a
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 46:48:bf:33:d4:d9:ab:9a:0e:b5:c2:6d:61:04:8c:80:5d:50:c5:29:47:c5:0b:ef:04:3c:a3:2e:d7:98:89:0a ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEZIvzPU2auaDrXCbWEEjIBdUMUpR8UL7wQ8oy7XmIkKGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEZIvzPU2auaDrXCbWEEjIBdUMUpR8UL7wQ8oy7XmIkKGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
^(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Oct 20 17:38:59.312636 osdx systemd-journald[222010]: Runtime Journal (/run/log/journal/82a9756ca47e4d589aa55e1b1a6b94de) is 1.9M, max 13.8M, 11.8M free. Oct 20 17:38:59.313692 osdx systemd-journald[222010]: Received client request to rotate journal, rotating. Oct 20 17:38:59.313731 osdx systemd-journald[222010]: Vacuuming done, freed 0B of archived journals from /run/log/journal/82a9756ca47e4d589aa55e1b1a6b94de. Oct 20 17:38:59.322738 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system journal clear'. Oct 20 17:38:59.537182 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'system coredump delete all'. Oct 20 17:38:59.751177 osdx OSDxCLI[399276]: User 'admin' entered the configuration menu. Oct 20 17:38:59.825806 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 20 17:38:59.909575 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 20 17:38:59.972672 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:39:00.070998 osdx ubnt-cfgd[559059]: inactive Oct 20 17:39:00.090442 osdx INFO[559067]: FRR daemons did not change Oct 20 17:39:00.109702 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 20 17:39:00.177804 osdx cfgd[1655]: [399276]Completed change to active configuration Oct 20 17:39:00.189021 osdx OSDxCLI[399276]: User 'admin' committed the configuration. Oct 20 17:39:00.212588 osdx OSDxCLI[399276]: User 'admin' left the configuration menu. Oct 20 17:39:00.357194 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 20 17:39:01.451789 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Oct 20 17:39:01.551146 osdx OSDxCLI[399276]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 46:48:bf:33:d4:d9:ab:9a:0e:b5:c2:6d:61:04:8c:80:5d:50:c5:29:47:c5:0b:ef:04:3c:a3:2e:d7:98:89:0a ip 10.215.168.1 port 8443'. Oct 20 17:39:01.729632 osdx OSDxCLI[399276]: User 'admin' entered the configuration menu. Oct 20 17:39:01.807514 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 20 17:39:01.913839 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 20 17:39:01.985668 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEZIvzPU2auaDrXCbWEEjIBdUMUpR8UL7wQ8oy7XmIkKGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Oct 20 17:39:02.076593 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 20 17:39:02.135264 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Oct 20 17:39:02.233211 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Oct 20 17:39:02.291437 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 20 17:39:02.411635 osdx OSDxCLI[399276]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:39:02.473448 osdx ubnt-cfgd[559228]: inactive Oct 20 17:39:02.492393 osdx INFO[559236]: FRR daemons did not change Oct 20 17:39:02.505389 osdx ca-certificates[559252]: Updating certificates in /etc/ssl/certs... Oct 20 17:39:02.994806 osdx ubnt-cfgd[560250]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 20 17:39:03.002217 osdx ca-certificates[560255]: 1 added, 0 removed; done. Oct 20 17:39:03.005199 osdx ca-certificates[560262]: Running hooks in /etc/ca-certificates/update.d... Oct 20 17:39:03.007884 osdx ca-certificates[560264]: done. Oct 20 17:39:03.129976 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 20 17:39:03.131463 osdx cfgd[1655]: [399276]Completed change to active configuration Oct 20 17:39:03.133497 osdx OSDxCLI[399276]: User 'admin' committed the configuration. Oct 20 17:39:03.153389 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] dnscrypt-proxy 2.0.45 Oct 20 17:39:03.153655 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Network connectivity detected Oct 20 17:39:03.153750 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Dropping privileges Oct 20 17:39:03.155993 osdx OSDxCLI[399276]: User 'admin' left the configuration menu. Oct 20 17:39:03.156839 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Network connectivity detected Oct 20 17:39:03.156923 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 20 17:39:03.156955 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 20 17:39:03.156998 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Oct 20 17:39:03.157044 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Firefox workaround initialized Oct 20 17:39:03.157076 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp50971tfq] Oct 20 17:39:03.157722 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Oct 20 17:39:03.157791 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Oct 20 17:39:03.157836 osdx dnscrypt-proxy[560324]: [2025-10-20 17:39:03] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 02fc894f94d2d0ce793c20cf0dad847959e1fc67f24f2cab13d3d4098682db86 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgAvyJT5TS0M55PCDPDa2EeVnh_GfyTyyrE9PUCYaC24YNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgAvyJT5TS0M55PCDPDa2EeVnh_GfyTyyrE9PUCYaC24YNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
^(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 20 17:39:00.276955 osdx systemd-journald[1753]: Runtime Journal (/run/log/journal/4442b1c48b0b445ebeebca784f5233e7) is 996.0K, max 6.5M, 5.5M free. Oct 20 17:39:00.277885 osdx systemd-journald[1753]: Received client request to rotate journal, rotating. Oct 20 17:39:00.277942 osdx systemd-journald[1753]: Vacuuming done, freed 0B of archived journals from /run/log/journal/4442b1c48b0b445ebeebca784f5233e7. Oct 20 17:39:00.288359 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system journal clear'. Oct 20 17:39:00.484404 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system coredump delete all'. Oct 20 17:39:01.415129 osdx OSDxCLI[216315]: User 'admin' entered the configuration menu. Oct 20 17:39:01.490857 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Oct 20 17:39:01.577279 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 20 17:39:01.632292 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service ssh'. Oct 20 17:39:01.734742 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:39:01.804385 osdx ubnt-cfgd[323295]: inactive Oct 20 17:39:01.879998 osdx INFO[323314]: FRR daemons did not change Oct 20 17:39:01.901906 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 20 17:39:02.050235 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Oct 20 17:39:02.062655 osdx sshd[323437]: Server listening on 0.0.0.0 port 22. Oct 20 17:39:02.062847 osdx sshd[323437]: Server listening on :: port 22. Oct 20 17:39:02.063000 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Oct 20 17:39:02.063943 osdx cfgd[1444]: [216315]Completed change to active configuration Oct 20 17:39:02.075316 osdx OSDxCLI[216315]: User 'admin' committed the configuration. Oct 20 17:39:02.092616 osdx OSDxCLI[216315]: User 'admin' left the configuration menu. Oct 20 17:39:02.245908 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Oct 20 17:39:04.334655 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 02fc894f94d2d0ce793c20cf0dad847959e1fc67f24f2cab13d3d4098682db86'. Oct 20 17:39:04.479064 osdx OSDxCLI[216315]: User 'admin' entered the configuration menu. Oct 20 17:39:04.538322 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Oct 20 17:39:04.649371 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Oct 20 17:39:04.722071 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Oct 20 17:39:04.853172 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgAvyJT5TS0M55PCDPDa2EeVnh_GfyTyyrE9PUCYaC24YNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Oct 20 17:39:04.927924 osdx OSDxCLI[216315]: User 'admin' added a new cfg line: 'show working'. Oct 20 17:39:05.042513 osdx ubnt-cfgd[323485]: inactive Oct 20 17:39:05.067457 osdx INFO[323493]: FRR daemons did not change Oct 20 17:39:05.083588 osdx ca-certificates[323509]: Updating certificates in /etc/ssl/certs... Oct 20 17:39:05.550884 osdx ubnt-cfgd[324507]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 20 17:39:05.558933 osdx ca-certificates[324514]: 1 added, 0 removed; done. Oct 20 17:39:05.562056 osdx ca-certificates[324519]: Running hooks in /etc/ca-certificates/update.d... Oct 20 17:39:05.565080 osdx ca-certificates[324521]: done. Oct 20 17:39:05.646356 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 20 17:39:05.648292 osdx cfgd[1444]: [216315]Completed change to active configuration Oct 20 17:39:05.650706 osdx OSDxCLI[216315]: User 'admin' committed the configuration. Oct 20 17:39:05.669369 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] dnscrypt-proxy 2.0.45 Oct 20 17:39:05.669591 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] Network connectivity detected Oct 20 17:39:05.669591 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] Dropping privileges Oct 20 17:39:05.671901 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] Network connectivity detected Oct 20 17:39:05.671901 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 20 17:39:05.671901 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 20 17:39:05.671901 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] Firefox workaround initialized Oct 20 17:39:05.671901 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpeps2iipj] Oct 20 17:39:05.697113 osdx OSDxCLI[216315]: User 'admin' left the configuration menu. Oct 20 17:39:05.862480 osdx OSDxCLI[216315]: User 'admin' executed a new command: 'system journal show | cat'. Oct 20 17:39:05.873416 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] [DUT0] OK (DoH) - rtt: 111ms Oct 20 17:39:05.873416 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 111ms) Oct 20 17:39:05.873416 osdx dnscrypt-proxy[324528]: [2025-10-20 17:39:05] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13