Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash fbde9ec8b61083045636daed938e6ac3eb5836b9a6063993d8620d69f6a6c58c set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:42:07.301833 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:42:07.304221 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:42:07.304285 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:42:07.313225 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:42:07.533341 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:42:07.775300 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:07.851907 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:42:07.916934 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:42:08.014435 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:08.076554 osdx ubnt-cfgd[497956]: inactive Oct 10 22:42:08.094035 osdx INFO[497962]: FRR daemons did not change Oct 10 22:42:08.120233 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:42:08.163444 osdx WARNING[498030]: No supported link modes on interface eth0 Oct 10 22:42:08.164837 osdx modulelauncher[498030]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:42:08.164850 osdx modulelauncher[498030]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:42:08.165922 osdx modulelauncher[498030]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:42:08.165931 osdx modulelauncher[498030]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:42:08.204345 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:08.215168 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:08.232331 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:08.370584 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:42:08.644187 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:08.701869 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 22:42:08.797094 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:42:08.872585 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Oct 10 22:42:08.959937 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Oct 10 22:42:09.022174 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash fbde9ec8b61083045636daed938e6ac3eb5836b9a6063993d8620d69f6a6c58c'. Oct 10 22:42:09.110873 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:42:09.555264 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:09.635156 osdx ubnt-cfgd[498119]: inactive Oct 10 22:42:09.653943 osdx INFO[498127]: FRR daemons did not change Oct 10 22:42:09.667758 osdx ca-certificates[498143]: Updating certificates in /etc/ssl/certs... Oct 10 22:42:10.203844 osdx ubnt-cfgd[499155]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:42:10.211221 osdx ca-certificates[499161]: 1 added, 0 removed; done. Oct 10 22:42:10.213950 osdx ca-certificates[499167]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:42:10.216761 osdx ca-certificates[499169]: done. Oct 10 22:42:10.336566 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:42:10.337695 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:10.340193 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:10.355625 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:10.355896 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:42:10.355896 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] Network connectivity detected Oct 10 22:42:10.356024 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] Dropping privileges Oct 10 22:42:10.357935 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] Network connectivity detected Oct 10 22:42:10.357968 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:42:10.357968 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:42:10.358000 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] Firefox workaround initialized Oct 10 22:42:10.358000 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp7sbpf_k9] Oct 10 22:42:10.540137 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal show | cat'. Oct 10 22:42:10.619339 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] [RD] OK (DoH) - rtt: 127ms Oct 10 22:42:10.619339 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] Server with the lowest initial latency: RD (rtt: 127ms) Oct 10 22:42:10.619339 osdx dnscrypt-proxy[499226]: [2025-10-10 22:42:10] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Oct 10 22:42:18.286112 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:42:18.287798 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:42:18.287855 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:42:18.295626 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:42:18.500039 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:42:18.712814 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:18.790710 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:42:18.890037 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:42:18.975512 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:19.070905 osdx ubnt-cfgd[500956]: inactive Oct 10 22:42:19.093844 osdx INFO[500962]: FRR daemons did not change Oct 10 22:42:19.119750 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:42:19.170817 osdx WARNING[501030]: No supported link modes on interface eth0 Oct 10 22:42:19.172591 osdx modulelauncher[501030]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:42:19.172606 osdx modulelauncher[501030]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:42:19.174047 osdx modulelauncher[501030]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:42:19.174056 osdx modulelauncher[501030]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:42:19.211151 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:19.222324 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:19.243028 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:19.411342 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:42:19.623330 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:19.693936 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:42:19.797933 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:19.857100 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:19.928157 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:20.069848 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:20.148772 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:42:20.262169 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Oct 10 22:42:20.325916 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Oct 10 22:42:20.437604 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:42:20.508518 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show changes'. Oct 10 22:42:20.606730 osdx ubnt-cfgd[501126]: inactive Oct 10 22:42:20.624029 osdx INFO[501132]: FRR daemons did not change Oct 10 22:42:20.712106 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:42:20.713275 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:20.715529 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:20.732909 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:20.736544 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:42:20.736725 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] Network connectivity detected Oct 10 22:42:20.736833 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] Dropping privileges Oct 10 22:42:20.739139 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] Network connectivity detected Oct 10 22:42:20.739189 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:42:20.739189 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:42:20.739189 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] Firefox workaround initialized Oct 10 22:42:20.739189 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpqqffs256] Oct 10 22:42:20.757045 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABBIletn2axr_RQkOh0RttgC": x509: certificate signed by unknown authority Oct 10 22:42:20.757045 osdx dnscrypt-proxy[501191]: [2025-10-10 22:42:20] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:42:30.288907 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:42:30.289322 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:42:30.289360 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:42:30.298567 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:42:30.514328 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:42:30.765784 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:30.842872 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:42:30.922225 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:42:30.986334 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:31.108902 osdx ubnt-cfgd[501444]: inactive Oct 10 22:42:31.129685 osdx INFO[501450]: FRR daemons did not change Oct 10 22:42:31.153116 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:42:31.192468 osdx WARNING[501518]: No supported link modes on interface eth0 Oct 10 22:42:31.193828 osdx modulelauncher[501518]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:42:31.193840 osdx modulelauncher[501518]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:42:31.194951 osdx modulelauncher[501518]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:42:31.194959 osdx modulelauncher[501518]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:42:31.226719 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:31.237918 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:31.264881 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:31.400953 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:42:31.586234 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:31.654350 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:42:31.754964 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:31.804298 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:31.859632 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:32.022284 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:32.079492 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:42:32.184491 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Oct 10 22:42:32.238560 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Oct 10 22:42:32.327836 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Oct 10 22:42:32.383186 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:42:32.487398 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show changes'. Oct 10 22:42:32.546976 osdx ubnt-cfgd[501615]: inactive Oct 10 22:42:32.563741 osdx INFO[501621]: FRR daemons did not change Oct 10 22:42:32.661441 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:42:32.662603 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:32.664758 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:32.678897 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:42:32.679100 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] Network connectivity detected Oct 10 22:42:32.679155 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] Dropping privileges Oct 10 22:42:32.679877 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:32.681410 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] Network connectivity detected Oct 10 22:42:32.681463 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:42:32.681463 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:42:32.681463 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] Firefox workaround initialized Oct 10 22:42:32.681463 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpsiplbvry] Oct 10 22:42:32.844169 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal show | cat'. Oct 10 22:42:32.887993 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] [RD] OK (DoH) - rtt: 154ms Oct 10 22:42:32.887993 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] Server with the lowest initial latency: RD (rtt: 154ms) Oct 10 22:42:32.887993 osdx dnscrypt-proxy[501680]: [2025-10-10 22:42:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash fbde9ec8b61083045636daed938e6ac3eb5836b9a6063993d8620d69f6a6c58c at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD73p7IthCDBFY22u2TjmrD61g2uaYGOZPYYg1p9qbFjApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD73p7IthCDBFY22u2TjmrD61g2uaYGOZPYYg1p9qbFjApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:42:39.342631 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:42:39.345705 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:42:39.345762 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:42:39.353601 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:42:39.598699 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:42:39.855617 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:39.933650 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:42:40.012555 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:42:40.081280 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:40.182411 osdx ubnt-cfgd[501936]: inactive Oct 10 22:42:40.204180 osdx INFO[501942]: FRR daemons did not change Oct 10 22:42:40.229711 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:42:40.271629 osdx WARNING[502010]: No supported link modes on interface eth0 Oct 10 22:42:40.272957 osdx modulelauncher[502010]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:42:40.272968 osdx modulelauncher[502010]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:42:40.274101 osdx modulelauncher[502010]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:42:40.274109 osdx modulelauncher[502010]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:42:40.311377 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:40.325516 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:40.341648 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:40.521212 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:42:40.642666 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash fbde9ec8b61083045636daed938e6ac3eb5836b9a6063993d8620d69f6a6c58c'. Oct 10 22:42:40.781625 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:40.862740 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 22:42:41.007433 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:42:41.081499 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD73p7IthCDBFY22u2TjmrD61g2uaYGOZPYYg1p9qbFjApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Oct 10 22:42:41.169144 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:42:41.242996 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:41.336200 osdx ubnt-cfgd[502102]: inactive Oct 10 22:42:41.359319 osdx INFO[502110]: FRR daemons did not change Oct 10 22:42:41.373972 osdx ca-certificates[502126]: Updating certificates in /etc/ssl/certs... Oct 10 22:42:41.889143 osdx ubnt-cfgd[503138]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:42:41.899648 osdx ca-certificates[503144]: 1 added, 0 removed; done. Oct 10 22:42:41.902478 osdx ca-certificates[503150]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:42:41.906074 osdx ca-certificates[503152]: done. Oct 10 22:42:41.994100 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:42:41.995326 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:41.997709 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:42.013380 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:42.017132 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:42:42.017295 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] Network connectivity detected Oct 10 22:42:42.017359 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] Dropping privileges Oct 10 22:42:42.019273 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] Network connectivity detected Oct 10 22:42:42.019314 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:42:42.019314 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:42:42.019314 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] Firefox workaround initialized Oct 10 22:42:42.019314 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpqfe3y7dr] Oct 10 22:42:42.204532 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] [RD] OK (DoH) - rtt: 127ms Oct 10 22:42:42.204532 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] Server with the lowest initial latency: RD (rtt: 127ms) Oct 10 22:42:42.204532 osdx dnscrypt-proxy[503209]: [2025-10-10 22:42:42] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Oct 10 22:42:42.213170 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal show | cat'.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Oct 10 22:42:48.000176 osdx systemd-timedated[483934]: Changed local time to Fri 2025-10-10 22:42:48 UTC Oct 10 22:42:48.001329 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'set date 2025-10-10 22:42:48'. Oct 10 22:42:48.001842 osdx systemd-journald[246736]: Time jumped backwards, rotating. Oct 10 22:42:48.286078 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:42:48.289838 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:42:48.289889 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:42:48.295394 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:42:48.530399 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:42:48.760425 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:48.860431 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:42:48.945653 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:42:49.011766 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:49.114637 osdx ubnt-cfgd[504940]: inactive Oct 10 22:42:49.132740 osdx INFO[504946]: FRR daemons did not change Oct 10 22:42:49.153850 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:42:49.192777 osdx WARNING[505014]: No supported link modes on interface eth0 Oct 10 22:42:49.194147 osdx modulelauncher[505014]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:42:49.194158 osdx modulelauncher[505014]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:42:49.195239 osdx modulelauncher[505014]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:42:49.195246 osdx modulelauncher[505014]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:42:49.227365 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:49.237961 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:49.254243 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:49.398227 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:42:49.509359 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Oct 10 22:42:49.652446 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:49.709117 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 22:42:49.802207 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:42:49.858090 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Oct 10 22:42:49.948295 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Oct 10 22:42:50.003360 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Oct 10 22:42:50.093454 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38'. Oct 10 22:42:50.142921 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:42:50.267237 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:50.346898 osdx ubnt-cfgd[505106]: inactive Oct 10 22:42:50.365965 osdx INFO[505114]: FRR daemons did not change Oct 10 22:42:50.379576 osdx ca-certificates[505130]: Updating certificates in /etc/ssl/certs... Oct 10 22:42:50.909412 osdx ubnt-cfgd[506142]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:42:50.917619 osdx ca-certificates[506147]: 1 added, 0 removed; done. Oct 10 22:42:50.920340 osdx ca-certificates[506154]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:42:50.922886 osdx ca-certificates[506156]: done. Oct 10 22:42:51.038309 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:42:51.039599 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:51.042212 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:51.057271 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:42:51.058169 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] Network connectivity detected Oct 10 22:42:51.058169 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] Dropping privileges Oct 10 22:42:51.059613 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:51.060514 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] Network connectivity detected Oct 10 22:42:51.060577 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:42:51.060577 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:42:51.060577 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] Firefox workaround initialized Oct 10 22:42:51.060577 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpu4zt89za] Oct 10 22:42:51.061259 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Oct 10 22:42:51.061289 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Oct 10 22:42:51.061289 osdx dnscrypt-proxy[506213]: [2025-10-10 22:42:51] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFO-RxBziDNCoEnQnWFZTb6eZQmum_meEe5KWloxA-o4GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFO-RxBziDNCoEnQnWFZTb6eZQmum_meEe5KWloxA-o4GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Oct 10 22:42:57.291001 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.9M, max 13.8M, 11.8M free. Oct 10 22:42:57.294590 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:42:57.294649 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:42:57.300922 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:42:57.519014 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:42:57.749758 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:57.840283 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:42:57.919939 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:42:57.984902 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:58.097566 osdx ubnt-cfgd[507938]: inactive Oct 10 22:42:58.116783 osdx INFO[507944]: FRR daemons did not change Oct 10 22:42:58.142603 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:42:58.187458 osdx WARNING[508012]: No supported link modes on interface eth0 Oct 10 22:42:58.189001 osdx modulelauncher[508012]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:42:58.189013 osdx modulelauncher[508012]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:42:58.190327 osdx modulelauncher[508012]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:42:58.190336 osdx modulelauncher[508012]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:42:58.228064 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:42:58.240336 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:42:58.268617 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:42:58.410978 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:42:58.576230 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Oct 10 22:42:58.674477 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38 ip 10.215.168.1 port 8443'. Oct 10 22:42:58.841110 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:42:58.903377 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 22:42:58.999019 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:42:59.058490 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFO-RxBziDNCoEnQnWFZTb6eZQmum_meEe5KWloxA-o4GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Oct 10 22:42:59.152108 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:42:59.294699 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:42:59.375525 osdx ubnt-cfgd[508104]: inactive Oct 10 22:42:59.395414 osdx INFO[508112]: FRR daemons did not change Oct 10 22:42:59.409145 osdx ca-certificates[508127]: Updating certificates in /etc/ssl/certs... Oct 10 22:42:59.887214 osdx ubnt-cfgd[509140]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:42:59.895888 osdx ca-certificates[509146]: 1 added, 0 removed; done. Oct 10 22:42:59.899681 osdx ca-certificates[509152]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:42:59.902461 osdx ca-certificates[509154]: done. Oct 10 22:43:00.011018 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:43:00.012395 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:43:00.014794 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:43:00.040447 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:43:00.040650 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] Network connectivity detected Oct 10 22:43:00.040739 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] Dropping privileges Oct 10 22:43:00.043195 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] Network connectivity detected Oct 10 22:43:00.043261 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:43:00.043261 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:43:00.043261 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] Firefox workaround initialized Oct 10 22:43:00.043261 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpzq7g1hnh] Oct 10 22:43:00.043959 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Oct 10 22:43:00.044005 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Oct 10 22:43:00.044005 osdx dnscrypt-proxy[509211]: [2025-10-10 22:43:00] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Oct 10 22:43:00.045947 osdx OSDxCLI[472467]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16