Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash fbde9ec8b61083045636daed938e6ac3eb5836b9a6063993d8620d69f6a6c58c set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:41:02.318505 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:41:02.321826 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:41:02.321892 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:41:02.329131 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:41:02.580716 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:41:02.839267 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:41:02.921973 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:41:03.010393 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:41:03.092315 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:03.183042 osdx ubnt-cfgd[485581]: inactive Oct 10 22:41:03.200357 osdx INFO[485587]: FRR daemons did not change Oct 10 22:41:03.221830 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:41:03.269641 osdx WARNING[485655]: No supported link modes on interface eth0 Oct 10 22:41:03.271327 osdx modulelauncher[485655]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:41:03.271341 osdx modulelauncher[485655]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:41:03.272553 osdx modulelauncher[485655]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:41:03.272561 osdx modulelauncher[485655]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:41:03.308658 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:41:03.323533 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:41:03.339201 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:41:03.539378 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:41:04.649805 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:41:04.707280 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 22:41:04.815201 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:41:04.874558 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Oct 10 22:41:04.965752 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Oct 10 22:41:05.022586 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash fbde9ec8b61083045636daed938e6ac3eb5836b9a6063993d8620d69f6a6c58c'. Oct 10 22:41:05.111701 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Oct 10 22:41:05.165931 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Oct 10 22:41:05.260977 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:41:05.316582 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 10 22:41:05.488247 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:05.567637 osdx ubnt-cfgd[485747]: inactive Oct 10 22:41:05.593413 osdx INFO[485755]: FRR daemons did not change Oct 10 22:41:05.619227 osdx ca-certificates[485770]: Updating certificates in /etc/ssl/certs... Oct 10 22:41:06.230871 osdx ubnt-cfgd[486783]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:41:06.244210 osdx ca-certificates[486787]: 1 added, 0 removed; done. Oct 10 22:41:06.247961 osdx ca-certificates[486795]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:41:06.251577 osdx ca-certificates[486797]: done. Oct 10 22:41:06.394148 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:41:06.395533 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:41:06.397787 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:41:06.413023 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:41:06.413228 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Network connectivity detected Oct 10 22:41:06.413357 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Dropping privileges Oct 10 22:41:06.415713 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Network connectivity detected Oct 10 22:41:06.415781 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:41:06.415781 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:41:06.415781 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Oct 10 22:41:06.415781 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Firefox workaround initialized Oct 10 22:41:06.415781 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpwtaaya7m] Oct 10 22:41:06.419125 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:41:06.581236 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal show | cat'. Oct 10 22:41:06.615853 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] [RD] OK (DoH) - rtt: 114ms Oct 10 22:41:06.615853 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] Server with the lowest initial latency: RD (rtt: 114ms) Oct 10 22:41:06.615853 osdx dnscrypt-proxy[486854]: [2025-10-10 22:41:06] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash c47f5c30595f69382b635c7625a5f86cd737ac7690ee35981815302aca450236 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:41:02.298537 osdx systemd-journald[1561]: Runtime Journal (/run/log/journal/806ba4d037ed4b398e58eb92edf93777) is 904.0K, max 6.5M, 5.6M free. Oct 10 22:41:02.298900 osdx systemd-journald[1561]: Received client request to rotate journal, rotating. Oct 10 22:41:02.298935 osdx systemd-journald[1561]: Vacuuming done, freed 0B of archived journals from /run/log/journal/806ba4d037ed4b398e58eb92edf93777. Oct 10 22:41:02.308119 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:41:02.523231 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:41:03.574349 osdx OSDxCLI[129632]: User 'admin' entered the configuration menu. Oct 10 22:41:03.643102 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Oct 10 22:41:03.726778 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:41:03.787845 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service ssh'. Oct 10 22:41:03.901878 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:03.962818 osdx ubnt-cfgd[272754]: inactive Oct 10 22:41:04.065974 osdx INFO[272766]: FRR daemons did not change Oct 10 22:41:04.086930 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:41:04.129888 osdx WARNING[272834]: No supported link modes on interface eth0 Oct 10 22:41:04.131161 osdx modulelauncher[272834]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:41:04.131172 osdx modulelauncher[272834]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:41:04.132257 osdx modulelauncher[272834]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Oct 10 22:41:04.132267 osdx modulelauncher[272834]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Oct 10 22:41:04.231136 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Oct 10 22:41:04.242424 osdx sshd[272885]: Server listening on 0.0.0.0 port 22. Oct 10 22:41:04.242448 osdx sshd[272885]: Server listening on :: port 22. Oct 10 22:41:04.242519 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Oct 10 22:41:04.263917 osdx cfgd[1260]: [129632]Completed change to active configuration Oct 10 22:41:04.275307 osdx OSDxCLI[129632]: User 'admin' committed the configuration. Oct 10 22:41:04.303672 osdx OSDxCLI[129632]: User 'admin' left the configuration menu. Oct 10 22:41:04.441931 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Oct 10 22:41:08.722740 osdx OSDxCLI[129632]: User 'admin' entered the configuration menu. Oct 10 22:41:08.788191 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Oct 10 22:41:08.893452 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Oct 10 22:41:08.962805 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Oct 10 22:41:09.069041 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Oct 10 22:41:09.125466 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Oct 10 22:41:09.216834 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Oct 10 22:41:09.270434 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash c47f5c30595f69382b635c7625a5f86cd737ac7690ee35981815302aca450236'. Oct 10 22:41:09.376356 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:09.443921 osdx ubnt-cfgd[272940]: inactive Oct 10 22:41:09.467201 osdx INFO[272948]: FRR daemons did not change Oct 10 22:41:09.506601 osdx ca-certificates[272964]: Updating certificates in /etc/ssl/certs... Oct 10 22:41:09.986762 osdx ubnt-cfgd[273976]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:41:10.000956 osdx ca-certificates[273980]: 1 added, 0 removed; done. Oct 10 22:41:10.003649 osdx ca-certificates[273988]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:41:10.006382 osdx ca-certificates[273990]: done. Oct 10 22:41:10.079389 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:41:10.081367 osdx cfgd[1260]: [129632]Completed change to active configuration Oct 10 22:41:10.083991 osdx OSDxCLI[129632]: User 'admin' committed the configuration. Oct 10 22:41:10.099005 osdx OSDxCLI[129632]: User 'admin' left the configuration menu. Oct 10 22:41:10.305703 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system journal show | cat'. Oct 10 22:41:10.306013 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:41:10.306159 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] Network connectivity detected Oct 10 22:41:10.306242 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] Dropping privileges Oct 10 22:41:10.308303 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] Network connectivity detected Oct 10 22:41:10.308354 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:41:10.308354 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:41:10.308354 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] Firefox workaround initialized Oct 10 22:41:10.308354 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpnxrmac89] Oct 10 22:41:10.526386 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] [DUT0] OK (DoH) - rtt: 118ms Oct 10 22:41:10.526386 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 118ms) Oct 10 22:41:10.526386 osdx dnscrypt-proxy[273997]: [2025-10-10 22:41:10] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash fbde9ec8b61083045636daed938e6ac3eb5836b9a6063993d8620d69f6a6c58c at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD73p7IthCDBFY22u2TjmrD61g2uaYGOZPYYg1p9qbFjApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD73p7IthCDBFY22u2TjmrD61g2uaYGOZPYYg1p9qbFjApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:41:18.291728 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:41:18.293471 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:41:18.293525 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:41:18.302199 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:41:18.515149 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:41:18.732749 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:41:18.861624 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:41:18.914316 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:41:19.028166 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:19.099574 osdx ubnt-cfgd[488586]: inactive Oct 10 22:41:19.123709 osdx INFO[488592]: FRR daemons did not change Oct 10 22:41:19.145489 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:41:19.195856 osdx WARNING[488660]: No supported link modes on interface eth0 Oct 10 22:41:19.197571 osdx modulelauncher[488660]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:41:19.197583 osdx modulelauncher[488660]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:41:19.198906 osdx modulelauncher[488660]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:41:19.198918 osdx modulelauncher[488660]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:41:19.238912 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:41:19.253553 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:41:19.269300 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:41:19.429634 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:41:20.718822 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash fbde9ec8b61083045636daed938e6ac3eb5836b9a6063993d8620d69f6a6c58c'. Oct 10 22:41:20.854762 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:41:20.920619 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 22:41:21.012292 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:41:21.091909 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD73p7IthCDBFY22u2TjmrD61g2uaYGOZPYYg1p9qbFjApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Oct 10 22:41:21.142923 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Oct 10 22:41:21.238978 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Oct 10 22:41:21.294613 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 10 22:41:21.377945 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:41:21.434260 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 10 22:41:21.543787 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:21.611730 osdx ubnt-cfgd[488754]: inactive Oct 10 22:41:21.633914 osdx INFO[488762]: FRR daemons did not change Oct 10 22:41:21.647895 osdx ca-certificates[488778]: Updating certificates in /etc/ssl/certs... Oct 10 22:41:22.146886 osdx ubnt-cfgd[489790]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:41:22.154467 osdx ca-certificates[489796]: 1 added, 0 removed; done. Oct 10 22:41:22.157490 osdx ca-certificates[489802]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:41:22.160219 osdx ca-certificates[489804]: done. Oct 10 22:41:22.281822 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:41:22.283042 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:41:22.285165 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:41:22.299817 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:41:22.300056 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Network connectivity detected Oct 10 22:41:22.300137 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Dropping privileges Oct 10 22:41:22.302377 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Network connectivity detected Oct 10 22:41:22.302438 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:41:22.302438 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:41:22.302438 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Oct 10 22:41:22.302438 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Firefox workaround initialized Oct 10 22:41:22.302438 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpudgyqagg] Oct 10 22:41:22.308024 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:41:22.498200 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal show | cat'. Oct 10 22:41:22.569590 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] [RD] OK (DoH) - rtt: 124ms Oct 10 22:41:22.569590 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] Server with the lowest initial latency: RD (rtt: 124ms) Oct 10 22:41:22.569590 osdx dnscrypt-proxy[489864]: [2025-10-10 22:41:22] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash c47f5c30595f69382b635c7625a5f86cd737ac7690ee35981815302aca450236 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgxH9cMFlfaTgrY1x2JaX4bNc3rHaQ7jWYGBUwKspFAjYNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgxH9cMFlfaTgrY1x2JaX4bNc3rHaQ7jWYGBUwKspFAjYNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:41:18.255612 osdx systemd-journald[1561]: Runtime Journal (/run/log/journal/806ba4d037ed4b398e58eb92edf93777) is 932.0K, max 6.5M, 5.6M free. Oct 10 22:41:18.258902 osdx systemd-journald[1561]: Received client request to rotate journal, rotating. Oct 10 22:41:18.258950 osdx systemd-journald[1561]: Vacuuming done, freed 0B of archived journals from /run/log/journal/806ba4d037ed4b398e58eb92edf93777. Oct 10 22:41:18.267286 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:41:18.467504 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:41:19.564183 osdx OSDxCLI[129632]: User 'admin' entered the configuration menu. Oct 10 22:41:19.669713 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Oct 10 22:41:19.738235 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:41:19.831582 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service ssh'. Oct 10 22:41:19.901182 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:19.991092 osdx ubnt-cfgd[275700]: inactive Oct 10 22:41:20.017463 osdx INFO[275712]: FRR daemons did not change Oct 10 22:41:20.038891 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:41:20.092286 osdx WARNING[275780]: No supported link modes on interface eth0 Oct 10 22:41:20.094339 osdx modulelauncher[275780]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:41:20.094358 osdx modulelauncher[275780]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:41:20.096059 osdx modulelauncher[275780]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Oct 10 22:41:20.096070 osdx modulelauncher[275780]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Oct 10 22:41:20.215257 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Oct 10 22:41:20.227632 osdx sshd[275831]: Server listening on 0.0.0.0 port 22. Oct 10 22:41:20.227658 osdx sshd[275831]: Server listening on :: port 22. Oct 10 22:41:20.227759 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Oct 10 22:41:20.313359 osdx cfgd[1260]: [129632]Completed change to active configuration Oct 10 22:41:20.328453 osdx OSDxCLI[129632]: User 'admin' committed the configuration. Oct 10 22:41:20.348477 osdx OSDxCLI[129632]: User 'admin' left the configuration menu. Oct 10 22:41:20.506804 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Oct 10 22:41:24.634395 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash c47f5c30595f69382b635c7625a5f86cd737ac7690ee35981815302aca450236'. Oct 10 22:41:24.769798 osdx OSDxCLI[129632]: User 'admin' entered the configuration menu. Oct 10 22:41:24.827848 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Oct 10 22:41:24.921818 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Oct 10 22:41:24.972553 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Oct 10 22:41:25.074914 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgxH9cMFlfaTgrY1x2JaX4bNc3rHaQ7jWYGBUwKspFAjYNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Oct 10 22:41:25.150259 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:25.233055 osdx ubnt-cfgd[275886]: inactive Oct 10 22:41:25.253284 osdx INFO[275894]: FRR daemons did not change Oct 10 22:41:25.267684 osdx ca-certificates[275908]: Updating certificates in /etc/ssl/certs... Oct 10 22:41:25.751180 osdx ubnt-cfgd[276922]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:41:25.759180 osdx ca-certificates[276927]: 1 added, 0 removed; done. Oct 10 22:41:25.762050 osdx ca-certificates[276934]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:41:25.764877 osdx ca-certificates[276936]: done. Oct 10 22:41:25.843443 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:41:25.845456 osdx cfgd[1260]: [129632]Completed change to active configuration Oct 10 22:41:25.849313 osdx OSDxCLI[129632]: User 'admin' committed the configuration. Oct 10 22:41:25.876017 osdx OSDxCLI[129632]: User 'admin' left the configuration menu. Oct 10 22:41:25.890240 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:25] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:41:25.890491 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:25] [NOTICE] Network connectivity detected Oct 10 22:41:25.890534 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:25] [NOTICE] Dropping privileges Oct 10 22:41:25.892997 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:25] [NOTICE] Network connectivity detected Oct 10 22:41:25.893053 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:25] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:41:25.893053 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:25] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:41:25.893053 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:25] [NOTICE] Firefox workaround initialized Oct 10 22:41:25.893053 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:25] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpivpe9upu] Oct 10 22:41:26.034515 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system journal show | cat'. Oct 10 22:41:26.137576 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:26] [NOTICE] [DUT0] OK (DoH) - rtt: 113ms Oct 10 22:41:26.137576 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:26] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 113ms) Oct 10 22:41:26.137576 osdx dnscrypt-proxy[276943]: [2025-10-10 22:41:26] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Oct 10 22:41:34.347753 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:41:34.348791 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:41:34.348842 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:41:34.359327 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:41:34.585283 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:41:34.821573 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:41:34.898696 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:41:34.962734 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:41:35.067507 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:35.126146 osdx ubnt-cfgd[491595]: inactive Oct 10 22:41:35.144348 osdx INFO[491601]: FRR daemons did not change Oct 10 22:41:35.164805 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:41:35.209076 osdx WARNING[491669]: No supported link modes on interface eth0 Oct 10 22:41:35.210390 osdx modulelauncher[491669]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:41:35.210401 osdx modulelauncher[491669]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:41:35.211483 osdx modulelauncher[491669]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:41:35.211490 osdx modulelauncher[491669]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:41:35.243929 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:41:35.255888 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:41:35.271240 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:41:35.408113 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:41:36.619249 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Oct 10 22:41:36.765036 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:41:36.867073 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 22:41:36.920802 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:41:37.018981 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Oct 10 22:41:37.071961 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Oct 10 22:41:37.168014 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Oct 10 22:41:37.226214 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38'. Oct 10 22:41:37.314297 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:41:37.370530 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Oct 10 22:41:37.471542 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Oct 10 22:41:37.524961 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 10 22:41:37.655521 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:37.725706 osdx ubnt-cfgd[491764]: inactive Oct 10 22:41:37.744605 osdx INFO[491772]: FRR daemons did not change Oct 10 22:41:37.756776 osdx ca-certificates[491788]: Updating certificates in /etc/ssl/certs... Oct 10 22:41:38.303301 osdx ubnt-cfgd[492800]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:41:38.313488 osdx ca-certificates[492805]: 1 added, 0 removed; done. Oct 10 22:41:38.317310 osdx ca-certificates[492812]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:41:38.320708 osdx ca-certificates[492814]: done. Oct 10 22:41:38.441142 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:41:38.442362 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:41:38.444434 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:41:38.460327 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:41:38.469721 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:41:38.470003 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Network connectivity detected Oct 10 22:41:38.470105 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Dropping privileges Oct 10 22:41:38.472994 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Network connectivity detected Oct 10 22:41:38.473093 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:41:38.473093 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:41:38.473093 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Oct 10 22:41:38.473093 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Firefox workaround initialized Oct 10 22:41:38.473093 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpa2frq2h8] Oct 10 22:41:38.496163 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] [RD] OK (DNSCrypt) - rtt: 22ms Oct 10 22:41:38.496163 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] Server with the lowest initial latency: RD (rtt: 22ms) Oct 10 22:41:38.496163 osdx dnscrypt-proxy[492874]: [2025-10-10 22:41:38] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash c47f5c30595f69382b635c7625a5f86cd737ac7690ee35981815302aca450236 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:41:34.337828 osdx systemd-journald[1561]: Runtime Journal (/run/log/journal/806ba4d037ed4b398e58eb92edf93777) is 956.0K, max 6.5M, 5.5M free. Oct 10 22:41:34.338270 osdx systemd-journald[1561]: Received client request to rotate journal, rotating. Oct 10 22:41:34.338305 osdx systemd-journald[1561]: Vacuuming done, freed 0B of archived journals from /run/log/journal/806ba4d037ed4b398e58eb92edf93777. Oct 10 22:41:34.347805 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:41:34.575019 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:41:35.564296 osdx OSDxCLI[129632]: User 'admin' entered the configuration menu. Oct 10 22:41:35.647010 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Oct 10 22:41:35.732285 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:41:35.822695 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service ssh'. Oct 10 22:41:35.894887 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:35.994517 osdx ubnt-cfgd[278645]: inactive Oct 10 22:41:36.017821 osdx INFO[278657]: FRR daemons did not change Oct 10 22:41:36.038291 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:41:36.084757 osdx WARNING[278725]: No supported link modes on interface eth0 Oct 10 22:41:36.086068 osdx modulelauncher[278725]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:41:36.086085 osdx modulelauncher[278725]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:41:36.087518 osdx modulelauncher[278725]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Oct 10 22:41:36.087526 osdx modulelauncher[278725]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Oct 10 22:41:36.198872 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Oct 10 22:41:36.212755 osdx sshd[278776]: Server listening on 0.0.0.0 port 22. Oct 10 22:41:36.212782 osdx sshd[278776]: Server listening on :: port 22. Oct 10 22:41:36.212867 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Oct 10 22:41:36.232977 osdx cfgd[1260]: [129632]Completed change to active configuration Oct 10 22:41:36.245000 osdx OSDxCLI[129632]: User 'admin' committed the configuration. Oct 10 22:41:36.260283 osdx OSDxCLI[129632]: User 'admin' left the configuration menu. Oct 10 22:41:36.402978 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Oct 10 22:41:38.649378 osdx OSDxCLI[129632]: User 'admin' entered the configuration menu. Oct 10 22:41:38.716562 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Oct 10 22:41:38.800727 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Oct 10 22:41:38.863653 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Oct 10 22:41:38.976911 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Oct 10 22:41:39.034033 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Oct 10 22:41:39.145834 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Oct 10 22:41:39.213574 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash c47f5c30595f69382b635c7625a5f86cd737ac7690ee35981815302aca450236'. Oct 10 22:41:39.337390 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:39.427664 osdx ubnt-cfgd[278831]: inactive Oct 10 22:41:39.450884 osdx INFO[278839]: FRR daemons did not change Oct 10 22:41:39.465494 osdx ca-certificates[278854]: Updating certificates in /etc/ssl/certs... Oct 10 22:41:39.961575 osdx ubnt-cfgd[279867]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:41:39.968765 osdx ca-certificates[279872]: 1 added, 0 removed; done. Oct 10 22:41:39.971785 osdx ca-certificates[279879]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:41:39.974494 osdx ca-certificates[279881]: done. Oct 10 22:41:40.082838 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:41:40.084762 osdx cfgd[1260]: [129632]Completed change to active configuration Oct 10 22:41:40.087492 osdx OSDxCLI[129632]: User 'admin' committed the configuration. Oct 10 22:41:40.102851 osdx OSDxCLI[129632]: User 'admin' left the configuration menu. Oct 10 22:41:40.103910 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:41:40.104081 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] Network connectivity detected Oct 10 22:41:40.104255 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] Dropping privileges Oct 10 22:41:40.106558 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] Network connectivity detected Oct 10 22:41:40.106652 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:41:40.106690 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:41:40.106737 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] Firefox workaround initialized Oct 10 22:41:40.106766 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp5z1uqxyg] Oct 10 22:41:40.320876 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system journal show | cat'. Oct 10 22:41:40.400608 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] [DUT0] OK (DoH) - rtt: 133ms Oct 10 22:41:40.400608 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 133ms) Oct 10 22:41:40.400608 osdx dnscrypt-proxy[279888]: [2025-10-10 22:41:40] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFO-RxBziDNCoEnQnWFZTb6eZQmum_meEe5KWloxA-o4GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFO-RxBziDNCoEnQnWFZTb6eZQmum_meEe5KWloxA-o4GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Oct 10 22:41:48.296054 osdx systemd-journald[246736]: Runtime Journal (/run/log/journal/d6792964fe7547c9a60a3d774aa97dac) is 1.8M, max 13.8M, 11.9M free. Oct 10 22:41:48.299435 osdx systemd-journald[246736]: Received client request to rotate journal, rotating. Oct 10 22:41:48.299490 osdx systemd-journald[246736]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d6792964fe7547c9a60a3d774aa97dac. Oct 10 22:41:48.306549 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:41:48.571973 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:41:48.921530 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:41:49.061530 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Oct 10 22:41:49.146380 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:41:49.276427 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:49.337692 osdx ubnt-cfgd[494601]: inactive Oct 10 22:41:49.358757 osdx INFO[494607]: FRR daemons did not change Oct 10 22:41:49.379440 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:41:49.420231 osdx WARNING[494675]: No supported link modes on interface eth0 Oct 10 22:41:49.421551 osdx modulelauncher[494675]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:41:49.421563 osdx modulelauncher[494675]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:41:49.423064 osdx modulelauncher[494675]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Oct 10 22:41:49.423071 osdx modulelauncher[494675]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Oct 10 22:41:49.458254 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:41:49.469409 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:41:49.484106 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:41:49.624706 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Oct 10 22:41:50.942890 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Oct 10 22:41:51.045676 osdx OSDxCLI[472467]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 53:be:47:10:73:88:33:42:a0:49:d0:9d:61:59:4d:be:9e:65:09:ae:9b:f9:9e:11:ee:4a:5a:5a:31:03:ea:38 ip 10.215.168.1 port 8443'. Oct 10 22:41:51.274961 osdx OSDxCLI[472467]: User 'admin' entered the configuration menu. Oct 10 22:41:51.348153 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Oct 10 22:41:51.455314 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Oct 10 22:41:51.517514 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFO-RxBziDNCoEnQnWFZTb6eZQmum_meEe5KWloxA-o4GjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Oct 10 22:41:51.626995 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns resolver local'. Oct 10 22:41:51.683171 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Oct 10 22:41:51.814726 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Oct 10 22:41:51.963107 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Oct 10 22:41:52.079503 osdx OSDxCLI[472467]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:52.178199 osdx ubnt-cfgd[494770]: inactive Oct 10 22:41:52.197701 osdx INFO[494778]: FRR daemons did not change Oct 10 22:41:52.210270 osdx ca-certificates[494793]: Updating certificates in /etc/ssl/certs... Oct 10 22:41:52.714164 osdx ubnt-cfgd[495806]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:41:52.721848 osdx ca-certificates[495812]: 1 added, 0 removed; done. Oct 10 22:41:52.724570 osdx ca-certificates[495818]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:41:52.727174 osdx ca-certificates[495820]: done. Oct 10 22:41:52.847800 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:41:52.849247 osdx cfgd[1464]: [472467]Completed change to active configuration Oct 10 22:41:52.851387 osdx OSDxCLI[472467]: User 'admin' committed the configuration. Oct 10 22:41:52.867507 osdx OSDxCLI[472467]: User 'admin' left the configuration menu. Oct 10 22:41:52.876398 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:41:52.876678 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Network connectivity detected Oct 10 22:41:52.876708 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Dropping privileges Oct 10 22:41:52.879608 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Network connectivity detected Oct 10 22:41:52.879679 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:41:52.879679 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:41:52.879679 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Oct 10 22:41:52.879679 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Firefox workaround initialized Oct 10 22:41:52.879679 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpq5uo3r7f] Oct 10 22:41:52.880499 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Oct 10 22:41:52.880499 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Oct 10 22:41:52.880549 osdx dnscrypt-proxy[495880]: [2025-10-10 22:41:52] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash c47f5c30595f69382b635c7625a5f86cd737ac7690ee35981815302aca450236 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgxH9cMFlfaTgrY1x2JaX4bNc3rHaQ7jWYGBUwKspFAjYNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgxH9cMFlfaTgrY1x2JaX4bNc3rHaQ7jWYGBUwKspFAjYNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Oct 10 22:41:48.279081 osdx systemd-journald[1561]: Runtime Journal (/run/log/journal/806ba4d037ed4b398e58eb92edf93777) is 956.0K, max 6.5M, 5.5M free. Oct 10 22:41:48.281981 osdx systemd-journald[1561]: Received client request to rotate journal, rotating. Oct 10 22:41:48.282045 osdx systemd-journald[1561]: Vacuuming done, freed 0B of archived journals from /run/log/journal/806ba4d037ed4b398e58eb92edf93777. Oct 10 22:41:48.292776 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system journal clear'. Oct 10 22:41:48.564020 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'system coredump delete all'. Oct 10 22:41:49.856277 osdx OSDxCLI[129632]: User 'admin' entered the configuration menu. Oct 10 22:41:49.964442 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Oct 10 22:41:50.055369 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Oct 10 22:41:50.104687 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service ssh'. Oct 10 22:41:50.235807 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:50.297858 osdx ubnt-cfgd[281589]: inactive Oct 10 22:41:50.325327 osdx INFO[281601]: FRR daemons did not change Oct 10 22:41:50.349957 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Oct 10 22:41:50.402512 osdx WARNING[281669]: No supported link modes on interface eth0 Oct 10 22:41:50.403918 osdx modulelauncher[281669]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Oct 10 22:41:50.403935 osdx modulelauncher[281669]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Oct 10 22:41:50.405139 osdx modulelauncher[281669]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Oct 10 22:41:50.405149 osdx modulelauncher[281669]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Oct 10 22:41:50.526473 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Oct 10 22:41:50.540818 osdx sshd[281720]: Server listening on 0.0.0.0 port 22. Oct 10 22:41:50.540848 osdx sshd[281720]: Server listening on :: port 22. Oct 10 22:41:50.540948 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Oct 10 22:41:50.562651 osdx cfgd[1260]: [129632]Completed change to active configuration Oct 10 22:41:50.574822 osdx OSDxCLI[129632]: User 'admin' committed the configuration. Oct 10 22:41:50.597923 osdx OSDxCLI[129632]: User 'admin' left the configuration menu. Oct 10 22:41:50.758608 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Oct 10 22:41:53.058648 osdx OSDxCLI[129632]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash c47f5c30595f69382b635c7625a5f86cd737ac7690ee35981815302aca450236'. Oct 10 22:41:53.193898 osdx OSDxCLI[129632]: User 'admin' entered the configuration menu. Oct 10 22:41:53.249256 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Oct 10 22:41:53.347997 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Oct 10 22:41:53.415973 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Oct 10 22:41:53.506763 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgxH9cMFlfaTgrY1x2JaX4bNc3rHaQ7jWYGBUwKspFAjYNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Oct 10 22:41:53.599079 osdx OSDxCLI[129632]: User 'admin' added a new cfg line: 'show working'. Oct 10 22:41:53.696776 osdx ubnt-cfgd[281775]: inactive Oct 10 22:41:53.719396 osdx INFO[281783]: FRR daemons did not change Oct 10 22:41:53.731745 osdx ca-certificates[281799]: Updating certificates in /etc/ssl/certs... Oct 10 22:41:54.275618 osdx ubnt-cfgd[282811]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Oct 10 22:41:54.286682 osdx ca-certificates[282816]: 1 added, 0 removed; done. Oct 10 22:41:54.291479 osdx ca-certificates[282823]: Running hooks in /etc/ca-certificates/update.d... Oct 10 22:41:54.295304 osdx ca-certificates[282825]: done. Oct 10 22:41:54.366583 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Oct 10 22:41:54.368726 osdx cfgd[1260]: [129632]Completed change to active configuration Oct 10 22:41:54.371553 osdx OSDxCLI[129632]: User 'admin' committed the configuration. Oct 10 22:41:54.395449 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] dnscrypt-proxy 2.0.45 Oct 10 22:41:54.395739 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] Network connectivity detected Oct 10 22:41:54.395822 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] Dropping privileges Oct 10 22:41:54.398068 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] Network connectivity detected Oct 10 22:41:54.398128 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Oct 10 22:41:54.398128 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Oct 10 22:41:54.398169 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] Firefox workaround initialized Oct 10 22:41:54.398169 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp9kaqw3s5] Oct 10 22:41:54.431105 osdx OSDxCLI[129632]: User 'admin' left the configuration menu. Oct 10 22:41:54.608355 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] [DUT0] OK (DoH) - rtt: 117ms Oct 10 22:41:54.608355 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 117ms) Oct 10 22:41:54.608355 osdx dnscrypt-proxy[282832]: [2025-10-10 22:41:54] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13