Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 99b11ac235cc5a678a924b00c9715f9d99120fb82ed6b147374fd0a314e61844 set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Nov 12 16:21:41.340431 osdx systemd-journald[1872]: Runtime Journal (/run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99) is 1.8M, max 13.8M, 11.9M free. Nov 12 16:21:41.344194 osdx systemd-journald[1872]: Received client request to rotate journal, rotating. Nov 12 16:21:41.344280 osdx systemd-journald[1872]: Vacuuming done, freed 0B of archived journals from /run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99. Nov 12 16:21:41.352621 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal clear'. Nov 12 16:21:41.685949 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system coredump delete all'. Nov 12 16:21:41.991220 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:21:42.098826 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Nov 12 16:21:42.228404 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Nov 12 16:21:42.331719 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:21:42.445971 osdx ubnt-cfgd[179172]: inactive Nov 12 16:21:42.464296 osdx INFO[179178]: FRR daemons did not change Nov 12 16:21:42.492190 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Nov 12 16:21:42.535797 osdx WARNING[179246]: No supported link modes on interface eth0 Nov 12 16:21:42.537300 osdx modulelauncher[179246]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Nov 12 16:21:42.537316 osdx modulelauncher[179246]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Nov 12 16:21:42.538472 osdx modulelauncher[179246]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Nov 12 16:21:42.538483 osdx modulelauncher[179246]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Nov 12 16:21:42.579518 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:21:42.590797 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:21:42.614590 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:21:42.760624 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Nov 12 16:21:43.072200 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:21:43.159311 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Nov 12 16:21:43.255911 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Nov 12 16:21:43.331272 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Nov 12 16:21:43.425780 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Nov 12 16:21:43.493745 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 99b11ac235cc5a678a924b00c9715f9d99120fb82ed6b147374fd0a314e61844'. Nov 12 16:21:43.583560 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns resolver local'. Nov 12 16:21:43.674214 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:21:43.763203 osdx ubnt-cfgd[179335]: inactive Nov 12 16:21:43.797390 osdx INFO[179343]: FRR daemons did not change Nov 12 16:21:43.815013 osdx ca-certificates[179359]: Updating certificates in /etc/ssl/certs... Nov 12 16:21:44.505994 osdx ubnt-cfgd[180371]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Nov 12 16:21:44.515429 osdx ca-certificates[180376]: 1 added, 0 removed; done. Nov 12 16:21:44.518796 osdx ca-certificates[180383]: Running hooks in /etc/ca-certificates/update.d... Nov 12 16:21:44.522775 osdx ca-certificates[180385]: done. Nov 12 16:21:44.652573 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Nov 12 16:21:44.653887 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:21:44.656113 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:21:44.673842 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:21:44.674613 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] dnscrypt-proxy 2.0.45 Nov 12 16:21:44.674784 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] Network connectivity detected Nov 12 16:21:44.674917 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] Dropping privileges Nov 12 16:21:44.678400 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] Network connectivity detected Nov 12 16:21:44.678478 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Nov 12 16:21:44.678478 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Nov 12 16:21:44.678478 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] Firefox workaround initialized Nov 12 16:21:44.678478 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpicax4iyy] Nov 12 16:21:44.871226 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] [RD] OK (DoH) - rtt: 113ms Nov 12 16:21:44.871226 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] Server with the lowest initial latency: RD (rtt: 113ms) Nov 12 16:21:44.871226 osdx dnscrypt-proxy[180442]: [2025-11-12 16:21:44] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Nov 12 16:21:44.875648 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal show | cat'.
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Nov 12 16:21:52.303443 osdx systemd-journald[1872]: Runtime Journal (/run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99) is 1.8M, max 13.8M, 11.9M free. Nov 12 16:21:52.303918 osdx systemd-journald[1872]: Received client request to rotate journal, rotating. Nov 12 16:21:52.303950 osdx systemd-journald[1872]: Vacuuming done, freed 0B of archived journals from /run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99. Nov 12 16:21:52.314718 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal clear'. Nov 12 16:21:52.590959 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system coredump delete all'. Nov 12 16:21:52.842774 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:21:52.934939 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Nov 12 16:21:53.029342 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Nov 12 16:21:53.146151 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:21:53.309181 osdx ubnt-cfgd[182171]: inactive Nov 12 16:21:53.327026 osdx INFO[182177]: FRR daemons did not change Nov 12 16:21:53.347654 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Nov 12 16:21:53.399704 osdx WARNING[182245]: No supported link modes on interface eth0 Nov 12 16:21:53.401164 osdx modulelauncher[182245]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Nov 12 16:21:53.401178 osdx modulelauncher[182245]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Nov 12 16:21:53.402345 osdx modulelauncher[182245]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Nov 12 16:21:53.402355 osdx modulelauncher[182245]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Nov 12 16:21:53.457209 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:21:53.471674 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:21:53.499046 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:21:53.679824 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Nov 12 16:21:53.886242 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:21:53.977804 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Nov 12 16:21:54.079931 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:21:54.192910 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:21:54.269357 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:21:54.478648 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:21:54.604473 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Nov 12 16:21:54.727461 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Nov 12 16:21:54.845764 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Nov 12 16:21:54.939903 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns resolver local'. Nov 12 16:21:55.068515 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show changes'. Nov 12 16:21:55.186072 osdx ubnt-cfgd[182341]: inactive Nov 12 16:21:55.258977 osdx INFO[182347]: FRR daemons did not change Nov 12 16:21:55.380133 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Nov 12 16:21:55.381783 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:21:55.384305 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:21:55.402162 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:21:55.407926 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] dnscrypt-proxy 2.0.45 Nov 12 16:21:55.407926 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] Network connectivity detected Nov 12 16:21:55.408282 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] Dropping privileges Nov 12 16:21:55.410951 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] Network connectivity detected Nov 12 16:21:55.411015 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Nov 12 16:21:55.411015 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Nov 12 16:21:55.411015 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] Firefox workaround initialized Nov 12 16:21:55.411015 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp84mur24l] Nov 12 16:21:55.431744 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABAY_ENtrAqoB7-qyIvPWt4Z": x509: certificate signed by unknown authority Nov 12 16:21:55.431744 osdx dnscrypt-proxy[182406]: [2025-11-12 16:21:55] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Nov 12 16:22:05.343269 osdx systemd-journald[1872]: Runtime Journal (/run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99) is 1.8M, max 13.8M, 11.9M free. Nov 12 16:22:05.344533 osdx systemd-journald[1872]: Received client request to rotate journal, rotating. Nov 12 16:22:05.344599 osdx systemd-journald[1872]: Vacuuming done, freed 0B of archived journals from /run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99. Nov 12 16:22:05.353021 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal clear'. Nov 12 16:22:05.572196 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system coredump delete all'. Nov 12 16:22:05.789556 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:05.863288 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Nov 12 16:22:05.941814 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Nov 12 16:22:06.064513 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:22:06.187524 osdx ubnt-cfgd[182662]: inactive Nov 12 16:22:06.206668 osdx INFO[182668]: FRR daemons did not change Nov 12 16:22:06.228539 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Nov 12 16:22:06.273469 osdx WARNING[182736]: No supported link modes on interface eth0 Nov 12 16:22:06.275207 osdx modulelauncher[182736]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Nov 12 16:22:06.275219 osdx modulelauncher[182736]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Nov 12 16:22:06.276653 osdx modulelauncher[182736]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Nov 12 16:22:06.276661 osdx modulelauncher[182736]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Nov 12 16:22:06.313041 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:22:06.323995 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:06.355470 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:22:06.525060 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Nov 12 16:22:06.695317 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:06.759934 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Nov 12 16:22:06.865393 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:22:06.939855 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:06.973263 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:22:07.180427 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:07.245143 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Nov 12 16:22:07.370581 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Nov 12 16:22:07.460276 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Nov 12 16:22:07.549079 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Nov 12 16:22:07.653910 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns resolver local'. Nov 12 16:22:07.727917 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show changes'. Nov 12 16:22:07.841740 osdx ubnt-cfgd[182833]: inactive Nov 12 16:22:07.864291 osdx INFO[182839]: FRR daemons did not change Nov 12 16:22:07.968942 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Nov 12 16:22:07.970306 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:22:07.972576 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:07.992373 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:07] [NOTICE] dnscrypt-proxy 2.0.45 Nov 12 16:22:07.992916 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:07] [NOTICE] Network connectivity detected Nov 12 16:22:07.992916 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:07] [NOTICE] Dropping privileges Nov 12 16:22:07.995799 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:07] [NOTICE] Network connectivity detected Nov 12 16:22:07.995874 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:07] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Nov 12 16:22:07.995874 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:07] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Nov 12 16:22:07.995874 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:07] [NOTICE] Firefox workaround initialized Nov 12 16:22:07.995874 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:07] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpxfn18vo_] Nov 12 16:22:07.998754 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:22:08.176888 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal show | cat'. Nov 12 16:22:08.351329 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:08] [NOTICE] [RD] OK (DoH) - rtt: 222ms Nov 12 16:22:08.351329 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:08] [NOTICE] Server with the lowest initial latency: RD (rtt: 222ms) Nov 12 16:22:08.351329 osdx dnscrypt-proxy[182898]: [2025-11-12 16:22:08] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 99b11ac235cc5a678a924b00c9715f9d99120fb82ed6b147374fd0a314e61844 at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCZsRrCNcxaZ4qSSwDJcV-dmRIPuC7WsUc3T9CjFOYYRApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCZsRrCNcxaZ4qSSwDJcV-dmRIPuC7WsUc3T9CjFOYYRApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Nov 12 16:22:15.317736 osdx systemd-journald[1872]: Runtime Journal (/run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99) is 1.8M, max 13.8M, 11.9M free. Nov 12 16:22:15.320387 osdx systemd-journald[1872]: Received client request to rotate journal, rotating. Nov 12 16:22:15.320461 osdx systemd-journald[1872]: Vacuuming done, freed 0B of archived journals from /run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99. Nov 12 16:22:15.331849 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal clear'. Nov 12 16:22:15.600862 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system coredump delete all'. Nov 12 16:22:15.872226 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:15.971727 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Nov 12 16:22:16.080303 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Nov 12 16:22:16.214985 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:22:16.308123 osdx ubnt-cfgd[183156]: inactive Nov 12 16:22:16.331222 osdx INFO[183162]: FRR daemons did not change Nov 12 16:22:16.364394 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Nov 12 16:22:16.416088 osdx WARNING[183230]: No supported link modes on interface eth0 Nov 12 16:22:16.418111 osdx modulelauncher[183230]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Nov 12 16:22:16.418130 osdx modulelauncher[183230]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Nov 12 16:22:16.419864 osdx modulelauncher[183230]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Nov 12 16:22:16.419883 osdx modulelauncher[183230]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Nov 12 16:22:16.463203 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:22:16.474281 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:16.513552 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:22:16.662249 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Nov 12 16:22:16.863911 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 99b11ac235cc5a678a924b00c9715f9d99120fb82ed6b147374fd0a314e61844'. Nov 12 16:22:17.048990 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:17.116405 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Nov 12 16:22:17.216094 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Nov 12 16:22:17.277544 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCZsRrCNcxaZ4qSSwDJcV-dmRIPuC7WsUc3T9CjFOYYRApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Nov 12 16:22:17.412285 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns resolver local'. Nov 12 16:22:17.514053 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:22:17.646658 osdx ubnt-cfgd[183320]: inactive Nov 12 16:22:17.668250 osdx INFO[183328]: FRR daemons did not change Nov 12 16:22:17.680581 osdx ca-certificates[183343]: Updating certificates in /etc/ssl/certs... Nov 12 16:22:18.228152 osdx ubnt-cfgd[184356]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Nov 12 16:22:18.235728 osdx ca-certificates[184361]: 1 added, 0 removed; done. Nov 12 16:22:18.238593 osdx ca-certificates[184368]: Running hooks in /etc/ca-certificates/update.d... Nov 12 16:22:18.241321 osdx ca-certificates[184370]: done. Nov 12 16:22:18.360878 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Nov 12 16:22:18.362286 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:22:18.364999 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:18.383551 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:22:18.384382 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] dnscrypt-proxy 2.0.45 Nov 12 16:22:18.384552 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] Network connectivity detected Nov 12 16:22:18.384750 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] Dropping privileges Nov 12 16:22:18.387746 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] Network connectivity detected Nov 12 16:22:18.387820 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Nov 12 16:22:18.387820 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Nov 12 16:22:18.387820 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] Firefox workaround initialized Nov 12 16:22:18.387820 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpbv6z18p3] Nov 12 16:22:18.549314 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal show | cat'. Nov 12 16:22:18.550438 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] [RD] OK (DoH) - rtt: 106ms Nov 12 16:22:18.550438 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] Server with the lowest initial latency: RD (rtt: 106ms) Nov 12 16:22:18.550438 osdx dnscrypt-proxy[184427]: [2025-11-12 16:22:18] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
56:0c:ce:92:86:a2:c2:f2:4d:21:1f:cb:ca:08:fe:90:c0:cf:cb:c6:61:a5:4f:b4:e6:0b:5f:ee:c7:b7:de:60
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '56:0c:ce:92:86:a2:c2:f2:4d:21:1f:cb:ca:08:fe:90:c0:cf:cb:c6:61:a5:4f:b4:e6:0b:5f:ee:c7:b7:de:60' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Nov 12 16:22:26.363020 osdx systemd-journald[1872]: Runtime Journal (/run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99) is 1.8M, max 13.8M, 11.9M free. Nov 12 16:22:26.364248 osdx systemd-journald[1872]: Received client request to rotate journal, rotating. Nov 12 16:22:26.364324 osdx systemd-journald[1872]: Vacuuming done, freed 0B of archived journals from /run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99. Nov 12 16:22:26.373856 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal clear'. Nov 12 16:22:26.639789 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system coredump delete all'. Nov 12 16:22:26.992716 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:27.122498 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Nov 12 16:22:27.177019 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Nov 12 16:22:27.306392 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:22:27.381389 osdx ubnt-cfgd[186162]: inactive Nov 12 16:22:27.404824 osdx INFO[186168]: FRR daemons did not change Nov 12 16:22:27.436909 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Nov 12 16:22:27.486760 osdx WARNING[186236]: No supported link modes on interface eth0 Nov 12 16:22:27.488611 osdx modulelauncher[186236]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Nov 12 16:22:27.488625 osdx modulelauncher[186236]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Nov 12 16:22:27.489891 osdx modulelauncher[186236]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Nov 12 16:22:27.489901 osdx modulelauncher[186236]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Nov 12 16:22:27.533890 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:22:27.547717 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:27.567221 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:22:27.737487 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Nov 12 16:22:27.862862 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Nov 12 16:22:28.040844 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:28.118064 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Nov 12 16:22:28.232870 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Nov 12 16:22:28.316592 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Nov 12 16:22:28.400622 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Nov 12 16:22:28.511925 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Nov 12 16:22:28.588355 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 56:0c:ce:92:86:a2:c2:f2:4d:21:1f:cb:ca:08:fe:90:c0:cf:cb:c6:61:a5:4f:b4:e6:0b:5f:ee:c7:b7:de:60'. Nov 12 16:22:28.669037 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns resolver local'. Nov 12 16:22:28.758375 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:22:28.863017 osdx ubnt-cfgd[186328]: inactive Nov 12 16:22:28.887678 osdx INFO[186336]: FRR daemons did not change Nov 12 16:22:28.902031 osdx ca-certificates[186352]: Updating certificates in /etc/ssl/certs... Nov 12 16:22:29.549789 osdx ubnt-cfgd[187364]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Nov 12 16:22:29.560376 osdx ca-certificates[187370]: 1 added, 0 removed; done. Nov 12 16:22:29.563441 osdx ca-certificates[187376]: Running hooks in /etc/ca-certificates/update.d... Nov 12 16:22:29.567435 osdx ca-certificates[187378]: done. Nov 12 16:22:29.676692 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Nov 12 16:22:29.678164 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:22:29.682200 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:29.701599 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] dnscrypt-proxy 2.0.45 Nov 12 16:22:29.701862 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] Network connectivity detected Nov 12 16:22:29.701862 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] Dropping privileges Nov 12 16:22:29.704863 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] Network connectivity detected Nov 12 16:22:29.704953 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Nov 12 16:22:29.704953 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Nov 12 16:22:29.704953 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] Firefox workaround initialized Nov 12 16:22:29.704953 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmppuxztk8t] Nov 12 16:22:29.705827 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Nov 12 16:22:29.705827 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Nov 12 16:22:29.705827 osdx dnscrypt-proxy[187435]: [2025-11-12 16:22:29] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Nov 12 16:22:29.708993 osdx OSDxCLI[123608]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
56:0c:ce:92:86:a2:c2:f2:4d:21:1f:cb:ca:08:fe:90:c0:cf:cb:c6:61:a5:4f:b4:e6:0b:5f:ee:c7:b7:de:60
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 56:0c:ce:92:86:a2:c2:f2:4d:21:1f:cb:ca:08:fe:90:c0:cf:cb:c6:61:a5:4f:b4:e6:0b:5f:ee:c7:b7:de:60 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFYMzpKGosLyTSEfy8oI_pDAz8vGYaVPtOYLX-7Ht95gGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFYMzpKGosLyTSEfy8oI_pDAz8vGYaVPtOYLX-7Ht95gGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Nov 12 16:22:37.419682 osdx systemd-journald[1872]: Runtime Journal (/run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99) is 1.8M, max 13.8M, 11.9M free. Nov 12 16:22:37.421618 osdx systemd-journald[1872]: Received client request to rotate journal, rotating. Nov 12 16:22:37.421709 osdx systemd-journald[1872]: Vacuuming done, freed 0B of archived journals from /run/log/journal/04bdf7f70d714c0fb0ef3d9377529e99. Nov 12 16:22:37.434005 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system journal clear'. Nov 12 16:22:37.697032 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'system coredump delete all'. Nov 12 16:22:38.015590 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:38.095846 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Nov 12 16:22:38.261922 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Nov 12 16:22:38.376635 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:22:38.474857 osdx ubnt-cfgd[189160]: inactive Nov 12 16:22:38.497352 osdx INFO[189166]: FRR daemons did not change Nov 12 16:22:38.517618 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Nov 12 16:22:38.564464 osdx WARNING[189234]: No supported link modes on interface eth0 Nov 12 16:22:38.566084 osdx modulelauncher[189234]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Nov 12 16:22:38.566101 osdx modulelauncher[189234]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Nov 12 16:22:38.567608 osdx modulelauncher[189234]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Nov 12 16:22:38.567618 osdx modulelauncher[189234]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Nov 12 16:22:38.601962 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:22:38.614173 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:38.629763 osdx OSDxCLI[123608]: User 'admin' left the configuration menu. Nov 12 16:22:38.772803 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Nov 12 16:22:38.941279 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Nov 12 16:22:39.049364 osdx OSDxCLI[123608]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 56:0c:ce:92:86:a2:c2:f2:4d:21:1f:cb:ca:08:fe:90:c0:cf:cb:c6:61:a5:4f:b4:e6:0b:5f:ee:c7:b7:de:60 ip 10.215.168.1 port 8443'. Nov 12 16:22:39.179509 osdx OSDxCLI[123608]: User 'admin' entered the configuration menu. Nov 12 16:22:39.242604 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Nov 12 16:22:39.354562 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Nov 12 16:22:39.436105 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIFYMzpKGosLyTSEfy8oI_pDAz8vGYaVPtOYLX-7Ht95gGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Nov 12 16:22:39.583030 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'set service dns resolver local'. Nov 12 16:22:39.656915 osdx OSDxCLI[123608]: User 'admin' added a new cfg line: 'show working'. Nov 12 16:22:39.762600 osdx ubnt-cfgd[189326]: inactive Nov 12 16:22:39.789208 osdx INFO[189334]: FRR daemons did not change Nov 12 16:22:39.804413 osdx ca-certificates[189350]: Updating certificates in /etc/ssl/certs... Nov 12 16:22:40.417175 osdx ubnt-cfgd[190362]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Nov 12 16:22:40.426402 osdx ca-certificates[190368]: 1 added, 0 removed; done. Nov 12 16:22:40.430136 osdx ca-certificates[190374]: Running hooks in /etc/ca-certificates/update.d... Nov 12 16:22:40.433737 osdx ca-certificates[190376]: done. Nov 12 16:22:40.550107 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Nov 12 16:22:40.551748 osdx cfgd[1666]: [123608]Completed change to active configuration Nov 12 16:22:40.554985 osdx OSDxCLI[123608]: User 'admin' committed the configuration. Nov 12 16:22:40.575950 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] dnscrypt-proxy 2.0.45 Nov 12 16:22:40.575950 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] Network connectivity detected Nov 12 16:22:40.575950 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] Dropping privileges Nov 12 16:22:40.579308 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] Network connectivity detected Nov 12 16:22:40.579405 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Nov 12 16:22:40.579405 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Nov 12 16:22:40.579405 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] Firefox workaround initialized Nov 12 16:22:40.579405 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpq1c0v18b] Nov 12 16:22:40.580462 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Nov 12 16:22:40.580519 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Nov 12 16:22:40.580519 osdx dnscrypt-proxy[190433]: [2025-11-12 16:22:40] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Nov 12 16:22:40.610251 osdx OSDxCLI[123608]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16