Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 56d2dc9783a8c33a68b4b8938777fc5a91749b16b5b6117fa04686ce5ad9496d set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 17 21:46:51.311783 osdx systemd-journald[123332]: Runtime Journal (/run/log/journal/a189e667ab9f46898dbfc92a68a94f73) is 1.8M, max 13.8M, 11.9M free. Dec 17 21:46:51.314624 osdx systemd-journald[123332]: Received client request to rotate journal, rotating. Dec 17 21:46:51.314691 osdx systemd-journald[123332]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a189e667ab9f46898dbfc92a68a94f73. Dec 17 21:46:51.323151 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal clear'. Dec 17 21:46:51.555210 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system coredump delete all'. Dec 17 21:46:51.786967 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:46:51.930810 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 17 21:46:51.986980 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 17 21:46:52.105914 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:46:52.177836 osdx ubnt-cfgd[618731]: inactive Dec 17 21:46:52.268126 osdx INFO[618737]: FRR daemons did not change Dec 17 21:46:52.290630 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 17 21:46:52.337058 osdx WARNING[618805]: No supported link modes on interface eth0 Dec 17 21:46:52.338734 osdx modulelauncher[618805]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 17 21:46:52.338748 osdx modulelauncher[618805]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 17 21:46:52.340134 osdx modulelauncher[618805]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 17 21:46:52.340145 osdx modulelauncher[618805]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 17 21:46:52.382491 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:46:52.394562 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:46:52.419896 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:46:52.574095 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 17 21:46:52.654052 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'. Dec 17 21:46:52.841104 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:46:52.898248 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 17 21:46:52.993112 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 17 21:46:53.054985 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Dec 17 21:46:53.157658 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Dec 17 21:46:53.257906 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 56d2dc9783a8c33a68b4b8938777fc5a91749b16b5b6117fa04686ce5ad9496d'. Dec 17 21:46:53.313916 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 17 21:46:53.473632 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:46:53.564285 osdx ubnt-cfgd[618899]: inactive Dec 17 21:46:53.585765 osdx INFO[618907]: FRR daemons did not change Dec 17 21:46:53.600118 osdx ca-certificates[618923]: Updating certificates in /etc/ssl/certs... Dec 17 21:46:54.199032 osdx ubnt-cfgd[619935]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 17 21:46:54.209770 osdx ca-certificates[619941]: 1 added, 0 removed; done. Dec 17 21:46:54.213732 osdx ca-certificates[619947]: Running hooks in /etc/ca-certificates/update.d... Dec 17 21:46:54.217535 osdx ca-certificates[619949]: done. Dec 17 21:46:54.330985 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 17 21:46:54.332292 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:46:54.334801 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:46:54.349910 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:46:54.360024 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] dnscrypt-proxy 2.0.45 Dec 17 21:46:54.360281 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] Network connectivity detected Dec 17 21:46:54.360349 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] Dropping privileges Dec 17 21:46:54.362762 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] Network connectivity detected Dec 17 21:46:54.362817 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 17 21:46:54.362817 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 17 21:46:54.362817 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] Firefox workaround initialized Dec 17 21:46:54.362885 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpuea8qutz] Dec 17 21:46:54.508764 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'. Dec 17 21:46:54.541344 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] [RD] OK (DoH) - rtt: 121ms Dec 17 21:46:54.541344 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] Server with the lowest initial latency: RD (rtt: 121ms) Dec 17 21:46:54.541344 osdx dnscrypt-proxy[620006]: [2025-12-17 21:46:54] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Dec 17 21:47:02.348102 osdx systemd-journald[123332]: Runtime Journal (/run/log/journal/a189e667ab9f46898dbfc92a68a94f73) is 1.8M, max 13.8M, 11.9M free. Dec 17 21:47:02.351698 osdx systemd-journald[123332]: Received client request to rotate journal, rotating. Dec 17 21:47:02.351788 osdx systemd-journald[123332]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a189e667ab9f46898dbfc92a68a94f73. Dec 17 21:47:02.361694 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal clear'. Dec 17 21:47:02.605681 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system coredump delete all'. Dec 17 21:47:03.002048 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:03.144402 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 17 21:47:03.197882 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 17 21:47:03.356840 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:03.433233 osdx ubnt-cfgd[621739]: inactive Dec 17 21:47:03.454242 osdx INFO[621745]: FRR daemons did not change Dec 17 21:47:03.475687 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 17 21:47:03.525079 osdx WARNING[621813]: No supported link modes on interface eth0 Dec 17 21:47:03.526583 osdx modulelauncher[621813]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 17 21:47:03.526597 osdx modulelauncher[621813]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 17 21:47:03.528222 osdx modulelauncher[621813]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 17 21:47:03.528232 osdx modulelauncher[621813]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 17 21:47:03.564898 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:03.584368 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:03.624787 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:03.841268 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 17 21:47:03.992390 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'. Dec 17 21:47:04.200797 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:04.305615 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 17 21:47:04.555635 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:04.660853 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:04.731147 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:04.957030 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:05.047245 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 17 21:47:05.147821 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Dec 17 21:47:05.220067 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Dec 17 21:47:05.323059 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 17 21:47:05.416347 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show changes'. Dec 17 21:47:05.523129 osdx ubnt-cfgd[621914]: inactive Dec 17 21:47:05.544565 osdx INFO[621920]: FRR daemons did not change Dec 17 21:47:05.660152 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 17 21:47:05.661856 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:05.690894 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] dnscrypt-proxy 2.0.45 Dec 17 21:47:05.691193 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] Network connectivity detected Dec 17 21:47:05.691270 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] Dropping privileges Dec 17 21:47:05.693724 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] Network connectivity detected Dec 17 21:47:05.693790 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 17 21:47:05.693790 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 17 21:47:05.693790 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] Firefox workaround initialized Dec 17 21:47:05.693790 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpub4ohyjn] Dec 17 21:47:05.718483 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABC27vPkfert2Yxn2lH50rba": x509: certificate signed by unknown authority Dec 17 21:47:05.718483 osdx dnscrypt-proxy[621979]: [2025-12-17 21:47:05] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable Dec 17 21:47:06.445990 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:06.470049 osdx OSDxCLI[476020]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 17 21:47:17.321247 osdx systemd-journald[123332]: Runtime Journal (/run/log/journal/a189e667ab9f46898dbfc92a68a94f73) is 1.8M, max 13.8M, 11.9M free. Dec 17 21:47:17.324917 osdx systemd-journald[123332]: Received client request to rotate journal, rotating. Dec 17 21:47:17.324972 osdx systemd-journald[123332]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a189e667ab9f46898dbfc92a68a94f73. Dec 17 21:47:17.332267 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal clear'. Dec 17 21:47:17.665230 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system coredump delete all'. Dec 17 21:47:18.138427 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:18.239992 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 17 21:47:18.315004 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 17 21:47:18.413558 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:18.503576 osdx ubnt-cfgd[622230]: inactive Dec 17 21:47:18.527023 osdx INFO[622236]: FRR daemons did not change Dec 17 21:47:18.552931 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 17 21:47:18.606024 osdx WARNING[622304]: No supported link modes on interface eth0 Dec 17 21:47:18.607561 osdx modulelauncher[622304]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 17 21:47:18.607575 osdx modulelauncher[622304]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 17 21:47:18.608775 osdx modulelauncher[622304]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 17 21:47:18.608784 osdx modulelauncher[622304]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 17 21:47:18.648708 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:18.735647 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:18.755767 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:18.938165 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 17 21:47:19.056992 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'. Dec 17 21:47:19.184597 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:19.245884 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 17 21:47:19.345465 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:19.394574 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:19.457913 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:19.632028 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:19.708824 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 17 21:47:19.819915 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Dec 17 21:47:19.891018 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Dec 17 21:47:19.983221 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Dec 17 21:47:20.039011 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 17 21:47:20.210676 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show changes'. Dec 17 21:47:20.462571 osdx ubnt-cfgd[622406]: inactive Dec 17 21:47:20.486081 osdx INFO[622412]: FRR daemons did not change Dec 17 21:47:20.613414 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 17 21:47:20.614946 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:20.617859 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:20.639590 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] dnscrypt-proxy 2.0.45 Dec 17 21:47:20.639812 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] Network connectivity detected Dec 17 21:47:20.639916 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] Dropping privileges Dec 17 21:47:20.642645 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] Network connectivity detected Dec 17 21:47:20.642690 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 17 21:47:20.642690 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 17 21:47:20.642724 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] Firefox workaround initialized Dec 17 21:47:20.642724 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpt0b_t9n9] Dec 17 21:47:20.666683 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:20.804138 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] [RD] OK (DoH) - rtt: 114ms Dec 17 21:47:20.804138 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] Server with the lowest initial latency: RD (rtt: 114ms) Dec 17 21:47:20.804138 osdx dnscrypt-proxy[622471]: [2025-12-17 21:47:20] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Dec 17 21:47:20.807027 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 56d2dc9783a8c33a68b4b8938777fc5a91749b16b5b6117fa04686ce5ad9496d at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBW0tyXg6jDOmi0uJOHd_xakXSbFrW2EX-gRobOWtlJbQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBW0tyXg6jDOmi0uJOHd_xakXSbFrW2EX-gRobOWtlJbQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 17 21:47:29.292085 osdx systemd-journald[123332]: Runtime Journal (/run/log/journal/a189e667ab9f46898dbfc92a68a94f73) is 1.8M, max 13.8M, 11.9M free. Dec 17 21:47:29.293885 osdx systemd-journald[123332]: Received client request to rotate journal, rotating. Dec 17 21:47:29.293942 osdx systemd-journald[123332]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a189e667ab9f46898dbfc92a68a94f73. Dec 17 21:47:29.304608 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal clear'. Dec 17 21:47:29.517508 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system coredump delete all'. Dec 17 21:47:29.733744 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:29.851154 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 17 21:47:29.911662 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 17 21:47:30.014907 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:30.075725 osdx ubnt-cfgd[622730]: inactive Dec 17 21:47:30.097397 osdx INFO[622736]: FRR daemons did not change Dec 17 21:47:30.125892 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 17 21:47:30.175061 osdx WARNING[622804]: No supported link modes on interface eth0 Dec 17 21:47:30.176848 osdx modulelauncher[622804]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 17 21:47:30.176860 osdx modulelauncher[622804]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 17 21:47:30.178377 osdx modulelauncher[622804]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 17 21:47:30.178385 osdx modulelauncher[622804]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 17 21:47:30.216557 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:30.227861 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:30.260279 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:30.419083 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 17 21:47:30.491440 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'. Dec 17 21:47:30.635601 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 56d2dc9783a8c33a68b4b8938777fc5a91749b16b5b6117fa04686ce5ad9496d'. Dec 17 21:47:30.807766 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:30.876192 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 17 21:47:30.998883 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 17 21:47:31.068029 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBW0tyXg6jDOmi0uJOHd_xakXSbFrW2EX-gRobOWtlJbQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Dec 17 21:47:31.161558 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 17 21:47:31.251258 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:31.357721 osdx ubnt-cfgd[622899]: inactive Dec 17 21:47:31.383359 osdx INFO[622907]: FRR daemons did not change Dec 17 21:47:31.396600 osdx ca-certificates[622923]: Updating certificates in /etc/ssl/certs... Dec 17 21:47:31.993186 osdx ubnt-cfgd[623935]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 17 21:47:32.004378 osdx ca-certificates[623942]: 1 added, 0 removed; done. Dec 17 21:47:32.008169 osdx ca-certificates[623947]: Running hooks in /etc/ca-certificates/update.d... Dec 17 21:47:32.011552 osdx ca-certificates[623949]: done. Dec 17 21:47:32.146420 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 17 21:47:32.148697 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:32.151523 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:32.176915 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] dnscrypt-proxy 2.0.45 Dec 17 21:47:32.177145 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] Network connectivity detected Dec 17 21:47:32.177184 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] Dropping privileges Dec 17 21:47:32.179679 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] Network connectivity detected Dec 17 21:47:32.179726 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 17 21:47:32.179726 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 17 21:47:32.179726 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] Firefox workaround initialized Dec 17 21:47:32.179726 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpanf6rl5u] Dec 17 21:47:32.182387 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:32.350072 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] [RD] OK (DoH) - rtt: 113ms Dec 17 21:47:32.350072 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] Server with the lowest initial latency: RD (rtt: 113ms) Dec 17 21:47:32.350072 osdx dnscrypt-proxy[624006]: [2025-12-17 21:47:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Dec 17 21:47:32.357127 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
5e:38:f2:af:73:75:33:3e:3a:58:3e:d8:2c:7b:53:9f:19:66:d2:8c:f0:61:8d:a0:62:59:5d:34:e6:8e:a1:29
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '5e:38:f2:af:73:75:33:3e:3a:58:3e:d8:2c:7b:53:9f:19:66:d2:8c:f0:61:8d:a0:62:59:5d:34:e6:8e:a1:29' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Dec 17 21:47:40.319462 osdx systemd-journald[123332]: Runtime Journal (/run/log/journal/a189e667ab9f46898dbfc92a68a94f73) is 1.8M, max 13.8M, 11.9M free. Dec 17 21:47:40.322031 osdx systemd-journald[123332]: Received client request to rotate journal, rotating. Dec 17 21:47:40.322103 osdx systemd-journald[123332]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a189e667ab9f46898dbfc92a68a94f73. Dec 17 21:47:40.330527 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal clear'. Dec 17 21:47:40.559482 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system coredump delete all'. Dec 17 21:47:40.822123 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:40.908648 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 17 21:47:41.006163 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 17 21:47:41.125530 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:41.192553 osdx ubnt-cfgd[625737]: inactive Dec 17 21:47:41.213899 osdx INFO[625743]: FRR daemons did not change Dec 17 21:47:41.242039 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 17 21:47:41.291947 osdx WARNING[625811]: No supported link modes on interface eth0 Dec 17 21:47:41.293824 osdx modulelauncher[625811]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 17 21:47:41.293841 osdx modulelauncher[625811]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 17 21:47:41.295483 osdx modulelauncher[625811]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 17 21:47:41.295497 osdx modulelauncher[625811]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 17 21:47:41.342489 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:41.359157 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:41.403752 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:41.558253 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 17 21:47:41.649605 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'. Dec 17 21:47:41.760843 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Dec 17 21:47:41.952194 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:42.007109 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 17 21:47:42.098621 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 17 21:47:42.152685 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Dec 17 21:47:42.242181 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Dec 17 21:47:42.298484 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Dec 17 21:47:42.425338 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 5e:38:f2:af:73:75:33:3e:3a:58:3e:d8:2c:7b:53:9f:19:66:d2:8c:f0:61:8d:a0:62:59:5d:34:e6:8e:a1:29'. Dec 17 21:47:42.481771 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 17 21:47:42.590801 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:42.656309 osdx ubnt-cfgd[625908]: inactive Dec 17 21:47:42.679747 osdx INFO[625916]: FRR daemons did not change Dec 17 21:47:42.693144 osdx ca-certificates[625931]: Updating certificates in /etc/ssl/certs... Dec 17 21:47:43.281985 osdx ubnt-cfgd[626944]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 17 21:47:43.292375 osdx ca-certificates[626950]: 1 added, 0 removed; done. Dec 17 21:47:43.295419 osdx ca-certificates[626956]: Running hooks in /etc/ca-certificates/update.d... Dec 17 21:47:43.299282 osdx ca-certificates[626958]: done. Dec 17 21:47:43.406447 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 17 21:47:43.407911 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:43.410324 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:43.431005 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] dnscrypt-proxy 2.0.45 Dec 17 21:47:43.431283 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] Network connectivity detected Dec 17 21:47:43.431283 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] Dropping privileges Dec 17 21:47:43.433836 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] Network connectivity detected Dec 17 21:47:43.433897 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 17 21:47:43.433897 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 17 21:47:43.433897 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] Firefox workaround initialized Dec 17 21:47:43.433897 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpeij3kkyu] Dec 17 21:47:43.434776 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Dec 17 21:47:43.434815 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Dec 17 21:47:43.434815 osdx dnscrypt-proxy[627015]: [2025-12-17 21:47:43] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Dec 17 21:47:43.455741 osdx OSDxCLI[476020]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
5e:38:f2:af:73:75:33:3e:3a:58:3e:d8:2c:7b:53:9f:19:66:d2:8c:f0:61:8d:a0:62:59:5d:34:e6:8e:a1:29
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 5e:38:f2:af:73:75:33:3e:3a:58:3e:d8:2c:7b:53:9f:19:66:d2:8c:f0:61:8d:a0:62:59:5d:34:e6:8e:a1:29 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF448q9zdTM-Olg-2Cx7U58ZZtKM8GGNoGJZXTTmjqEpGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF448q9zdTM-Olg-2Cx7U58ZZtKM8GGNoGJZXTTmjqEpGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Dec 17 21:47:48.000247 osdx systemd-timedated[612334]: Changed local time to Wed 2025-12-17 21:47:48 UTC Dec 17 21:47:48.001886 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'set date 2025-12-17 21:47:48'. Dec 17 21:47:48.002296 osdx systemd-journald[123332]: Time jumped backwards, rotating. Dec 17 21:47:48.311350 osdx systemd-journald[123332]: Runtime Journal (/run/log/journal/a189e667ab9f46898dbfc92a68a94f73) is 1.8M, max 13.8M, 11.9M free. Dec 17 21:47:48.314313 osdx systemd-journald[123332]: Received client request to rotate journal, rotating. Dec 17 21:47:48.314406 osdx systemd-journald[123332]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a189e667ab9f46898dbfc92a68a94f73. Dec 17 21:47:48.323513 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal clear'. Dec 17 21:47:48.646070 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system coredump delete all'. Dec 17 21:47:48.968506 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:49.072562 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 17 21:47:49.157299 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 17 21:47:49.306971 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:49.398589 osdx ubnt-cfgd[628741]: inactive Dec 17 21:47:49.423200 osdx INFO[628747]: FRR daemons did not change Dec 17 21:47:49.446315 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 17 21:47:49.493374 osdx WARNING[628815]: No supported link modes on interface eth0 Dec 17 21:47:49.495300 osdx modulelauncher[628815]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 17 21:47:49.495315 osdx modulelauncher[628815]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 17 21:47:49.496828 osdx modulelauncher[628815]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 17 21:47:49.496837 osdx modulelauncher[628815]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 17 21:47:49.537866 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:49.552547 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:49.570044 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:49.730603 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 17 21:47:49.811938 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'system journal show | cat'. Dec 17 21:47:49.966216 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Dec 17 21:47:50.076781 osdx OSDxCLI[476020]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 5e:38:f2:af:73:75:33:3e:3a:58:3e:d8:2c:7b:53:9f:19:66:d2:8c:f0:61:8d:a0:62:59:5d:34:e6:8e:a1:29 ip 10.215.168.1 port 8443'. Dec 17 21:47:50.280685 osdx OSDxCLI[476020]: User 'admin' entered the configuration menu. Dec 17 21:47:50.381664 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 17 21:47:50.504672 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 17 21:47:50.579630 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF448q9zdTM-Olg-2Cx7U58ZZtKM8GGNoGJZXTTmjqEpGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Dec 17 21:47:50.681468 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 17 21:47:50.765470 osdx OSDxCLI[476020]: User 'admin' added a new cfg line: 'show working'. Dec 17 21:47:50.866113 osdx ubnt-cfgd[628912]: inactive Dec 17 21:47:50.892693 osdx INFO[628920]: FRR daemons did not change Dec 17 21:47:50.909837 osdx ca-certificates[628936]: Updating certificates in /etc/ssl/certs... Dec 17 21:47:51.562552 osdx ubnt-cfgd[629948]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 17 21:47:51.571955 osdx ca-certificates[629953]: 1 added, 0 removed; done. Dec 17 21:47:51.576080 osdx ca-certificates[629960]: Running hooks in /etc/ca-certificates/update.d... Dec 17 21:47:51.580339 osdx ca-certificates[629962]: done. Dec 17 21:47:51.702779 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 17 21:47:51.704239 osdx cfgd[1460]: [476020]Completed change to active configuration Dec 17 21:47:51.706604 osdx OSDxCLI[476020]: User 'admin' committed the configuration. Dec 17 21:47:51.723008 osdx OSDxCLI[476020]: User 'admin' left the configuration menu. Dec 17 21:47:51.723515 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] dnscrypt-proxy 2.0.45 Dec 17 21:47:51.723515 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] Network connectivity detected Dec 17 21:47:51.723708 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] Dropping privileges Dec 17 21:47:51.726808 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] Network connectivity detected Dec 17 21:47:51.726880 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 17 21:47:51.726880 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 17 21:47:51.726880 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] Firefox workaround initialized Dec 17 21:47:51.726880 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpdmlxg86u] Dec 17 21:47:51.727810 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Dec 17 21:47:51.727810 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Dec 17 21:47:51.727810 osdx dnscrypt-proxy[630019]: [2025-12-17 21:47:51] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16