Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash f012756fda3a0f7b545bee800131852f93b004603c72fb7b24f62cc68bdd865c set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:21:57.295107 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:21:57.295573 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:21:57.295635 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:21:57.305197 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:57.508051 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:57.763731 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:57.860185 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:21:57.971152 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:58.078397 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:58.188972 osdx ubnt-cfgd[48085]: inactive Apr 06 14:21:58.207709 osdx INFO[48091]: FRR daemons did not change Apr 06 14:21:58.227574 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:58.275220 osdx WARNING[48159]: No supported link modes on interface eth0 Apr 06 14:21:58.276665 osdx modulelauncher[48159]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:58.276682 osdx modulelauncher[48159]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:58.277788 osdx modulelauncher[48159]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:58.277796 osdx modulelauncher[48159]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:58.312760 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:58.323529 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:58.339638 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:21:58.478392 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:21:58.549235 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:21:58.715756 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:58.789515 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 06 14:21:58.885413 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:21:58.946525 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Apr 06 14:21:59.045927 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Apr 06 14:21:59.144435 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash f012756fda3a0f7b545bee800131852f93b004603c72fb7b24f62cc68bdd865c'. Apr 06 14:21:59.220479 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:21:59.399768 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:59.468614 osdx ubnt-cfgd[48253]: inactive Apr 06 14:21:59.488670 osdx INFO[48261]: FRR daemons did not change Apr 06 14:21:59.500775 osdx ca-certificates[48277]: Updating certificates in /etc/ssl/certs... Apr 06 14:22:00.024109 osdx ubnt-cfgd[49289]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:22:00.033380 osdx ca-certificates[49295]: 1 added, 0 removed; done. Apr 06 14:22:00.037180 osdx ca-certificates[49301]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:22:00.040779 osdx ca-certificates[49303]: done. Apr 06 14:22:00.143953 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:22:00.145143 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:00.147449 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:00.162372 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:22:00.162372 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] Network connectivity detected Apr 06 14:22:00.162598 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] Dropping privileges Apr 06 14:22:00.164661 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] Network connectivity detected Apr 06 14:22:00.164721 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:22:00.164721 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:22:00.164721 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] Firefox workaround initialized Apr 06 14:22:00.164721 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] Loading the set of cloaking rules from [/tmp/tmplvg493v5] Apr 06 14:22:00.165295 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:00.203831 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] [RD] OK (DoH) - rtt: 10ms Apr 06 14:22:00.203831 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] Server with the lowest initial latency: RD (rtt: 10ms) Apr 06 14:22:00.203831 osdx dnscrypt-proxy[49360]: [2026-04-06 14:22:00] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Apr 06 14:22:05.303386 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:22:05.304444 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:22:05.304498 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:22:05.313171 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:22:05.515115 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:22:05.827315 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:05.903257 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:22:05.978013 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:22:06.037077 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:06.128224 osdx ubnt-cfgd[51088]: inactive Apr 06 14:22:06.145656 osdx INFO[51094]: FRR daemons did not change Apr 06 14:22:06.164455 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:22:06.211029 osdx WARNING[51162]: No supported link modes on interface eth0 Apr 06 14:22:06.212416 osdx modulelauncher[51162]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:22:06.212444 osdx modulelauncher[51162]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:22:06.214044 osdx modulelauncher[51162]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:22:06.214059 osdx modulelauncher[51162]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:22:06.250291 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:06.261424 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:06.303394 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:06.429519 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:22:06.504278 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:22:06.648984 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:06.706823 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:22:06.813359 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:06.864047 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:06.924972 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:07.082900 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:07.140536 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:22:07.240296 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Apr 06 14:22:07.304662 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Apr 06 14:22:07.404107 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:22:07.471618 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show changes'. Apr 06 14:22:07.576417 osdx ubnt-cfgd[51263]: inactive Apr 06 14:22:07.592901 osdx INFO[51269]: FRR daemons did not change Apr 06 14:22:07.684875 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:22:07.686972 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:07.692341 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:07.727699 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:22:07.728033 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] Network connectivity detected Apr 06 14:22:07.728263 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] Dropping privileges Apr 06 14:22:07.728844 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:07.730689 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] Network connectivity detected Apr 06 14:22:07.730743 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:22:07.730743 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:22:07.730743 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] Firefox workaround initialized Apr 06 14:22:07.730743 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpnz3_hjme] Apr 06 14:22:07.754558 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABADXXsHx2vblEImFKMR6p9T": x509: certificate signed by unknown authority Apr 06 14:22:07.754558 osdx dnscrypt-proxy[51328]: [2026-04-06 14:22:07] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:22:17.297239 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:22:17.298588 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:22:17.298657 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:22:17.308451 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:22:17.532680 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:22:17.759497 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:17.831780 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:22:17.913035 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:22:17.978142 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:18.067770 osdx ubnt-cfgd[51581]: inactive Apr 06 14:22:18.087053 osdx INFO[51587]: FRR daemons did not change Apr 06 14:22:18.110616 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:22:18.149022 osdx WARNING[51655]: No supported link modes on interface eth0 Apr 06 14:22:18.150669 osdx modulelauncher[51655]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:22:18.150685 osdx modulelauncher[51655]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:22:18.151736 osdx modulelauncher[51655]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:22:18.151743 osdx modulelauncher[51655]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:22:18.190596 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:18.204418 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:18.220703 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:18.364748 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:22:18.460675 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:22:18.619661 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:18.705767 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:22:18.781223 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:18.888292 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:18.953130 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:19.112573 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:19.178952 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:22:19.277400 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Apr 06 14:22:19.331929 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Apr 06 14:22:19.421050 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Apr 06 14:22:19.476022 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:22:19.615845 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show changes'. Apr 06 14:22:19.677179 osdx ubnt-cfgd[51757]: inactive Apr 06 14:22:19.695557 osdx INFO[51763]: FRR daemons did not change Apr 06 14:22:19.786914 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:22:19.788071 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:19.790258 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:19.806939 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:22:19.807180 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] Network connectivity detected Apr 06 14:22:19.807180 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] Dropping privileges Apr 06 14:22:19.809374 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] Network connectivity detected Apr 06 14:22:19.809442 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:22:19.809442 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:22:19.809442 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] Firefox workaround initialized Apr 06 14:22:19.809442 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpmj2y2bme] Apr 06 14:22:19.834298 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] [RD] OK (DoH) - rtt: 11ms Apr 06 14:22:19.834298 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] Server with the lowest initial latency: RD (rtt: 11ms) Apr 06 14:22:19.834298 osdx dnscrypt-proxy[51822]: [2026-04-06 14:22:19] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Apr 06 14:22:19.859756 osdx OSDxCLI[10275]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash f012756fda3a0f7b545bee800131852f93b004603c72fb7b24f62cc68bdd865c at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDwEnVv2joPe1Rb7oABMYUvk7AEYDxy-3sk9izGi92GXApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDwEnVv2joPe1Rb7oABMYUvk7AEYDxy-3sk9izGi92GXApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:22:24.279403 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:22:24.282567 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:22:24.282635 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:22:24.290073 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:22:24.518073 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:22:24.783411 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:24.867574 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:22:24.948017 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:22:25.014020 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:25.128014 osdx ubnt-cfgd[52069]: inactive Apr 06 14:22:25.147156 osdx INFO[52075]: FRR daemons did not change Apr 06 14:22:25.170575 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:22:25.211740 osdx WARNING[52143]: No supported link modes on interface eth0 Apr 06 14:22:25.213496 osdx modulelauncher[52143]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:22:25.213516 osdx modulelauncher[52143]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:22:25.214980 osdx modulelauncher[52143]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:22:25.214988 osdx modulelauncher[52143]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:22:25.248911 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:25.263538 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:25.316847 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:25.417968 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:22:25.486448 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:22:25.643062 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash f012756fda3a0f7b545bee800131852f93b004603c72fb7b24f62cc68bdd865c'. Apr 06 14:22:25.785947 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:25.849791 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 06 14:22:25.943865 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:22:26.001704 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDwEnVv2joPe1Rb7oABMYUvk7AEYDxy-3sk9izGi92GXApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Apr 06 14:22:26.116438 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:22:26.204702 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:26.299964 osdx ubnt-cfgd[52238]: inactive Apr 06 14:22:26.318114 osdx INFO[52246]: FRR daemons did not change Apr 06 14:22:26.331233 osdx ca-certificates[52262]: Updating certificates in /etc/ssl/certs... Apr 06 14:22:26.896457 osdx ubnt-cfgd[53274]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:22:26.903959 osdx ca-certificates[53279]: 1 added, 0 removed; done. Apr 06 14:22:26.906780 osdx ca-certificates[53286]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:22:26.909530 osdx ca-certificates[53288]: done. Apr 06 14:22:26.994852 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:22:26.995859 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:26.997727 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:27.016061 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:22:27.016300 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] Network connectivity detected Apr 06 14:22:27.016300 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] Dropping privileges Apr 06 14:22:27.018389 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] Network connectivity detected Apr 06 14:22:27.018446 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:22:27.018446 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:22:27.018446 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] Firefox workaround initialized Apr 06 14:22:27.018446 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpdp3epb5e] Apr 06 14:22:27.024311 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:27.052821 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] [RD] OK (DoH) - rtt: 12ms Apr 06 14:22:27.052821 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] Server with the lowest initial latency: RD (rtt: 12ms) Apr 06 14:22:27.052821 osdx dnscrypt-proxy[53345]: [2026-04-06 14:22:27] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Apr 06 14:22:32.279891 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:22:32.280916 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:22:32.280975 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:22:32.290473 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:22:32.490883 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:22:32.704112 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:32.824982 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:22:32.878919 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:22:33.001500 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:33.069833 osdx ubnt-cfgd[55071]: inactive Apr 06 14:22:33.088718 osdx INFO[55077]: FRR daemons did not change Apr 06 14:22:33.108927 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:22:33.150028 osdx WARNING[55145]: No supported link modes on interface eth0 Apr 06 14:22:33.151566 osdx modulelauncher[55145]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:22:33.151582 osdx modulelauncher[55145]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:22:33.153010 osdx modulelauncher[55145]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:22:33.153019 osdx modulelauncher[55145]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:22:33.189665 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:33.200593 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:33.215277 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:33.355237 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:22:33.422688 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:22:33.536783 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Apr 06 14:22:33.679251 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:33.759877 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 06 14:22:33.816904 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:22:33.928655 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Apr 06 14:22:33.993333 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Apr 06 14:22:34.093979 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Apr 06 14:22:34.153877 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13'. Apr 06 14:22:34.242720 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:22:34.314978 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:34.413973 osdx ubnt-cfgd[55242]: inactive Apr 06 14:22:34.438279 osdx INFO[55250]: FRR daemons did not change Apr 06 14:22:34.452214 osdx ca-certificates[55266]: Updating certificates in /etc/ssl/certs... Apr 06 14:22:34.982336 osdx ubnt-cfgd[56278]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:22:34.990354 osdx ca-certificates[56284]: 1 added, 0 removed; done. Apr 06 14:22:34.993307 osdx ca-certificates[56290]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:22:34.996297 osdx ca-certificates[56292]: done. Apr 06 14:22:35.109357 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:22:35.110660 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:35.113138 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:35.127967 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:22:35.128213 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] Network connectivity detected Apr 06 14:22:35.128213 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] Dropping privileges Apr 06 14:22:35.128976 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:35.130585 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] Network connectivity detected Apr 06 14:22:35.130648 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:22:35.130648 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:22:35.130648 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] Firefox workaround initialized Apr 06 14:22:35.130648 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] Loading the set of cloaking rules from [/tmp/tmphg2t6dlz] Apr 06 14:22:35.131336 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Apr 06 14:22:35.131374 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Apr 06 14:22:35.131374 osdx dnscrypt-proxy[56349]: [2026-04-06 14:22:35] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGyO3vd2ko0l0Wc58N8mJGQavVObfWvmVGXCN-j3XcsTGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGyO3vd2ko0l0Wc58N8mJGQavVObfWvmVGXCN-j3XcsTGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Apr 06 14:22:40.298489 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:22:40.301421 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:22:40.301476 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:22:40.309291 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:22:40.515146 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:22:40.757843 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:40.830916 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:22:40.907306 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:22:40.996463 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:41.053482 osdx ubnt-cfgd[58074]: inactive Apr 06 14:22:41.072211 osdx INFO[58080]: FRR daemons did not change Apr 06 14:22:41.097429 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:22:41.137342 osdx WARNING[58148]: No supported link modes on interface eth0 Apr 06 14:22:41.138729 osdx modulelauncher[58148]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:22:41.138752 osdx modulelauncher[58148]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:22:41.139850 osdx modulelauncher[58148]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:22:41.139859 osdx modulelauncher[58148]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:22:41.178354 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:41.206191 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:41.264876 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:41.410970 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:22:41.478023 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:22:41.617646 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Apr 06 14:22:41.721660 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13 ip 10.215.168.1 port 8443'. Apr 06 14:22:41.901715 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:22:41.973681 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 06 14:22:42.081386 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:22:42.151976 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGyO3vd2ko0l0Wc58N8mJGQavVObfWvmVGXCN-j3XcsTGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Apr 06 14:22:42.243562 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:22:42.332600 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:22:42.422885 osdx ubnt-cfgd[58245]: inactive Apr 06 14:22:42.442210 osdx INFO[58253]: FRR daemons did not change Apr 06 14:22:42.455132 osdx ca-certificates[58269]: Updating certificates in /etc/ssl/certs... Apr 06 14:22:42.966853 osdx ubnt-cfgd[59281]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:22:42.973966 osdx ca-certificates[59287]: 1 added, 0 removed; done. Apr 06 14:22:42.976865 osdx ca-certificates[59293]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:22:42.980323 osdx ca-certificates[59295]: done. Apr 06 14:22:43.097737 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:22:43.098782 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:22:43.100876 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:22:43.115909 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:22:43.116809 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:22:43.116988 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] Network connectivity detected Apr 06 14:22:43.117082 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] Dropping privileges Apr 06 14:22:43.119322 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] Network connectivity detected Apr 06 14:22:43.119380 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:22:43.119380 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:22:43.119380 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] Firefox workaround initialized Apr 06 14:22:43.119380 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp9jba3r37] Apr 06 14:22:43.120051 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Apr 06 14:22:43.120051 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Apr 06 14:22:43.120051 osdx dnscrypt-proxy[59352]: [2026-04-06 14:22:43] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16