Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash f012756fda3a0f7b545bee800131852f93b004603c72fb7b24f62cc68bdd865c set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:21:00.287602 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.9M, max 13.8M, 11.8M free. Apr 06 14:21:00.288542 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:21:00.288610 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:21:00.297239 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:00.539484 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:00.794257 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:00.876233 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:21:00.964088 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:01.025846 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:01.118322 osdx ubnt-cfgd[35698]: inactive Apr 06 14:21:01.138470 osdx INFO[35704]: FRR daemons did not change Apr 06 14:21:01.168554 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:01.216852 osdx WARNING[35772]: No supported link modes on interface eth0 Apr 06 14:21:01.218317 osdx modulelauncher[35772]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:01.218331 osdx modulelauncher[35772]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:01.219856 osdx modulelauncher[35772]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:01.219865 osdx modulelauncher[35772]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:01.253681 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:01.265031 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:01.309056 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:21:01.500281 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:21:01.571721 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:21:02.631707 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:02.694517 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 06 14:21:02.807110 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:21:02.872891 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Apr 06 14:21:02.994834 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Apr 06 14:21:03.067391 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash f012756fda3a0f7b545bee800131852f93b004603c72fb7b24f62cc68bdd865c'. Apr 06 14:21:03.202300 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Apr 06 14:21:03.275060 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Apr 06 14:21:03.327351 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:21:03.424676 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Apr 06 14:21:03.511948 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:03.641212 osdx ubnt-cfgd[35872]: inactive Apr 06 14:21:03.661018 osdx INFO[35880]: FRR daemons did not change Apr 06 14:21:03.675502 osdx ca-certificates[35895]: Updating certificates in /etc/ssl/certs... Apr 06 14:21:04.166374 osdx ubnt-cfgd[36908]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:21:04.175539 osdx ca-certificates[36914]: 1 added, 0 removed; done. Apr 06 14:21:04.178362 osdx ca-certificates[36920]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:21:04.181028 osdx ca-certificates[36922]: done. Apr 06 14:21:04.312904 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:21:04.314285 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:04.316290 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:04.330619 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:21:04.331708 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:21:04.331882 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Network connectivity detected Apr 06 14:21:04.332026 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Dropping privileges Apr 06 14:21:04.334045 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Network connectivity detected Apr 06 14:21:04.334095 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:21:04.334095 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:21:04.334095 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Apr 06 14:21:04.334095 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Firefox workaround initialized Apr 06 14:21:04.334095 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp24a3_pnu] Apr 06 14:21:04.366748 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] [RD] OK (DoH) - rtt: 10ms Apr 06 14:21:04.366748 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] Server with the lowest initial latency: RD (rtt: 10ms) Apr 06 14:21:04.366748 osdx dnscrypt-proxy[36979]: [2026-04-06 14:21:04] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 92262f4a1d0dfe217d7d52734a42ff61638b454a0dbd2f50d5cb38dbdb960cce set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:21:00.270652 osdx systemd-journald[1758]: Runtime Journal (/run/log/journal/862cb27bfeac4475836e13336dc829f0) is 952.0K, max 6.5M, 5.5M free. Apr 06 14:21:00.272090 osdx systemd-journald[1758]: Received client request to rotate journal, rotating. Apr 06 14:21:00.272136 osdx systemd-journald[1758]: Vacuuming done, freed 0B of archived journals from /run/log/journal/862cb27bfeac4475836e13336dc829f0. Apr 06 14:21:00.279993 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:00.519717 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:01.612518 osdx OSDxCLI[2067]: User 'admin' entered the configuration menu. Apr 06 14:21:01.699366 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Apr 06 14:21:01.772321 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:01.862889 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service ssh'. Apr 06 14:21:01.925700 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:02.015723 osdx ubnt-cfgd[22484]: inactive Apr 06 14:21:02.042433 osdx INFO[22496]: FRR daemons did not change Apr 06 14:21:02.064109 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:02.113721 osdx WARNING[22564]: No supported link modes on interface eth0 Apr 06 14:21:02.115036 osdx modulelauncher[22564]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:02.115052 osdx modulelauncher[22564]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:02.116173 osdx modulelauncher[22564]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:02.116220 osdx modulelauncher[22564]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:02.224463 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Apr 06 14:21:02.235973 osdx sshd[22615]: Server listening on 0.0.0.0 port 22. Apr 06 14:21:02.236000 osdx sshd[22615]: Server listening on :: port 22. Apr 06 14:21:02.236113 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Apr 06 14:21:02.261676 osdx cfgd[1457]: [2067]Completed change to active configuration Apr 06 14:21:02.276302 osdx OSDxCLI[2067]: User 'admin' committed the configuration. Apr 06 14:21:02.305311 osdx OSDxCLI[2067]: User 'admin' left the configuration menu. Apr 06 14:21:02.442079 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Apr 06 14:21:04.548842 osdx OSDxCLI[2067]: User 'admin' entered the configuration menu. Apr 06 14:21:04.662571 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Apr 06 14:21:04.740851 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Apr 06 14:21:04.858856 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Apr 06 14:21:04.965291 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Apr 06 14:21:05.026364 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Apr 06 14:21:05.114341 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Apr 06 14:21:05.176062 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 92262f4a1d0dfe217d7d52734a42ff61638b454a0dbd2f50d5cb38dbdb960cce'. Apr 06 14:21:05.273135 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:05.339651 osdx ubnt-cfgd[22670]: inactive Apr 06 14:21:05.365246 osdx INFO[22678]: FRR daemons did not change Apr 06 14:21:05.394190 osdx ca-certificates[22694]: Updating certificates in /etc/ssl/certs... Apr 06 14:21:05.951979 osdx ubnt-cfgd[23706]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:21:05.969899 osdx ca-certificates[23710]: 1 added, 0 removed; done. Apr 06 14:21:05.972986 osdx ca-certificates[23718]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:21:05.975643 osdx ca-certificates[23720]: done. Apr 06 14:21:06.048551 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:21:06.050432 osdx cfgd[1457]: [2067]Completed change to active configuration Apr 06 14:21:06.052861 osdx OSDxCLI[2067]: User 'admin' committed the configuration. Apr 06 14:21:06.069627 osdx OSDxCLI[2067]: User 'admin' left the configuration menu. Apr 06 14:21:06.227116 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:21:06.262876 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:21:06.263125 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] Network connectivity detected Apr 06 14:21:06.263125 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] Dropping privileges Apr 06 14:21:06.267807 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] Network connectivity detected Apr 06 14:21:06.267861 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:21:06.267861 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:21:06.267861 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] Firefox workaround initialized Apr 06 14:21:06.267861 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp_9zor4_1] Apr 06 14:21:06.373474 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] [DUT0] OK (DoH) - rtt: 11ms Apr 06 14:21:06.373474 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 11ms) Apr 06 14:21:06.373474 osdx dnscrypt-proxy[23727]: [2026-04-06 14:21:06] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash f012756fda3a0f7b545bee800131852f93b004603c72fb7b24f62cc68bdd865c at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDwEnVv2joPe1Rb7oABMYUvk7AEYDxy-3sk9izGi92GXApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDwEnVv2joPe1Rb7oABMYUvk7AEYDxy-3sk9izGi92GXApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:21:14.324869 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:21:14.327952 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:21:14.328003 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:21:14.335380 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:14.542278 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:14.789247 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:14.863566 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:21:14.973717 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:15.061472 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:15.149800 osdx ubnt-cfgd[38704]: inactive Apr 06 14:21:15.167967 osdx INFO[38710]: FRR daemons did not change Apr 06 14:21:15.187968 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:15.228016 osdx WARNING[38778]: No supported link modes on interface eth0 Apr 06 14:21:15.229382 osdx modulelauncher[38778]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:15.229396 osdx modulelauncher[38778]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:15.230471 osdx modulelauncher[38778]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:15.230480 osdx modulelauncher[38778]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:15.265810 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:15.278409 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:15.301623 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:21:15.442452 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:21:15.524965 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:21:16.642607 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash f012756fda3a0f7b545bee800131852f93b004603c72fb7b24f62cc68bdd865c'. Apr 06 14:21:16.802615 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:16.885139 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 06 14:21:16.992578 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:21:17.064067 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDwEnVv2joPe1Rb7oABMYUvk7AEYDxy-3sk9izGi92GXApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Apr 06 14:21:17.153443 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Apr 06 14:21:17.229226 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Apr 06 14:21:17.355255 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Apr 06 14:21:17.448099 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:21:17.515446 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Apr 06 14:21:17.623995 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:17.703537 osdx ubnt-cfgd[38877]: inactive Apr 06 14:21:17.721489 osdx INFO[38885]: FRR daemons did not change Apr 06 14:21:17.734582 osdx ca-certificates[38901]: Updating certificates in /etc/ssl/certs... Apr 06 14:21:18.242564 osdx ubnt-cfgd[39913]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:21:18.251271 osdx ca-certificates[39919]: 1 added, 0 removed; done. Apr 06 14:21:18.255049 osdx ca-certificates[39925]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:21:18.258035 osdx ca-certificates[39927]: done. Apr 06 14:21:18.372331 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:21:18.373510 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:18.375822 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:18.392641 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:21:18.392884 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Network connectivity detected Apr 06 14:21:18.392988 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Dropping privileges Apr 06 14:21:18.395865 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Network connectivity detected Apr 06 14:21:18.395923 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:21:18.395923 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:21:18.395923 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Apr 06 14:21:18.395923 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Firefox workaround initialized Apr 06 14:21:18.395923 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpw28dfgaz] Apr 06 14:21:18.422950 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] [RD] OK (DoH) - rtt: 9ms Apr 06 14:21:18.422950 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] Server with the lowest initial latency: RD (rtt: 9ms) Apr 06 14:21:18.422950 osdx dnscrypt-proxy[39987]: [2026-04-06 14:21:18] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Apr 06 14:21:18.428601 osdx OSDxCLI[10275]: User 'admin' left the configuration menu.
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 92262f4a1d0dfe217d7d52734a42ff61638b454a0dbd2f50d5cb38dbdb960cce at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgkiYvSh0N_iF9fVJzSkL_YWOLRUoNvS9Q1cs429uWDM4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgkiYvSh0N_iF9fVJzSkL_YWOLRUoNvS9Q1cs429uWDM4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:21:15.266037 osdx systemd-journald[1758]: Runtime Journal (/run/log/journal/862cb27bfeac4475836e13336dc829f0) is 932.0K, max 6.5M, 5.6M free. Apr 06 14:21:15.267867 osdx systemd-journald[1758]: Received client request to rotate journal, rotating. Apr 06 14:21:15.267926 osdx systemd-journald[1758]: Vacuuming done, freed 0B of archived journals from /run/log/journal/862cb27bfeac4475836e13336dc829f0. Apr 06 14:21:15.276080 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:15.468492 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:16.526701 osdx OSDxCLI[2067]: User 'admin' entered the configuration menu. Apr 06 14:21:16.617779 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Apr 06 14:21:16.684903 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:16.792421 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service ssh'. Apr 06 14:21:16.859953 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:16.971300 osdx ubnt-cfgd[25427]: inactive Apr 06 14:21:16.996044 osdx INFO[25439]: FRR daemons did not change Apr 06 14:21:17.019804 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:17.064329 osdx WARNING[25507]: No supported link modes on interface eth0 Apr 06 14:21:17.065725 osdx modulelauncher[25507]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:17.065740 osdx modulelauncher[25507]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:17.067311 osdx modulelauncher[25507]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:17.067325 osdx modulelauncher[25507]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:17.192110 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Apr 06 14:21:17.206433 osdx sshd[25558]: Server listening on 0.0.0.0 port 22. Apr 06 14:21:17.206465 osdx sshd[25558]: Server listening on :: port 22. Apr 06 14:21:17.206563 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Apr 06 14:21:17.233052 osdx cfgd[1457]: [2067]Completed change to active configuration Apr 06 14:21:17.244953 osdx OSDxCLI[2067]: User 'admin' committed the configuration. Apr 06 14:21:17.261630 osdx OSDxCLI[2067]: User 'admin' left the configuration menu. Apr 06 14:21:17.406010 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Apr 06 14:21:19.593941 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 92262f4a1d0dfe217d7d52734a42ff61638b454a0dbd2f50d5cb38dbdb960cce'. Apr 06 14:21:19.750564 osdx OSDxCLI[2067]: User 'admin' entered the configuration menu. Apr 06 14:21:19.814180 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Apr 06 14:21:19.901780 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Apr 06 14:21:19.973759 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Apr 06 14:21:20.069967 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgkiYvSh0N_iF9fVJzSkL_YWOLRUoNvS9Q1cs429uWDM4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Apr 06 14:21:20.128969 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:20.224266 osdx ubnt-cfgd[25613]: inactive Apr 06 14:21:20.244451 osdx INFO[25621]: FRR daemons did not change Apr 06 14:21:20.258677 osdx ca-certificates[25637]: Updating certificates in /etc/ssl/certs... Apr 06 14:21:20.756325 osdx ubnt-cfgd[26649]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:21:20.766324 osdx ca-certificates[26655]: 1 added, 0 removed; done. Apr 06 14:21:20.770023 osdx ca-certificates[26661]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:21:20.773507 osdx ca-certificates[26663]: done. Apr 06 14:21:20.840155 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:21:20.841749 osdx cfgd[1457]: [2067]Completed change to active configuration Apr 06 14:21:20.844284 osdx OSDxCLI[2067]: User 'admin' committed the configuration. Apr 06 14:21:20.859543 osdx OSDxCLI[2067]: User 'admin' left the configuration menu. Apr 06 14:21:20.890656 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:21:20.890910 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] Network connectivity detected Apr 06 14:21:20.891028 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] Dropping privileges Apr 06 14:21:20.893722 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] Network connectivity detected Apr 06 14:21:20.893775 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:21:20.893775 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:21:20.893775 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] Firefox workaround initialized Apr 06 14:21:20.893775 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpxea9vqwa] Apr 06 14:21:20.979078 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] [DUT0] OK (DoH) - rtt: 13ms Apr 06 14:21:20.979078 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 13ms) Apr 06 14:21:20.979078 osdx dnscrypt-proxy[26670]: [2026-04-06 14:21:20] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Apr 06 14:21:26.358318 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:21:26.359986 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:21:26.360057 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:21:26.368653 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:26.574540 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:26.829047 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:26.919813 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:21:26.993122 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:27.112735 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:27.192046 osdx ubnt-cfgd[41713]: inactive Apr 06 14:21:27.212542 osdx INFO[41719]: FRR daemons did not change Apr 06 14:21:27.235988 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:27.279005 osdx WARNING[41787]: No supported link modes on interface eth0 Apr 06 14:21:27.280377 osdx modulelauncher[41787]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:27.280388 osdx modulelauncher[41787]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:27.281453 osdx modulelauncher[41787]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:27.281460 osdx modulelauncher[41787]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:27.315562 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:27.329568 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:27.350983 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:21:27.485175 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:21:27.561517 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:21:28.737903 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Apr 06 14:21:28.874585 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:28.933186 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 06 14:21:29.033848 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:21:29.093303 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Apr 06 14:21:29.185953 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Apr 06 14:21:29.243616 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Apr 06 14:21:29.339799 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13'. Apr 06 14:21:29.389728 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:21:29.484713 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Apr 06 14:21:29.539564 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Apr 06 14:21:29.635365 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Apr 06 14:21:29.699786 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:29.798442 osdx ubnt-cfgd[41887]: inactive Apr 06 14:21:29.821784 osdx INFO[41895]: FRR daemons did not change Apr 06 14:21:29.835669 osdx ca-certificates[41911]: Updating certificates in /etc/ssl/certs... Apr 06 14:21:30.344573 osdx ubnt-cfgd[42923]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:21:30.351888 osdx ca-certificates[42929]: 1 added, 0 removed; done. Apr 06 14:21:30.354715 osdx ca-certificates[42935]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:21:30.357404 osdx ca-certificates[42937]: done. Apr 06 14:21:30.476347 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:21:30.477511 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:30.479739 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:30.497956 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:21:30.500732 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:21:30.500954 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Network connectivity detected Apr 06 14:21:30.501005 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Dropping privileges Apr 06 14:21:30.503823 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Network connectivity detected Apr 06 14:21:30.503889 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:21:30.503889 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:21:30.503889 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Apr 06 14:21:30.503889 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Firefox workaround initialized Apr 06 14:21:30.503889 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpuvitc9u6] Apr 06 14:21:30.504654 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Apr 06 14:21:30.504654 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Apr 06 14:21:30.504654 osdx dnscrypt-proxy[42997]: [2026-04-06 14:21:30] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 92262f4a1d0dfe217d7d52734a42ff61638b454a0dbd2f50d5cb38dbdb960cce set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:21:26.000178 osdx systemd-timedated[22127]: Changed local time to Mon 2026-04-06 14:21:26 UTC Apr 06 14:21:26.002175 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'set date 2026-04-06 14:21:26'. Apr 06 14:21:26.003285 osdx systemd-journald[1758]: Time jumped backwards, rotating. Apr 06 14:21:26.326005 osdx systemd-journald[1758]: Runtime Journal (/run/log/journal/862cb27bfeac4475836e13336dc829f0) is 952.0K, max 6.5M, 5.5M free. Apr 06 14:21:26.327277 osdx systemd-journald[1758]: Received client request to rotate journal, rotating. Apr 06 14:21:26.327334 osdx systemd-journald[1758]: Vacuuming done, freed 0B of archived journals from /run/log/journal/862cb27bfeac4475836e13336dc829f0. Apr 06 14:21:26.335732 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:26.538204 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:27.611278 osdx OSDxCLI[2067]: User 'admin' entered the configuration menu. Apr 06 14:21:27.712486 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Apr 06 14:21:27.777129 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:27.869523 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service ssh'. Apr 06 14:21:27.944790 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:28.062434 osdx ubnt-cfgd[28368]: inactive Apr 06 14:21:28.090348 osdx INFO[28380]: FRR daemons did not change Apr 06 14:21:28.115270 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:28.165969 osdx WARNING[28448]: No supported link modes on interface eth0 Apr 06 14:21:28.167504 osdx modulelauncher[28448]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:28.167514 osdx modulelauncher[28448]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:28.168759 osdx modulelauncher[28448]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:28.168770 osdx modulelauncher[28448]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:28.283698 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Apr 06 14:21:28.298954 osdx sshd[28499]: Server listening on 0.0.0.0 port 22. Apr 06 14:21:28.298990 osdx sshd[28499]: Server listening on :: port 22. Apr 06 14:21:28.299134 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Apr 06 14:21:28.325254 osdx cfgd[1457]: [2067]Completed change to active configuration Apr 06 14:21:28.340676 osdx OSDxCLI[2067]: User 'admin' committed the configuration. Apr 06 14:21:28.359284 osdx OSDxCLI[2067]: User 'admin' left the configuration menu. Apr 06 14:21:28.496013 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Apr 06 14:21:30.678695 osdx OSDxCLI[2067]: User 'admin' entered the configuration menu. Apr 06 14:21:30.738833 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Apr 06 14:21:30.830343 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Apr 06 14:21:30.881701 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Apr 06 14:21:30.994953 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Apr 06 14:21:31.054138 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Apr 06 14:21:31.171844 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Apr 06 14:21:31.238691 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 92262f4a1d0dfe217d7d52734a42ff61638b454a0dbd2f50d5cb38dbdb960cce'. Apr 06 14:21:31.340412 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:31.404637 osdx ubnt-cfgd[28554]: inactive Apr 06 14:21:31.423533 osdx INFO[28562]: FRR daemons did not change Apr 06 14:21:31.440459 osdx ca-certificates[28578]: Updating certificates in /etc/ssl/certs... Apr 06 14:21:31.949150 osdx ubnt-cfgd[29590]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:21:31.956339 osdx ca-certificates[29595]: 1 added, 0 removed; done. Apr 06 14:21:31.959608 osdx ca-certificates[29602]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:21:31.962624 osdx ca-certificates[29604]: done. Apr 06 14:21:32.039758 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:21:32.041846 osdx cfgd[1457]: [2067]Completed change to active configuration Apr 06 14:21:32.044974 osdx OSDxCLI[2067]: User 'admin' committed the configuration. Apr 06 14:21:32.068896 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:21:32.069149 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] Network connectivity detected Apr 06 14:21:32.069240 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] Dropping privileges Apr 06 14:21:32.071582 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] Network connectivity detected Apr 06 14:21:32.071582 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:21:32.071582 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:21:32.071582 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] Firefox workaround initialized Apr 06 14:21:32.071582 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmptmwikpkr] Apr 06 14:21:32.084973 osdx OSDxCLI[2067]: User 'admin' left the configuration menu. Apr 06 14:21:32.163647 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] [DUT0] OK (DoH) - rtt: 13ms Apr 06 14:21:32.163647 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 13ms) Apr 06 14:21:32.163647 osdx dnscrypt-proxy[29611]: [2026-04-06 14:21:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGyO3vd2ko0l0Wc58N8mJGQavVObfWvmVGXCN-j3XcsTGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGyO3vd2ko0l0Wc58N8mJGQavVObfWvmVGXCN-j3XcsTGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Apr 06 14:21:38.341642 osdx systemd-journald[1969]: Runtime Journal (/run/log/journal/8555dfc266884f30a3544832475c4d6c) is 1.8M, max 13.8M, 11.9M free. Apr 06 14:21:38.343957 osdx systemd-journald[1969]: Received client request to rotate journal, rotating. Apr 06 14:21:38.344018 osdx systemd-journald[1969]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8555dfc266884f30a3544832475c4d6c. Apr 06 14:21:38.353427 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:38.573074 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:38.899571 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:38.986157 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 06 14:21:39.071132 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:39.134750 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:39.212298 osdx ubnt-cfgd[44721]: inactive Apr 06 14:21:39.231662 osdx INFO[44727]: FRR daemons did not change Apr 06 14:21:39.291968 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:39.331107 osdx WARNING[44795]: No supported link modes on interface eth0 Apr 06 14:21:39.332812 osdx modulelauncher[44795]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:39.332829 osdx modulelauncher[44795]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:39.333980 osdx modulelauncher[44795]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:39.333988 osdx modulelauncher[44795]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:39.366806 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:39.377545 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:39.394889 osdx OSDxCLI[10275]: User 'admin' left the configuration menu. Apr 06 14:21:39.549831 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 06 14:21:39.627548 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'system journal show | cat'. Apr 06 14:21:40.722303 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Apr 06 14:21:40.815755 osdx OSDxCLI[10275]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 6c:8e:de:f7:76:92:8d:25:d1:67:39:f0:df:26:24:64:1a:bd:53:9b:7d:6b:e6:54:65:c2:37:e8:f7:5d:cb:13 ip 10.215.168.1 port 8443'. Apr 06 14:21:40.959079 osdx OSDxCLI[10275]: User 'admin' entered the configuration menu. Apr 06 14:21:41.050654 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 06 14:21:41.112772 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 06 14:21:41.213169 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIGyO3vd2ko0l0Wc58N8mJGQavVObfWvmVGXCN-j3XcsTGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Apr 06 14:21:41.264430 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 06 14:21:41.374811 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Apr 06 14:21:41.468558 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Apr 06 14:21:41.528538 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Apr 06 14:21:41.638872 osdx OSDxCLI[10275]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:41.707276 osdx ubnt-cfgd[44895]: inactive Apr 06 14:21:41.729974 osdx INFO[44903]: FRR daemons did not change Apr 06 14:21:41.744775 osdx ca-certificates[44919]: Updating certificates in /etc/ssl/certs... Apr 06 14:21:42.290202 osdx ubnt-cfgd[45931]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:21:42.300378 osdx ca-certificates[45937]: 1 added, 0 removed; done. Apr 06 14:21:42.303731 osdx ca-certificates[45943]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:21:42.307006 osdx ca-certificates[45945]: done. Apr 06 14:21:42.428370 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:21:42.429840 osdx cfgd[1666]: [10275]Completed change to active configuration Apr 06 14:21:42.432289 osdx OSDxCLI[10275]: User 'admin' committed the configuration. Apr 06 14:21:42.449272 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:21:42.449445 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Network connectivity detected Apr 06 14:21:42.449605 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Dropping privileges Apr 06 14:21:42.452003 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Network connectivity detected Apr 06 14:21:42.452053 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:21:42.452053 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:21:42.452080 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Apr 06 14:21:42.452080 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Firefox workaround initialized Apr 06 14:21:42.452080 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpouex9y8k] Apr 06 14:21:42.452734 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Apr 06 14:21:42.452734 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Apr 06 14:21:42.452734 osdx dnscrypt-proxy[46005]: [2026-04-06 14:21:42] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Apr 06 14:21:42.478186 osdx OSDxCLI[10275]: User 'admin' left the configuration menu.
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 92262f4a1d0dfe217d7d52734a42ff61638b454a0dbd2f50d5cb38dbdb960cce at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgkiYvSh0N_iF9fVJzSkL_YWOLRUoNvS9Q1cs429uWDM4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgkiYvSh0N_iF9fVJzSkL_YWOLRUoNvS9Q1cs429uWDM4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 06 14:21:38.308028 osdx systemd-journald[1758]: Runtime Journal (/run/log/journal/862cb27bfeac4475836e13336dc829f0) is 1000.0K, max 6.5M, 5.5M free. Apr 06 14:21:38.310407 osdx systemd-journald[1758]: Received client request to rotate journal, rotating. Apr 06 14:21:38.310481 osdx systemd-journald[1758]: Vacuuming done, freed 0B of archived journals from /run/log/journal/862cb27bfeac4475836e13336dc829f0. Apr 06 14:21:38.322607 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system journal clear'. Apr 06 14:21:38.556546 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'system coredump delete all'. Apr 06 14:21:39.696424 osdx OSDxCLI[2067]: User 'admin' entered the configuration menu. Apr 06 14:21:39.777654 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Apr 06 14:21:39.849899 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 06 14:21:39.944147 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service ssh'. Apr 06 14:21:40.010910 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:40.106413 osdx ubnt-cfgd[31308]: inactive Apr 06 14:21:40.135794 osdx INFO[31320]: FRR daemons did not change Apr 06 14:21:40.162413 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 06 14:21:40.217285 osdx WARNING[31388]: No supported link modes on interface eth0 Apr 06 14:21:40.219113 osdx modulelauncher[31388]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 06 14:21:40.219212 osdx modulelauncher[31388]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 06 14:21:40.220765 osdx modulelauncher[31388]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Apr 06 14:21:40.220835 osdx modulelauncher[31388]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Apr 06 14:21:40.318914 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Apr 06 14:21:40.330534 osdx sshd[31439]: Server listening on 0.0.0.0 port 22. Apr 06 14:21:40.330561 osdx sshd[31439]: Server listening on :: port 22. Apr 06 14:21:40.330657 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Apr 06 14:21:40.352544 osdx cfgd[1457]: [2067]Completed change to active configuration Apr 06 14:21:40.364231 osdx OSDxCLI[2067]: User 'admin' committed the configuration. Apr 06 14:21:40.379528 osdx OSDxCLI[2067]: User 'admin' left the configuration menu. Apr 06 14:21:40.526978 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Apr 06 14:21:42.724336 osdx OSDxCLI[2067]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 92262f4a1d0dfe217d7d52734a42ff61638b454a0dbd2f50d5cb38dbdb960cce'. Apr 06 14:21:42.899394 osdx OSDxCLI[2067]: User 'admin' entered the configuration menu. Apr 06 14:21:43.012967 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Apr 06 14:21:43.071185 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Apr 06 14:21:43.161796 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Apr 06 14:21:43.222590 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgkiYvSh0N_iF9fVJzSkL_YWOLRUoNvS9Q1cs429uWDM4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Apr 06 14:21:43.326847 osdx OSDxCLI[2067]: User 'admin' added a new cfg line: 'show working'. Apr 06 14:21:43.392067 osdx ubnt-cfgd[31494]: inactive Apr 06 14:21:43.412233 osdx INFO[31502]: FRR daemons did not change Apr 06 14:21:43.427024 osdx ca-certificates[31517]: Updating certificates in /etc/ssl/certs... Apr 06 14:21:43.946701 osdx ubnt-cfgd[32530]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 06 14:21:43.956685 osdx ca-certificates[32535]: 1 added, 0 removed; done. Apr 06 14:21:43.960292 osdx ca-certificates[32542]: Running hooks in /etc/ca-certificates/update.d... Apr 06 14:21:43.963794 osdx ca-certificates[32544]: done. Apr 06 14:21:44.042859 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 06 14:21:44.045569 osdx cfgd[1457]: [2067]Completed change to active configuration Apr 06 14:21:44.047842 osdx OSDxCLI[2067]: User 'admin' committed the configuration. Apr 06 14:21:44.073109 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] dnscrypt-proxy 2.0.45 Apr 06 14:21:44.073303 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] Network connectivity detected Apr 06 14:21:44.073454 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] Dropping privileges Apr 06 14:21:44.076089 osdx OSDxCLI[2067]: User 'admin' left the configuration menu. Apr 06 14:21:44.076409 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] Network connectivity detected Apr 06 14:21:44.076440 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 06 14:21:44.076440 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 06 14:21:44.076478 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] Firefox workaround initialized Apr 06 14:21:44.076478 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpfubtop0u] Apr 06 14:21:44.165206 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] [DUT0] OK (DoH) - rtt: 12ms Apr 06 14:21:44.165206 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 12ms) Apr 06 14:21:44.165206 osdx dnscrypt-proxy[32551]: [2026-04-06 14:21:44] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13