Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 94bd2423f228aa7789fc9c7f10d73f124a6a1a9a67ac61539e0489970e64183c set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:37:26.350954 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.8M, max 13.8M, 11.9M free. Dec 11 19:37:26.352403 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:37:26.352460 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:37:26.360816 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:37:26.564149 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:37:26.794525 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:37:26.894735 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:37:26.972298 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:37:27.082251 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:37:27.152587 osdx ubnt-cfgd[570054]: inactive Dec 11 19:37:27.170166 osdx INFO[570060]: FRR daemons did not change Dec 11 19:37:27.200414 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:37:27.245391 osdx WARNING[570129]: No supported link modes on interface eth0 Dec 11 19:37:27.247195 osdx modulelauncher[570129]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:37:27.247208 osdx modulelauncher[570129]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:37:27.248557 osdx modulelauncher[570129]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:37:27.248568 osdx modulelauncher[570129]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:37:27.281885 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:37:27.296360 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:37:27.313770 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:37:27.469187 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:37:27.544513 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:37:27.683774 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:37:27.738998 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 11 19:37:27.833632 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:37:27.894119 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Dec 11 19:37:27.991517 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Dec 11 19:37:28.079591 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 94bd2423f228aa7789fc9c7f10d73f124a6a1a9a67ac61539e0489970e64183c'. Dec 11 19:37:28.127978 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:37:28.271024 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:37:28.347932 osdx ubnt-cfgd[570225]: inactive Dec 11 19:37:28.375763 osdx INFO[570233]: FRR daemons did not change Dec 11 19:37:28.399820 osdx ca-certificates[570249]: Updating certificates in /etc/ssl/certs... Dec 11 19:37:29.201118 osdx ubnt-cfgd[571261]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:37:29.213908 osdx ca-certificates[571265]: 1 added, 0 removed; done. Dec 11 19:37:29.219248 osdx ca-certificates[571273]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:37:29.224229 osdx ca-certificates[571275]: done. Dec 11 19:37:29.364895 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:37:29.367117 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:37:29.370625 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:37:29.398247 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:37:29.400780 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:29] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:37:29.400985 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:29] [NOTICE] Network connectivity detected Dec 11 19:37:29.401108 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:29] [NOTICE] Dropping privileges Dec 11 19:37:29.404634 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:29] [NOTICE] Network connectivity detected Dec 11 19:37:29.404797 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:37:29.404843 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:37:29.404911 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:29] [NOTICE] Firefox workaround initialized Dec 11 19:37:29.404949 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp0594m8uj] Dec 11 19:37:29.601122 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:37:31.723122 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:37:32.862232 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:32] [NOTICE] [RD] OK (DoH) - rtt: 230ms Dec 11 19:37:32.862232 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:32] [NOTICE] Server with the lowest initial latency: RD (rtt: 230ms) Dec 11 19:37:32.862232 osdx dnscrypt-proxy[571332]: [2025-12-11 19:37:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Dec 11 19:37:40.337820 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.8M, max 13.8M, 11.9M free. Dec 11 19:37:40.341530 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:37:40.341598 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:37:40.348469 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:37:40.570263 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:37:40.831820 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:37:40.937232 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:37:41.062897 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:37:41.180738 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:37:41.252530 osdx ubnt-cfgd[573076]: inactive Dec 11 19:37:41.273159 osdx INFO[573082]: FRR daemons did not change Dec 11 19:37:41.305520 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:37:41.346755 osdx WARNING[573151]: No supported link modes on interface eth0 Dec 11 19:37:41.348122 osdx modulelauncher[573151]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:37:41.348134 osdx modulelauncher[573151]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:37:41.349287 osdx modulelauncher[573151]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:37:41.349298 osdx modulelauncher[573151]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:37:41.382477 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:37:41.395383 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:37:41.568474 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:37:41.707685 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:37:41.774687 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:37:41.911098 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:37:41.969339 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:37:42.110239 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:37:42.181580 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:37:43.239183 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:37:43.398586 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:37:43.457617 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:37:43.597430 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Dec 11 19:37:43.668174 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Dec 11 19:37:43.793537 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:37:43.918701 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show changes'. Dec 11 19:37:44.037852 osdx ubnt-cfgd[573254]: inactive Dec 11 19:37:44.058678 osdx INFO[573260]: FRR daemons did not change Dec 11 19:37:44.169818 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:37:44.171087 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:37:44.173674 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:37:44.196159 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:37:44.196386 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] Network connectivity detected Dec 11 19:37:44.196411 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] Dropping privileges Dec 11 19:37:44.198474 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] Network connectivity detected Dec 11 19:37:44.198549 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:37:44.198549 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:37:44.198549 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] Firefox workaround initialized Dec 11 19:37:44.198549 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] Loading the set of cloaking rules from [/tmp/tmplidkt415] Dec 11 19:37:44.200955 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:37:44.355872 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:37:44.720408 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABBZj1ONL3iTz1FG4sw40nHP": x509: certificate signed by unknown authority Dec 11 19:37:44.720408 osdx dnscrypt-proxy[573319]: [2025-12-11 19:37:44] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:37:57.374284 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.8M, max 13.8M, 11.9M free. Dec 11 19:37:57.377530 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:37:57.377588 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:37:57.383898 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:37:57.656253 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:37:57.871753 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:37:57.993858 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:37:58.046237 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:37:58.152372 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:37:58.219425 osdx ubnt-cfgd[573588]: inactive Dec 11 19:37:58.239532 osdx INFO[573594]: FRR daemons did not change Dec 11 19:37:58.269539 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:37:58.311210 osdx WARNING[573663]: No supported link modes on interface eth0 Dec 11 19:37:58.312519 osdx modulelauncher[573663]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:37:58.312531 osdx modulelauncher[573663]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:37:58.313686 osdx modulelauncher[573663]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:37:58.313695 osdx modulelauncher[573663]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:37:58.345293 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:37:58.356293 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:37:58.371682 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:37:58.548223 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:37:58.620549 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:37:58.775178 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:37:58.833918 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:37:58.940764 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:37:58.989827 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:37:59.045555 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:37:59.218197 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:37:59.280431 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:37:59.393126 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Dec 11 19:37:59.453617 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Dec 11 19:37:59.581676 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Dec 11 19:37:59.644894 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:37:59.758732 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show changes'. Dec 11 19:37:59.861614 osdx ubnt-cfgd[573767]: inactive Dec 11 19:37:59.882097 osdx INFO[573773]: FRR daemons did not change Dec 11 19:37:59.985811 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:37:59.986901 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:37:59.989013 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:38:00.014031 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:38:00.014342 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] Network connectivity detected Dec 11 19:38:00.014540 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] Dropping privileges Dec 11 19:38:00.017050 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] Network connectivity detected Dec 11 19:38:00.017152 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:38:00.017190 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:38:00.017240 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] Firefox workaround initialized Dec 11 19:38:00.017240 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] Loading the set of cloaking rules from [/tmp/tmptxm9s5zj] Dec 11 19:38:00.017639 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:38:00.184664 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:38:00.323096 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] [RD] OK (DoH) - rtt: 180ms Dec 11 19:38:00.323096 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] Server with the lowest initial latency: RD (rtt: 180ms) Dec 11 19:38:00.323096 osdx dnscrypt-proxy[573832]: [2025-12-11 19:38:00] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 94bd2423f228aa7789fc9c7f10d73f124a6a1a9a67ac61539e0489970e64183c at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCUvSQj8iiqd4n8nH8Q1z8SSmoammesYVOeBImXDmQYPApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCUvSQj8iiqd4n8nH8Q1z8SSmoammesYVOeBImXDmQYPApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:38:07.313298 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.8M, max 13.8M, 11.9M free. Dec 11 19:38:07.315760 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:38:07.315827 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:38:07.323526 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:38:07.543897 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:38:07.782207 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:38:07.869734 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:38:07.936726 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:38:08.038473 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:38:08.097508 osdx ubnt-cfgd[574101]: inactive Dec 11 19:38:08.117510 osdx INFO[574107]: FRR daemons did not change Dec 11 19:38:08.147765 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:38:08.193804 osdx WARNING[574176]: No supported link modes on interface eth0 Dec 11 19:38:08.195291 osdx modulelauncher[574176]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:38:08.195302 osdx modulelauncher[574176]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:38:08.196855 osdx modulelauncher[574176]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:38:08.196863 osdx modulelauncher[574176]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:38:08.230762 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:38:08.244457 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:38:08.263400 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:38:08.423395 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:38:08.492968 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:38:08.646118 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 94bd2423f228aa7789fc9c7f10d73f124a6a1a9a67ac61539e0489970e64183c'. Dec 11 19:38:08.782310 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:38:08.898892 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 11 19:38:08.959662 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:38:09.056658 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCUvSQj8iiqd4n8nH8Q1z8SSmoammesYVOeBImXDmQYPApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Dec 11 19:38:09.138791 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:38:09.293389 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:38:09.358469 osdx ubnt-cfgd[574273]: inactive Dec 11 19:38:09.379094 osdx INFO[574281]: FRR daemons did not change Dec 11 19:38:09.392528 osdx ca-certificates[574297]: Updating certificates in /etc/ssl/certs... Dec 11 19:38:09.925581 osdx ubnt-cfgd[575309]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:38:09.933441 osdx ca-certificates[575315]: 1 added, 0 removed; done. Dec 11 19:38:09.937026 osdx ca-certificates[575321]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:38:09.940470 osdx ca-certificates[575323]: done. Dec 11 19:38:10.056092 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:38:10.057258 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:38:10.060028 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:38:10.075258 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:38:10.075489 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] Network connectivity detected Dec 11 19:38:10.075489 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] Dropping privileges Dec 11 19:38:10.075572 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:38:10.077649 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] Network connectivity detected Dec 11 19:38:10.077700 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:38:10.077700 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:38:10.077700 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] Firefox workaround initialized Dec 11 19:38:10.077700 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp2tciwzgh] Dec 11 19:38:10.235264 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:38:10.286293 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] [RD] OK (DoH) - rtt: 114ms Dec 11 19:38:10.286293 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] Server with the lowest initial latency: RD (rtt: 114ms) Dec 11 19:38:10.286293 osdx dnscrypt-proxy[575380]: [2025-12-11 19:38:10] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Dec 11 19:38:18.338852 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.8M, max 13.8M, 11.9M free. Dec 11 19:38:18.339382 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:38:18.339413 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:38:18.354169 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:38:18.621903 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:38:18.975943 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:38:19.101908 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:38:19.163440 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:38:19.274479 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:38:19.355683 osdx ubnt-cfgd[577121]: inactive Dec 11 19:38:19.379310 osdx INFO[577127]: FRR daemons did not change Dec 11 19:38:19.415165 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:38:19.465158 osdx WARNING[577196]: No supported link modes on interface eth0 Dec 11 19:38:19.466579 osdx modulelauncher[577196]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:38:19.466593 osdx modulelauncher[577196]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:38:19.468491 osdx modulelauncher[577196]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:38:19.468503 osdx modulelauncher[577196]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:38:19.508203 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:38:19.522648 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:38:19.570619 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:38:19.744781 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:38:19.824712 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:38:19.957977 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Dec 11 19:38:20.139851 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:38:20.233875 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 11 19:38:20.691553 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:38:20.760529 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Dec 11 19:38:20.869685 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Dec 11 19:38:20.940700 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Dec 11 19:38:21.057458 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc'. Dec 11 19:38:21.131126 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:38:21.255272 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:38:21.349457 osdx ubnt-cfgd[577295]: inactive Dec 11 19:38:21.373749 osdx INFO[577303]: FRR daemons did not change Dec 11 19:38:21.389623 osdx ca-certificates[577319]: Updating certificates in /etc/ssl/certs... Dec 11 19:38:22.042846 osdx ubnt-cfgd[578331]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:38:22.052315 osdx ca-certificates[578336]: 1 added, 0 removed; done. Dec 11 19:38:22.055593 osdx ca-certificates[578343]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:38:22.058884 osdx ca-certificates[578345]: done. Dec 11 19:38:22.171617 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:38:22.173153 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:38:22.192653 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:38:22.192918 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] Network connectivity detected Dec 11 19:38:22.192965 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] Dropping privileges Dec 11 19:38:22.195344 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] Network connectivity detected Dec 11 19:38:22.195402 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:38:22.195402 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:38:22.195402 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] Firefox workaround initialized Dec 11 19:38:22.195402 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpzkzhtz3n] Dec 11 19:38:22.409764 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] [RD] OK (DNSCrypt) - rtt: 213ms Dec 11 19:38:22.409764 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] Server with the lowest initial latency: RD (rtt: 213ms) Dec 11 19:38:22.409764 osdx dnscrypt-proxy[578402]: [2025-12-11 19:38:22] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Dec 11 19:38:22.478525 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:38:22.501632 osdx OSDxCLI[544029]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEOG7WgUtWDYBAgYtJqM6V-jc0cVCxR3_9tLTcUm41bcGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEOG7WgUtWDYBAgYtJqM6V-jc0cVCxR3_9tLTcUm41bcGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Dec 11 19:38:31.305405 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 2.1M, max 13.8M, 11.6M free. Dec 11 19:38:31.306167 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:38:31.306222 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:38:31.317162 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:38:31.528050 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:38:31.749785 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:38:31.908630 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:38:31.979267 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:38:32.059513 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:38:32.168065 osdx ubnt-cfgd[580140]: inactive Dec 11 19:38:32.188181 osdx INFO[580146]: FRR daemons did not change Dec 11 19:38:32.218158 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:38:32.266926 osdx WARNING[580215]: No supported link modes on interface eth0 Dec 11 19:38:32.268377 osdx modulelauncher[580215]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:38:32.268390 osdx modulelauncher[580215]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:38:32.269528 osdx modulelauncher[580215]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:38:32.269535 osdx modulelauncher[580215]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:38:32.307219 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:38:32.319231 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:38:32.345535 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:38:32.487625 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:38:32.559284 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:38:32.661308 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Dec 11 19:38:32.774868 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc ip 10.215.168.1 port 8443'. Dec 11 19:38:32.936558 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:38:33.016243 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 11 19:38:33.764701 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:38:33.873802 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEOG7WgUtWDYBAgYtJqM6V-jc0cVCxR3_9tLTcUm41bcGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Dec 11 19:38:33.975153 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:38:34.130929 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:38:34.219856 osdx ubnt-cfgd[580314]: inactive Dec 11 19:38:34.253333 osdx INFO[580322]: FRR daemons did not change Dec 11 19:38:34.268025 osdx ca-certificates[580338]: Updating certificates in /etc/ssl/certs... Dec 11 19:38:34.979513 osdx ubnt-cfgd[581350]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:38:34.988817 osdx ca-certificates[581355]: 1 added, 0 removed; done. Dec 11 19:38:34.992028 osdx ca-certificates[581362]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:38:34.995445 osdx ca-certificates[581364]: done. Dec 11 19:38:35.106581 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:38:35.108047 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:38:35.128491 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:38:35.128702 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] Network connectivity detected Dec 11 19:38:35.128832 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] Dropping privileges Dec 11 19:38:35.131265 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] Network connectivity detected Dec 11 19:38:35.131318 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:38:35.131318 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:38:35.131318 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] Firefox workaround initialized Dec 11 19:38:35.131318 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpi1vjr5vr] Dec 11 19:38:35.132113 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Dec 11 19:38:35.132169 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Dec 11 19:38:35.132169 osdx dnscrypt-proxy[581421]: [2025-12-11 19:38:35] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Dec 11 19:38:36.439567 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:38:36.462702 osdx OSDxCLI[544029]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16