Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 94bd2423f228aa7789fc9c7f10d73f124a6a1a9a67ac61539e0489970e64183c set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:39:07.309135 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.8M, max 13.8M, 11.9M free. Dec 11 19:39:07.310309 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:39:07.310382 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:39:07.322424 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:39:07.589651 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:39:07.872236 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:39:07.959615 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:39:08.031203 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:39:08.133244 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:08.204386 osdx ubnt-cfgd[583556]: inactive Dec 11 19:39:08.224283 osdx INFO[583562]: FRR daemons did not change Dec 11 19:39:08.254291 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:39:08.293527 osdx WARNING[583631]: No supported link modes on interface eth0 Dec 11 19:39:08.294868 osdx modulelauncher[583631]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:39:08.294879 osdx modulelauncher[583631]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:39:08.296091 osdx modulelauncher[583631]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:39:08.296099 osdx modulelauncher[583631]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:39:08.332743 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:39:08.347264 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:39:08.362660 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:39:08.506688 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:39:08.575126 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:39:09.734505 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:39:09.798250 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 11 19:39:09.898149 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:39:09.972119 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Dec 11 19:39:10.110212 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Dec 11 19:39:10.177625 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 94bd2423f228aa7789fc9c7f10d73f124a6a1a9a67ac61539e0489970e64183c'. Dec 11 19:39:10.279568 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Dec 11 19:39:10.350679 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Dec 11 19:39:10.435517 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:39:10.517456 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Dec 11 19:39:10.604345 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:10.726374 osdx ubnt-cfgd[583730]: inactive Dec 11 19:39:10.745491 osdx INFO[583738]: FRR daemons did not change Dec 11 19:39:10.758376 osdx ca-certificates[583754]: Updating certificates in /etc/ssl/certs... Dec 11 19:39:11.269901 osdx ubnt-cfgd[584766]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:39:11.277646 osdx ca-certificates[584772]: 1 added, 0 removed; done. Dec 11 19:39:11.280448 osdx ca-certificates[584778]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:39:11.283163 osdx ca-certificates[584780]: done. Dec 11 19:39:11.402621 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:39:11.403733 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:39:11.405778 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:39:11.421188 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:39:11.431434 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:39:11.431613 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Network connectivity detected Dec 11 19:39:11.431775 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Dropping privileges Dec 11 19:39:11.434250 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Network connectivity detected Dec 11 19:39:11.434317 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:39:11.434317 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:39:11.434352 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Dec 11 19:39:11.434352 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Firefox workaround initialized Dec 11 19:39:11.434352 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpof9ed09m] Dec 11 19:39:11.586651 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:39:11.691655 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] [RD] OK (DoH) - rtt: 186ms Dec 11 19:39:11.691655 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] Server with the lowest initial latency: RD (rtt: 186ms) Dec 11 19:39:11.691655 osdx dnscrypt-proxy[584840]: [2025-12-11 19:39:11] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 2cb2fef0567d3eec15d8e53eb217f919aa694cf122216b0422f5b02a39114fb8 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:39:07.302693 osdx systemd-journald[1751]: Runtime Journal (/run/log/journal/a9242cd896344ca481d18f29a6e09395) is 948.0K, max 6.5M, 5.5M free. Dec 11 19:39:07.306235 osdx systemd-journald[1751]: Received client request to rotate journal, rotating. Dec 11 19:39:07.306303 osdx systemd-journald[1751]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a9242cd896344ca481d18f29a6e09395. Dec 11 19:39:07.312960 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:39:07.552507 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:39:08.632834 osdx OSDxCLI[292947]: User 'admin' entered the configuration menu. Dec 11 19:39:08.733710 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Dec 11 19:39:08.817956 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:39:08.914813 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service ssh'. Dec 11 19:39:08.991116 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:09.087436 osdx ubnt-cfgd[359884]: inactive Dec 11 19:39:09.174602 osdx INFO[359903]: FRR daemons did not change Dec 11 19:39:09.202256 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:39:09.249506 osdx WARNING[359972]: No supported link modes on interface eth0 Dec 11 19:39:09.250875 osdx modulelauncher[359972]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:39:09.250885 osdx modulelauncher[359972]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:39:09.252000 osdx modulelauncher[359972]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Dec 11 19:39:09.252007 osdx modulelauncher[359972]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Dec 11 19:39:09.330713 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Dec 11 19:39:09.341950 osdx sshd[360032]: Server listening on 0.0.0.0 port 22. Dec 11 19:39:09.342146 osdx sshd[360032]: Server listening on :: port 22. Dec 11 19:39:09.342260 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Dec 11 19:39:09.343033 osdx cfgd[1430]: [292947]Completed change to active configuration Dec 11 19:39:09.358204 osdx OSDxCLI[292947]: User 'admin' committed the configuration. Dec 11 19:39:09.387346 osdx OSDxCLI[292947]: User 'admin' left the configuration menu. Dec 11 19:39:09.525868 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Dec 11 19:39:13.718061 osdx OSDxCLI[292947]: User 'admin' entered the configuration menu. Dec 11 19:39:13.779346 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Dec 11 19:39:13.882957 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Dec 11 19:39:13.949790 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Dec 11 19:39:14.070062 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Dec 11 19:39:14.148678 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Dec 11 19:39:14.243542 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Dec 11 19:39:14.309878 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 2cb2fef0567d3eec15d8e53eb217f919aa694cf122216b0422f5b02a39114fb8'. Dec 11 19:39:14.427481 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:14.505482 osdx ubnt-cfgd[360081]: inactive Dec 11 19:39:14.528259 osdx INFO[360089]: FRR daemons did not change Dec 11 19:39:14.599715 osdx ca-certificates[360105]: Updating certificates in /etc/ssl/certs... Dec 11 19:39:15.114575 osdx ubnt-cfgd[361117]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:39:15.124810 osdx ca-certificates[361121]: 1 added, 0 removed; done. Dec 11 19:39:15.127714 osdx ca-certificates[361129]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:39:15.130467 osdx ca-certificates[361131]: done. Dec 11 19:39:15.214792 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:39:15.217956 osdx cfgd[1430]: [292947]Completed change to active configuration Dec 11 19:39:15.220047 osdx OSDxCLI[292947]: User 'admin' committed the configuration. Dec 11 19:39:15.257490 osdx OSDxCLI[292947]: User 'admin' left the configuration menu. Dec 11 19:39:15.417620 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:39:15.417866 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] Network connectivity detected Dec 11 19:39:15.417892 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] Dropping privileges Dec 11 19:39:15.418347 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:39:15.420416 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] Network connectivity detected Dec 11 19:39:15.420520 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:39:15.420561 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:39:15.420603 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] Firefox workaround initialized Dec 11 19:39:15.420635 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp7bzahfpo] Dec 11 19:39:15.637053 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] [DUT0] OK (DoH) - rtt: 129ms Dec 11 19:39:15.637150 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 129ms) Dec 11 19:39:15.637185 osdx dnscrypt-proxy[361138]: [2025-12-11 19:39:15] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 94bd2423f228aa7789fc9c7f10d73f124a6a1a9a67ac61539e0489970e64183c at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCUvSQj8iiqd4n8nH8Q1z8SSmoammesYVOeBImXDmQYPApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCUvSQj8iiqd4n8nH8Q1z8SSmoammesYVOeBImXDmQYPApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:39:26.365936 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.8M, max 13.8M, 11.9M free. Dec 11 19:39:26.366979 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:39:26.367056 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:39:26.378939 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:39:26.656242 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:39:26.975377 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:39:27.085441 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:39:27.186243 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:39:27.306282 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:27.425945 osdx ubnt-cfgd[586579]: inactive Dec 11 19:39:27.449210 osdx INFO[586585]: FRR daemons did not change Dec 11 19:39:27.487001 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:39:27.532475 osdx WARNING[586654]: No supported link modes on interface eth0 Dec 11 19:39:27.534132 osdx modulelauncher[586654]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:39:27.534147 osdx modulelauncher[586654]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:39:27.535507 osdx modulelauncher[586654]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:39:27.535516 osdx modulelauncher[586654]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:39:27.573920 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:39:27.587628 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:39:27.649125 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:39:27.887068 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:39:27.990958 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:39:29.644099 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 94bd2423f228aa7789fc9c7f10d73f124a6a1a9a67ac61539e0489970e64183c'. Dec 11 19:39:29.826421 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:39:29.937136 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 11 19:39:30.005661 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:39:30.150042 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCUvSQj8iiqd4n8nH8Q1z8SSmoammesYVOeBImXDmQYPApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Dec 11 19:39:30.258044 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Dec 11 19:39:30.331556 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Dec 11 19:39:30.425041 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Dec 11 19:39:30.550231 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:39:30.613463 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Dec 11 19:39:30.721765 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:30.788856 osdx ubnt-cfgd[586755]: inactive Dec 11 19:39:30.808469 osdx INFO[586763]: FRR daemons did not change Dec 11 19:39:30.822324 osdx ca-certificates[586778]: Updating certificates in /etc/ssl/certs... Dec 11 19:39:31.336718 osdx ubnt-cfgd[587791]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:39:31.344099 osdx ca-certificates[587796]: 1 added, 0 removed; done. Dec 11 19:39:31.346862 osdx ca-certificates[587803]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:39:31.350151 osdx ca-certificates[587805]: done. Dec 11 19:39:31.471468 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:39:31.473904 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:39:31.492081 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:39:31.492308 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Network connectivity detected Dec 11 19:39:31.492361 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Dropping privileges Dec 11 19:39:31.494661 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Network connectivity detected Dec 11 19:39:31.494714 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:39:31.494714 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:39:31.494714 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Dec 11 19:39:31.494714 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Firefox workaround initialized Dec 11 19:39:31.494714 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpt44u1dy0] Dec 11 19:39:31.498344 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:39:31.527431 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:39:31.677246 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] [RD] OK (DoH) - rtt: 104ms Dec 11 19:39:31.677246 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] Server with the lowest initial latency: RD (rtt: 104ms) Dec 11 19:39:31.677246 osdx dnscrypt-proxy[587865]: [2025-12-11 19:39:31] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 2cb2fef0567d3eec15d8e53eb217f919aa694cf122216b0422f5b02a39114fb8 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgLLL-8FZ9PuwV2OU-shf5GappTPEiIWsEIvWwKjkRT7gNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgLLL-8FZ9PuwV2OU-shf5GappTPEiIWsEIvWwKjkRT7gNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:39:26.321365 osdx systemd-journald[1751]: Runtime Journal (/run/log/journal/a9242cd896344ca481d18f29a6e09395) is 932.0K, max 6.5M, 5.6M free. Dec 11 19:39:26.324409 osdx systemd-journald[1751]: Received client request to rotate journal, rotating. Dec 11 19:39:26.324501 osdx systemd-journald[1751]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a9242cd896344ca481d18f29a6e09395. Dec 11 19:39:26.333612 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:39:26.609257 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:39:28.025979 osdx OSDxCLI[292947]: User 'admin' entered the configuration menu. Dec 11 19:39:28.152996 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Dec 11 19:39:28.247855 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:39:28.492291 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service ssh'. Dec 11 19:39:28.678504 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:28.756541 osdx ubnt-cfgd[362851]: inactive Dec 11 19:39:28.893245 osdx INFO[362870]: FRR daemons did not change Dec 11 19:39:28.928379 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:39:28.987530 osdx WARNING[362939]: No supported link modes on interface eth0 Dec 11 19:39:28.989108 osdx modulelauncher[362939]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:39:28.989124 osdx modulelauncher[362939]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:39:28.990543 osdx modulelauncher[362939]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Dec 11 19:39:28.990554 osdx modulelauncher[362939]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Dec 11 19:39:29.101108 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Dec 11 19:39:29.116350 osdx sshd[362999]: Server listening on 0.0.0.0 port 22. Dec 11 19:39:29.116439 osdx sshd[362999]: Server listening on :: port 22. Dec 11 19:39:29.116560 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Dec 11 19:39:29.118219 osdx cfgd[1430]: [292947]Completed change to active configuration Dec 11 19:39:29.132730 osdx OSDxCLI[292947]: User 'admin' committed the configuration. Dec 11 19:39:29.164122 osdx OSDxCLI[292947]: User 'admin' left the configuration menu. Dec 11 19:39:29.379676 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Dec 11 19:39:31.805698 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 2cb2fef0567d3eec15d8e53eb217f919aa694cf122216b0422f5b02a39114fb8'. Dec 11 19:39:31.983094 osdx OSDxCLI[292947]: User 'admin' entered the configuration menu. Dec 11 19:39:32.053657 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Dec 11 19:39:32.276619 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Dec 11 19:39:32.365730 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Dec 11 19:39:32.438357 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgLLL-8FZ9PuwV2OU-shf5GappTPEiIWsEIvWwKjkRT7gNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Dec 11 19:39:32.554281 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:32.614241 osdx ubnt-cfgd[363046]: inactive Dec 11 19:39:32.636176 osdx INFO[363054]: FRR daemons did not change Dec 11 19:39:32.652073 osdx ca-certificates[363069]: Updating certificates in /etc/ssl/certs... Dec 11 19:39:33.237598 osdx ubnt-cfgd[364082]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:39:33.245288 osdx ca-certificates[364087]: 1 added, 0 removed; done. Dec 11 19:39:33.248177 osdx ca-certificates[364094]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:39:33.251990 osdx ca-certificates[364096]: done. Dec 11 19:39:33.320780 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:39:33.322778 osdx cfgd[1430]: [292947]Completed change to active configuration Dec 11 19:39:33.355223 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:39:33.355407 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] Network connectivity detected Dec 11 19:39:33.355456 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] Dropping privileges Dec 11 19:39:33.357188 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] Network connectivity detected Dec 11 19:39:33.357229 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:39:33.357229 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:39:33.357229 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] Firefox workaround initialized Dec 11 19:39:33.357229 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpmt75g60d] Dec 11 19:39:33.666205 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] [DUT0] OK (DoH) - rtt: 233ms Dec 11 19:39:33.666205 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 233ms) Dec 11 19:39:33.666205 osdx dnscrypt-proxy[364103]: [2025-12-11 19:39:33] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Dec 11 19:39:33.732047 osdx OSDxCLI[292947]: User 'admin' committed the configuration. Dec 11 19:39:33.775562 osdx OSDxCLI[292947]: User 'admin' left the configuration menu.
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Dec 11 19:39:41.000288 osdx systemd-timedated[568913]: Changed local time to Thu 2025-12-11 19:39:41 UTC Dec 11 19:39:41.001794 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'set date 2025-12-11 19:39:41'. Dec 11 19:39:41.004122 osdx systemd-journald[265387]: Time jumped backwards, rotating. Dec 11 19:39:41.716684 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.8M, max 13.8M, 11.9M free. Dec 11 19:39:41.720090 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:39:41.720177 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:39:41.731319 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:39:42.039605 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:39:42.407392 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:39:42.594668 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:39:42.678875 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:39:42.802154 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:42.904443 osdx ubnt-cfgd[589600]: inactive Dec 11 19:39:42.925955 osdx INFO[589606]: FRR daemons did not change Dec 11 19:39:42.960099 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:39:43.016327 osdx WARNING[589675]: No supported link modes on interface eth0 Dec 11 19:39:43.018135 osdx modulelauncher[589675]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:39:43.018152 osdx modulelauncher[589675]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:39:43.019439 osdx modulelauncher[589675]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:39:43.019451 osdx modulelauncher[589675]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:39:43.065764 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:39:43.080858 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:39:43.118241 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:39:43.284920 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:39:43.384665 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:39:44.973725 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Dec 11 19:39:45.144141 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:39:45.224578 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 11 19:39:45.387345 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:39:45.857186 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Dec 11 19:39:45.945549 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Dec 11 19:39:46.112386 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Dec 11 19:39:46.191200 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc'. Dec 11 19:39:46.306045 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:39:46.379980 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Dec 11 19:39:46.495743 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Dec 11 19:39:46.581017 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Dec 11 19:39:46.668722 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:46.762043 osdx ubnt-cfgd[589777]: inactive Dec 11 19:39:46.789069 osdx INFO[589785]: FRR daemons did not change Dec 11 19:39:46.807099 osdx ca-certificates[589801]: Updating certificates in /etc/ssl/certs... Dec 11 19:39:47.399395 osdx ubnt-cfgd[590813]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:39:47.407434 osdx ca-certificates[590819]: 1 added, 0 removed; done. Dec 11 19:39:47.410234 osdx ca-certificates[590825]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:39:47.412850 osdx ca-certificates[590827]: done. Dec 11 19:39:47.552681 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:39:47.554138 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:39:47.556575 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:39:47.572759 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:39:47.573071 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Network connectivity detected Dec 11 19:39:47.573128 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Dropping privileges Dec 11 19:39:47.576294 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Network connectivity detected Dec 11 19:39:47.576374 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:39:47.576374 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:39:47.576374 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Dec 11 19:39:47.576374 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Firefox workaround initialized Dec 11 19:39:47.576374 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpfmjirjm4] Dec 11 19:39:47.577043 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:39:47.577263 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Dec 11 19:39:47.577263 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Dec 11 19:39:47.577263 osdx dnscrypt-proxy[590887]: [2025-12-11 19:39:47] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 2cb2fef0567d3eec15d8e53eb217f919aa694cf122216b0422f5b02a39114fb8 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:39:42.733692 osdx systemd-journald[1751]: Runtime Journal (/run/log/journal/a9242cd896344ca481d18f29a6e09395) is 956.0K, max 6.5M, 5.5M free. Dec 11 19:39:42.737102 osdx systemd-journald[1751]: Received client request to rotate journal, rotating. Dec 11 19:39:42.737240 osdx systemd-journald[1751]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a9242cd896344ca481d18f29a6e09395. Dec 11 19:39:42.745376 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:39:43.089610 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:39:44.459989 osdx OSDxCLI[292947]: User 'admin' entered the configuration menu. Dec 11 19:39:44.621653 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Dec 11 19:39:44.697517 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:39:44.795131 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service ssh'. Dec 11 19:39:44.924282 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:45.042247 osdx ubnt-cfgd[365811]: inactive Dec 11 19:39:45.126173 osdx INFO[365830]: FRR daemons did not change Dec 11 19:39:45.336626 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:39:45.389723 osdx WARNING[365899]: No supported link modes on interface eth0 Dec 11 19:39:45.391554 osdx modulelauncher[365899]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:39:45.391568 osdx modulelauncher[365899]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:39:45.393042 osdx modulelauncher[365899]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Dec 11 19:39:45.393053 osdx modulelauncher[365899]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Dec 11 19:39:45.504975 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Dec 11 19:39:45.518990 osdx sshd[365959]: Server listening on 0.0.0.0 port 22. Dec 11 19:39:45.519016 osdx sshd[365959]: Server listening on :: port 22. Dec 11 19:39:45.519134 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Dec 11 19:39:45.520181 osdx cfgd[1430]: [292947]Completed change to active configuration Dec 11 19:39:45.533071 osdx OSDxCLI[292947]: User 'admin' committed the configuration. Dec 11 19:39:45.567681 osdx OSDxCLI[292947]: User 'admin' left the configuration menu. Dec 11 19:39:45.752209 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Dec 11 19:39:49.498823 osdx OSDxCLI[292947]: User 'admin' entered the configuration menu. Dec 11 19:39:49.561296 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Dec 11 19:39:49.660729 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Dec 11 19:39:49.713035 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Dec 11 19:39:49.821739 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Dec 11 19:39:49.891568 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Dec 11 19:39:49.987255 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Dec 11 19:39:50.054725 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 2cb2fef0567d3eec15d8e53eb217f919aa694cf122216b0422f5b02a39114fb8'. Dec 11 19:39:50.157244 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:39:50.217330 osdx ubnt-cfgd[366006]: inactive Dec 11 19:39:50.238278 osdx INFO[366014]: FRR daemons did not change Dec 11 19:39:50.253671 osdx ca-certificates[366030]: Updating certificates in /etc/ssl/certs... Dec 11 19:39:50.780296 osdx ubnt-cfgd[367042]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:39:50.787375 osdx ca-certificates[367048]: 1 added, 0 removed; done. Dec 11 19:39:50.790258 osdx ca-certificates[367054]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:39:50.792875 osdx ca-certificates[367056]: done. Dec 11 19:39:50.865046 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:39:50.866788 osdx cfgd[1430]: [292947]Completed change to active configuration Dec 11 19:39:50.886608 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:50] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:39:50.886801 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:50] [NOTICE] Network connectivity detected Dec 11 19:39:50.886863 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:50] [NOTICE] Dropping privileges Dec 11 19:39:50.888897 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:50] [NOTICE] Network connectivity detected Dec 11 19:39:50.888940 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:50] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:39:50.888940 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:50] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:39:50.888940 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:50] [NOTICE] Firefox workaround initialized Dec 11 19:39:50.888940 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:50] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp9fxbvold] Dec 11 19:39:50.982269 osdx OSDxCLI[292947]: User 'admin' committed the configuration. Dec 11 19:39:51.013268 osdx OSDxCLI[292947]: User 'admin' left the configuration menu. Dec 11 19:39:51.091472 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:51] [NOTICE] [DUT0] OK (DoH) - rtt: 128ms Dec 11 19:39:51.091472 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:51] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 128ms) Dec 11 19:39:51.091472 osdx dnscrypt-proxy[367063]: [2025-12-11 19:39:51] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEOG7WgUtWDYBAgYtJqM6V-jc0cVCxR3_9tLTcUm41bcGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEOG7WgUtWDYBAgYtJqM6V-jc0cVCxR3_9tLTcUm41bcGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Dec 11 19:40:02.311242 osdx systemd-journald[265387]: Runtime Journal (/run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9) is 1.9M, max 13.8M, 11.8M free. Dec 11 19:40:02.314267 osdx systemd-journald[265387]: Received client request to rotate journal, rotating. Dec 11 19:40:02.314356 osdx systemd-journald[265387]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ff8de1b7feed4cd0a923a6e53f75b1b9. Dec 11 19:40:02.322744 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:40:02.537663 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:40:02.779420 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:40:02.869319 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Dec 11 19:40:02.947639 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:40:03.075651 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:40:03.145027 osdx ubnt-cfgd[592626]: inactive Dec 11 19:40:03.164740 osdx INFO[592632]: FRR daemons did not change Dec 11 19:40:03.194267 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:40:03.243842 osdx WARNING[592701]: No supported link modes on interface eth0 Dec 11 19:40:03.245199 osdx modulelauncher[592701]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:40:03.245211 osdx modulelauncher[592701]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:40:03.246350 osdx modulelauncher[592701]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Dec 11 19:40:03.246360 osdx modulelauncher[592701]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Dec 11 19:40:03.281255 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:40:03.293061 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:40:03.397387 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:40:03.609814 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Dec 11 19:40:03.677375 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:40:05.482499 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Dec 11 19:40:05.667819 osdx OSDxCLI[544029]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 43:86:ed:68:14:b5:60:d8:04:08:18:b4:9a:8c:e9:5f:a3:73:47:15:0b:14:77:ff:db:4b:4d:c5:26:e3:56:dc ip 10.215.168.1 port 8443'. Dec 11 19:40:05.842722 osdx OSDxCLI[544029]: User 'admin' entered the configuration menu. Dec 11 19:40:05.915640 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Dec 11 19:40:06.014921 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Dec 11 19:40:06.084349 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIEOG7WgUtWDYBAgYtJqM6V-jc0cVCxR3_9tLTcUm41bcGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Dec 11 19:40:06.192400 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns resolver local'. Dec 11 19:40:06.266316 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Dec 11 19:40:06.374803 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Dec 11 19:40:06.442406 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Dec 11 19:40:06.555036 osdx OSDxCLI[544029]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:40:06.636515 osdx ubnt-cfgd[592803]: inactive Dec 11 19:40:06.657799 osdx INFO[592811]: FRR daemons did not change Dec 11 19:40:06.671100 osdx ca-certificates[592827]: Updating certificates in /etc/ssl/certs... Dec 11 19:40:07.239401 osdx ubnt-cfgd[593839]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:40:07.247804 osdx ca-certificates[593844]: 1 added, 0 removed; done. Dec 11 19:40:07.251546 osdx ca-certificates[593851]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:40:07.255304 osdx ca-certificates[593853]: done. Dec 11 19:40:07.370624 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:40:07.372119 osdx cfgd[1647]: [544029]Completed change to active configuration Dec 11 19:40:07.375212 osdx OSDxCLI[544029]: User 'admin' committed the configuration. Dec 11 19:40:07.404145 osdx OSDxCLI[544029]: User 'admin' left the configuration menu. Dec 11 19:40:07.419941 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:40:07.420256 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Network connectivity detected Dec 11 19:40:07.420572 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Dropping privileges Dec 11 19:40:07.423637 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Network connectivity detected Dec 11 19:40:07.423712 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:40:07.423712 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:40:07.423712 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Dec 11 19:40:07.423712 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Firefox workaround initialized Dec 11 19:40:07.423712 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpmadq__2z] Dec 11 19:40:07.424484 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Dec 11 19:40:07.424484 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Dec 11 19:40:07.424484 osdx dnscrypt-proxy[593913]: [2025-12-11 19:40:07] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 2cb2fef0567d3eec15d8e53eb217f919aa694cf122216b0422f5b02a39114fb8 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgLLL-8FZ9PuwV2OU-shf5GappTPEiIWsEIvWwKjkRT7gNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgLLL-8FZ9PuwV2OU-shf5GappTPEiIWsEIvWwKjkRT7gNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Dec 11 19:40:02.286344 osdx systemd-journald[1751]: Runtime Journal (/run/log/journal/a9242cd896344ca481d18f29a6e09395) is 956.0K, max 6.5M, 5.5M free. Dec 11 19:40:02.286917 osdx systemd-journald[1751]: Received client request to rotate journal, rotating. Dec 11 19:40:02.286958 osdx systemd-journald[1751]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a9242cd896344ca481d18f29a6e09395. Dec 11 19:40:02.296972 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system journal clear'. Dec 11 19:40:02.506087 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system coredump delete all'. Dec 11 19:40:03.755465 osdx OSDxCLI[292947]: User 'admin' entered the configuration menu. Dec 11 19:40:03.882273 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Dec 11 19:40:03.936845 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Dec 11 19:40:04.033579 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service ssh'. Dec 11 19:40:04.105605 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:40:04.309722 osdx ubnt-cfgd[368775]: inactive Dec 11 19:40:04.921744 osdx INFO[368794]: FRR daemons did not change Dec 11 19:40:04.954937 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Dec 11 19:40:04.999487 osdx WARNING[368863]: No supported link modes on interface eth0 Dec 11 19:40:05.000806 osdx modulelauncher[368863]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Dec 11 19:40:05.000818 osdx modulelauncher[368863]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Dec 11 19:40:05.001955 osdx modulelauncher[368863]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Dec 11 19:40:05.001964 osdx modulelauncher[368863]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Dec 11 19:40:05.087831 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Dec 11 19:40:05.101335 osdx sshd[368923]: Server listening on 0.0.0.0 port 22. Dec 11 19:40:05.101554 osdx sshd[368923]: Server listening on :: port 22. Dec 11 19:40:05.101675 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Dec 11 19:40:05.102575 osdx cfgd[1430]: [292947]Completed change to active configuration Dec 11 19:40:05.114307 osdx OSDxCLI[292947]: User 'admin' committed the configuration. Dec 11 19:40:05.142950 osdx OSDxCLI[292947]: User 'admin' left the configuration menu. Dec 11 19:40:05.308062 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Dec 11 19:40:07.669534 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 2cb2fef0567d3eec15d8e53eb217f919aa694cf122216b0422f5b02a39114fb8'. Dec 11 19:40:07.806995 osdx OSDxCLI[292947]: User 'admin' entered the configuration menu. Dec 11 19:40:07.862193 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Dec 11 19:40:07.960708 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Dec 11 19:40:08.012067 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Dec 11 19:40:08.172854 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgLLL-8FZ9PuwV2OU-shf5GappTPEiIWsEIvWwKjkRT7gNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Dec 11 19:40:08.243392 osdx OSDxCLI[292947]: User 'admin' added a new cfg line: 'show working'. Dec 11 19:40:08.324183 osdx ubnt-cfgd[368970]: inactive Dec 11 19:40:08.348443 osdx INFO[368978]: FRR daemons did not change Dec 11 19:40:08.362355 osdx ca-certificates[368994]: Updating certificates in /etc/ssl/certs... Dec 11 19:40:08.939557 osdx ubnt-cfgd[370006]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Dec 11 19:40:08.950050 osdx ca-certificates[370011]: 1 added, 0 removed; done. Dec 11 19:40:08.954019 osdx ca-certificates[370018]: Running hooks in /etc/ca-certificates/update.d... Dec 11 19:40:08.960928 osdx ca-certificates[370020]: done. Dec 11 19:40:09.055458 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Dec 11 19:40:09.057614 osdx cfgd[1430]: [292947]Completed change to active configuration Dec 11 19:40:09.061205 osdx OSDxCLI[292947]: User 'admin' committed the configuration. Dec 11 19:40:09.078826 osdx OSDxCLI[292947]: User 'admin' left the configuration menu. Dec 11 19:40:09.080892 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] dnscrypt-proxy 2.0.45 Dec 11 19:40:09.081087 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] Network connectivity detected Dec 11 19:40:09.081201 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] Dropping privileges Dec 11 19:40:09.083164 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] Network connectivity detected Dec 11 19:40:09.083219 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Dec 11 19:40:09.083219 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Dec 11 19:40:09.083219 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] Firefox workaround initialized Dec 11 19:40:09.083219 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpzvhqfntd] Dec 11 19:40:09.242508 osdx OSDxCLI[292947]: User 'admin' executed a new command: 'system journal show | cat'. Dec 11 19:40:09.250212 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] [DUT0] OK (DoH) - rtt: 100ms Dec 11 19:40:09.250212 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 100ms) Dec 11 19:40:09.250212 osdx dnscrypt-proxy[370027]: [2025-12-11 19:40:09] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13