Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash cadda5fb1405a6b43b17519900de566b425483c229c767ababeecce534770074 set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jan 27 12:23:37.290243 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.8M, max 13.8M, 11.9M free. Jan 27 12:23:37.293002 osdx systemd-journald[1949]: Received client request to rotate journal, rotating. Jan 27 12:23:37.293061 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4. Jan 27 12:23:37.300824 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'. Jan 27 12:23:37.512859 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'. Jan 27 12:23:37.749962 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:23:37.837416 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jan 27 12:23:37.922550 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jan 27 12:23:37.984276 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:23:38.099486 osdx ubnt-cfgd[220433]: inactive Jan 27 12:23:38.117377 osdx INFO[220439]: FRR daemons did not change Jan 27 12:23:38.149015 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jan 27 12:23:38.200905 osdx WARNING[220508]: No supported link modes on interface eth0 Jan 27 12:23:38.202876 osdx modulelauncher[220508]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jan 27 12:23:38.202899 osdx modulelauncher[220508]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jan 27 12:23:38.204629 osdx modulelauncher[220508]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jan 27 12:23:38.204643 osdx modulelauncher[220508]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jan 27 12:23:38.247286 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:23:38.262478 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:23:38.281444 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:23:38.493430 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jan 27 12:23:38.569566 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:23:38.759062 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:23:38.829998 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jan 27 12:23:38.944618 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jan 27 12:23:39.028184 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jan 27 12:23:39.129192 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jan 27 12:23:39.223354 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash cadda5fb1405a6b43b17519900de566b425483c229c767ababeecce534770074'. Jan 27 12:23:39.279129 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jan 27 12:23:39.421230 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:23:39.515420 osdx ubnt-cfgd[220604]: inactive Jan 27 12:23:39.543178 osdx INFO[220612]: FRR daemons did not change Jan 27 12:23:39.567305 osdx ca-certificates[220628]: Updating certificates in /etc/ssl/certs... Jan 27 12:23:40.309894 osdx ubnt-cfgd[221640]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jan 27 12:23:40.320588 osdx ca-certificates[221644]: 1 added, 0 removed; done. Jan 27 12:23:40.324600 osdx ca-certificates[221652]: Running hooks in /etc/ca-certificates/update.d... Jan 27 12:23:40.328574 osdx ca-certificates[221654]: done. Jan 27 12:23:40.465457 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jan 27 12:23:40.465759 osdx systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Jan 27 12:23:40.467362 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:23:40.470228 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:23:40.523024 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:23:40.707369 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:23:40.733839 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:40] [NOTICE] dnscrypt-proxy 2.0.45 Jan 27 12:23:40.734310 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:40] [NOTICE] Network connectivity detected Jan 27 12:23:40.734670 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:40] [NOTICE] Dropping privileges Jan 27 12:23:40.738809 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:40] [NOTICE] Network connectivity detected Jan 27 12:23:40.738910 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:40] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jan 27 12:23:40.738910 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:40] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jan 27 12:23:40.738910 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:40] [NOTICE] Firefox workaround initialized Jan 27 12:23:40.738910 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:40] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpu_i12hej] Jan 27 12:23:42.863527 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:23:43.105222 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:43] [NOTICE] [RD] OK (DoH) - rtt: 244ms Jan 27 12:23:43.105222 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:43] [NOTICE] Server with the lowest initial latency: RD (rtt: 244ms) Jan 27 12:23:43.105222 osdx dnscrypt-proxy[221708]: [2026-01-27 12:23:43] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Jan 27 12:23:51.000194 osdx systemd-timedated[215476]: Changed local time to Tue 2026-01-27 12:23:51 UTC Jan 27 12:23:51.000707 osdx systemd-journald[1949]: Time jumped backwards, rotating. Jan 27 12:23:51.001415 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'set date 2026-01-27 12:23:51'. Jan 27 12:23:51.294509 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 3.4M, max 13.8M, 10.3M free. Jan 27 12:23:51.296400 osdx systemd-journald[1949]: Received client request to rotate journal, rotating. Jan 27 12:23:51.296469 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4. Jan 27 12:23:51.305022 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'. Jan 27 12:23:51.533732 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'. Jan 27 12:23:51.775845 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:23:51.887838 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jan 27 12:23:51.984524 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jan 27 12:23:52.053155 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:23:52.159205 osdx ubnt-cfgd[223455]: inactive Jan 27 12:23:52.179463 osdx INFO[223461]: FRR daemons did not change Jan 27 12:23:52.212481 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jan 27 12:23:52.268601 osdx WARNING[223530]: No supported link modes on interface eth0 Jan 27 12:23:52.270639 osdx modulelauncher[223530]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jan 27 12:23:52.270672 osdx modulelauncher[223530]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jan 27 12:23:52.272458 osdx modulelauncher[223530]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jan 27 12:23:52.272469 osdx modulelauncher[223530]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jan 27 12:23:52.313602 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:23:52.325169 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:23:52.351565 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:23:52.504451 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jan 27 12:23:52.575449 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:23:53.075154 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:23:53.183090 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jan 27 12:23:54.282628 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:23:54.358596 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:23:54.429750 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:23:54.624230 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:23:54.684458 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jan 27 12:23:54.785976 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jan 27 12:23:54.840905 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jan 27 12:23:54.949133 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jan 27 12:23:55.010571 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show changes'. Jan 27 12:23:55.144027 osdx ubnt-cfgd[223633]: inactive Jan 27 12:23:55.164142 osdx INFO[223639]: FRR daemons did not change Jan 27 12:23:55.272846 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jan 27 12:23:55.274197 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:23:55.276656 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:23:55.295788 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] dnscrypt-proxy 2.0.45 Jan 27 12:23:55.296074 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] Network connectivity detected Jan 27 12:23:55.296074 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] Dropping privileges Jan 27 12:23:55.298499 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] Network connectivity detected Jan 27 12:23:55.298556 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jan 27 12:23:55.298556 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jan 27 12:23:55.298556 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] Firefox workaround initialized Jan 27 12:23:55.298556 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpa782j0r_] Jan 27 12:23:55.387201 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:23:55.501829 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:23:55.906398 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABBzCyMzxDqxPUNpqBsOZoz7": x509: certificate signed by unknown authority Jan 27 12:23:55.906398 osdx dnscrypt-proxy[223698]: [2026-01-27 12:23:55] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jan 27 12:24:09.353358 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.9M, max 13.8M, 11.8M free. Jan 27 12:24:09.355557 osdx systemd-journald[1949]: Received client request to rotate journal, rotating. Jan 27 12:24:09.355612 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4. Jan 27 12:24:09.365657 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'. Jan 27 12:24:09.604017 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'. Jan 27 12:24:09.808489 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:09.932282 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jan 27 12:24:09.985489 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jan 27 12:24:10.101814 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:24:10.163332 osdx ubnt-cfgd[223970]: inactive Jan 27 12:24:10.185407 osdx INFO[223976]: FRR daemons did not change Jan 27 12:24:10.215562 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jan 27 12:24:10.261608 osdx WARNING[224045]: No supported link modes on interface eth0 Jan 27 12:24:10.263123 osdx modulelauncher[224045]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jan 27 12:24:10.263140 osdx modulelauncher[224045]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jan 27 12:24:10.264659 osdx modulelauncher[224045]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jan 27 12:24:10.264669 osdx modulelauncher[224045]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jan 27 12:24:10.298684 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:24:10.310159 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:10.339077 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:24:10.503136 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jan 27 12:24:10.593487 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:24:11.400951 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:11.468215 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jan 27 12:24:12.790238 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:24:12.851328 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:12.923983 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:24:13.072865 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:13.148596 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jan 27 12:24:13.256730 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jan 27 12:24:13.316901 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jan 27 12:24:13.406661 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Jan 27 12:24:13.462868 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jan 27 12:24:13.578196 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show changes'. Jan 27 12:24:13.673859 osdx ubnt-cfgd[224149]: inactive Jan 27 12:24:13.692189 osdx INFO[224155]: FRR daemons did not change Jan 27 12:24:13.783821 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jan 27 12:24:13.785078 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:24:13.789996 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:13.828361 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:13] [NOTICE] dnscrypt-proxy 2.0.45 Jan 27 12:24:13.828563 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:13] [NOTICE] Network connectivity detected Jan 27 12:24:13.828602 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:13] [NOTICE] Dropping privileges Jan 27 12:24:13.830499 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:13] [NOTICE] Network connectivity detected Jan 27 12:24:13.830548 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:13] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jan 27 12:24:13.830548 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:13] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jan 27 12:24:13.830548 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:13] [NOTICE] Firefox workaround initialized Jan 27 12:24:13.830548 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:13] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpge7fuch_] Jan 27 12:24:13.949147 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:24:14.092073 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:24:14.485624 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:14] [NOTICE] [RD] OK (DoH) - rtt: 241ms Jan 27 12:24:14.485624 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:14] [NOTICE] Server with the lowest initial latency: RD (rtt: 241ms) Jan 27 12:24:14.485624 osdx dnscrypt-proxy[224214]: [2026-01-27 12:24:14] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash cadda5fb1405a6b43b17519900de566b425483c229c767ababeecce534770074 at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDK3aX7FAWmtDsXUZkA3lZrQlSDwinHZ6ur7szlNHcAdApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDK3aX7FAWmtDsXUZkA3lZrQlSDwinHZ6ur7szlNHcAdApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jan 27 12:24:21.315983 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.9M, max 13.8M, 11.8M free. Jan 27 12:24:21.317849 osdx systemd-journald[1949]: Received client request to rotate journal, rotating. Jan 27 12:24:21.317927 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4. Jan 27 12:24:21.326750 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'. Jan 27 12:24:21.531689 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'. Jan 27 12:24:21.749669 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:21.857419 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jan 27 12:24:21.910242 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jan 27 12:24:22.016433 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:24:22.075917 osdx ubnt-cfgd[224482]: inactive Jan 27 12:24:22.094714 osdx INFO[224488]: FRR daemons did not change Jan 27 12:24:22.129855 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jan 27 12:24:22.172282 osdx WARNING[224557]: No supported link modes on interface eth0 Jan 27 12:24:22.173537 osdx modulelauncher[224557]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jan 27 12:24:22.173554 osdx modulelauncher[224557]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jan 27 12:24:22.174677 osdx modulelauncher[224557]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jan 27 12:24:22.174687 osdx modulelauncher[224557]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jan 27 12:24:22.214619 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:24:22.225607 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:22.241998 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:24:22.407019 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jan 27 12:24:22.490536 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:24:22.630352 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash cadda5fb1405a6b43b17519900de566b425483c229c767ababeecce534770074'. Jan 27 12:24:22.767672 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:22.827385 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jan 27 12:24:22.949509 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jan 27 12:24:23.018478 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDK3aX7FAWmtDsXUZkA3lZrQlSDwinHZ6ur7szlNHcAdApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Jan 27 12:24:23.134985 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jan 27 12:24:23.312746 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:24:23.377428 osdx ubnt-cfgd[224654]: inactive Jan 27 12:24:23.401995 osdx INFO[224662]: FRR daemons did not change Jan 27 12:24:23.417634 osdx ca-certificates[224677]: Updating certificates in /etc/ssl/certs... Jan 27 12:24:24.021315 osdx ubnt-cfgd[225690]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jan 27 12:24:24.029687 osdx ca-certificates[225696]: 1 added, 0 removed; done. Jan 27 12:24:24.032501 osdx ca-certificates[225702]: Running hooks in /etc/ca-certificates/update.d... Jan 27 12:24:24.036280 osdx ca-certificates[225704]: done. Jan 27 12:24:24.158202 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jan 27 12:24:24.159539 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:24:24.161606 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:24.181353 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:24:24.187202 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] dnscrypt-proxy 2.0.45 Jan 27 12:24:24.187546 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] Network connectivity detected Jan 27 12:24:24.187582 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] Dropping privileges Jan 27 12:24:24.191358 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] Network connectivity detected Jan 27 12:24:24.191450 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jan 27 12:24:24.191450 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jan 27 12:24:24.191450 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] Firefox workaround initialized Jan 27 12:24:24.191450 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp7o_d0t9g] Jan 27 12:24:24.350760 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:24:24.403205 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] [RD] OK (DoH) - rtt: 124ms Jan 27 12:24:24.403205 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] Server with the lowest initial latency: RD (rtt: 124ms) Jan 27 12:24:24.403205 osdx dnscrypt-proxy[225761]: [2026-01-27 12:24:24] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 'b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jan 27 12:24:32.346862 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.8M, max 13.8M, 11.9M free. Jan 27 12:24:32.349261 osdx systemd-journald[1949]: Received client request to rotate journal, rotating. Jan 27 12:24:32.349326 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4. Jan 27 12:24:32.357538 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'. Jan 27 12:24:32.572386 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'. Jan 27 12:24:32.847496 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:32.970201 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jan 27 12:24:33.070385 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jan 27 12:24:33.163274 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:24:33.224325 osdx ubnt-cfgd[227501]: inactive Jan 27 12:24:33.246003 osdx INFO[227507]: FRR daemons did not change Jan 27 12:24:33.277267 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jan 27 12:24:33.318856 osdx WARNING[227576]: No supported link modes on interface eth0 Jan 27 12:24:33.320245 osdx modulelauncher[227576]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jan 27 12:24:33.320258 osdx modulelauncher[227576]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jan 27 12:24:33.321391 osdx modulelauncher[227576]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jan 27 12:24:33.321399 osdx modulelauncher[227576]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jan 27 12:24:33.353847 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:24:33.367614 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:33.383154 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:24:33.547607 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jan 27 12:24:33.646415 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:24:33.745390 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jan 27 12:24:33.947680 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:34.032399 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jan 27 12:24:34.131588 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jan 27 12:24:34.199639 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Jan 27 12:24:34.293643 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Jan 27 12:24:34.363739 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Jan 27 12:24:34.455087 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10'. Jan 27 12:24:34.506999 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jan 27 12:24:34.613138 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:24:34.677729 osdx ubnt-cfgd[227675]: inactive Jan 27 12:24:34.699511 osdx INFO[227683]: FRR daemons did not change Jan 27 12:24:34.711765 osdx ca-certificates[227699]: Updating certificates in /etc/ssl/certs... Jan 27 12:24:35.259412 osdx ubnt-cfgd[228711]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jan 27 12:24:35.266851 osdx ca-certificates[228716]: 1 added, 0 removed; done. Jan 27 12:24:35.269708 osdx ca-certificates[228723]: Running hooks in /etc/ca-certificates/update.d... Jan 27 12:24:35.272520 osdx ca-certificates[228725]: done. Jan 27 12:24:35.389667 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jan 27 12:24:35.391018 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:24:35.393243 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:35.407898 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] dnscrypt-proxy 2.0.45 Jan 27 12:24:35.408117 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] Network connectivity detected Jan 27 12:24:35.408189 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] Dropping privileges Jan 27 12:24:35.410976 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] Network connectivity detected Jan 27 12:24:35.411029 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jan 27 12:24:35.411029 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jan 27 12:24:35.411029 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] Firefox workaround initialized Jan 27 12:24:35.411029 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpaqq3m2rd] Jan 27 12:24:35.454413 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:24:35.498237 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] [RD] OK (DNSCrypt) - rtt: 86ms Jan 27 12:24:35.498237 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] Server with the lowest initial latency: RD (rtt: 86ms) Jan 27 12:24:35.498237 osdx dnscrypt-proxy[228782]: [2026-01-27 12:24:35] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILlA2XuZFQss2VWQCIZXU5kTIAN0eBrYgzPw5Uo0If4QGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILlA2XuZFQss2VWQCIZXU5kTIAN0eBrYgzPw5Uo0If4QGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jan 27 12:24:40.292865 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.8M, max 13.8M, 11.9M free. Jan 27 12:24:40.294929 osdx systemd-journald[1949]: Received client request to rotate journal, rotating. Jan 27 12:24:40.294986 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4. Jan 27 12:24:40.303650 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'. Jan 27 12:24:40.514485 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'. Jan 27 12:24:40.736437 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:40.842524 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jan 27 12:24:40.928964 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jan 27 12:24:40.995957 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:24:41.094751 osdx ubnt-cfgd[230518]: inactive Jan 27 12:24:41.116041 osdx INFO[230524]: FRR daemons did not change Jan 27 12:24:41.142930 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jan 27 12:24:41.189726 osdx WARNING[230593]: No supported link modes on interface eth0 Jan 27 12:24:41.191116 osdx modulelauncher[230593]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jan 27 12:24:41.191127 osdx modulelauncher[230593]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jan 27 12:24:41.192579 osdx modulelauncher[230593]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jan 27 12:24:41.192587 osdx modulelauncher[230593]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jan 27 12:24:41.225749 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:24:41.236765 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:41.255042 osdx OSDxCLI[182842]: User 'admin' left the configuration menu. Jan 27 12:24:41.417844 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jan 27 12:24:41.486977 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'. Jan 27 12:24:41.611754 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jan 27 12:24:41.738865 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10 ip 10.215.168.1 port 8443'. Jan 27 12:24:41.896288 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu. Jan 27 12:24:41.975739 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jan 27 12:24:42.078622 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jan 27 12:24:42.162739 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILlA2XuZFQss2VWQCIZXU5kTIAN0eBrYgzPw5Uo0If4QGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Jan 27 12:24:42.273656 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jan 27 12:24:42.366111 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'. Jan 27 12:24:42.452528 osdx ubnt-cfgd[230692]: inactive Jan 27 12:24:42.475914 osdx INFO[230700]: FRR daemons did not change Jan 27 12:24:42.488463 osdx ca-certificates[230716]: Updating certificates in /etc/ssl/certs... Jan 27 12:24:43.013974 osdx ubnt-cfgd[231728]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jan 27 12:24:43.023219 osdx ca-certificates[231734]: 1 added, 0 removed; done. Jan 27 12:24:43.026635 osdx ca-certificates[231740]: Running hooks in /etc/ca-certificates/update.d... Jan 27 12:24:43.029363 osdx ca-certificates[231742]: done. Jan 27 12:24:43.139281 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jan 27 12:24:43.140605 osdx cfgd[1624]: [182842]Completed change to active configuration Jan 27 12:24:43.142951 osdx OSDxCLI[182842]: User 'admin' committed the configuration. Jan 27 12:24:43.158148 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] dnscrypt-proxy 2.0.45 Jan 27 12:24:43.158349 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] Network connectivity detected Jan 27 12:24:43.158443 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] Dropping privileges Jan 27 12:24:43.160894 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] Network connectivity detected Jan 27 12:24:43.160947 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jan 27 12:24:43.160947 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jan 27 12:24:43.160947 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] Firefox workaround initialized Jan 27 12:24:43.160947 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] Loading the set of cloaking rules from [/tmp/tmphets5ib7] Jan 27 12:24:43.161578 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jan 27 12:24:43.161578 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jan 27 12:24:43.161578 osdx dnscrypt-proxy[231799]: [2026-01-27 12:24:43] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jan 27 12:24:43.161892 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16