Static Server

Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.

Server With Upstream DoH

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server cert file 'running://dns.dut0.crt'
set service dns proxy server cert key 'running://dns.dut0.key'
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https hash cadda5fb1405a6b43b17519900de566b425483c229c767ababeecce534770074
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns resolver local
set service dns static host-name teldat.com inet 10.11.12.13
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Jan 27 12:25:02.304112 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.8M, max 13.8M, 11.9M free.
Jan 27 12:25:02.306191 osdx systemd-journald[1949]: Received client request to rotate journal, rotating.
Jan 27 12:25:02.306247 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4.
Jan 27 12:25:02.314450 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'.
Jan 27 12:25:02.533940 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 27 12:25:02.798998 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu.
Jan 27 12:25:02.893059 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Jan 27 12:25:02.975662 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 27 12:25:03.084326 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:03.154800 osdx ubnt-cfgd[233936]: inactive
Jan 27 12:25:03.173673 osdx INFO[233942]: FRR daemons did not change
Jan 27 12:25:03.202179 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 27 12:25:03.251150 osdx WARNING[234011]: No supported link modes on interface eth0
Jan 27 12:25:03.252705 osdx modulelauncher[234011]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Jan 27 12:25:03.252718 osdx modulelauncher[234011]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Jan 27 12:25:03.254371 osdx modulelauncher[234011]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Jan 27 12:25:03.254384 osdx modulelauncher[234011]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Jan 27 12:25:03.294218 osdx cfgd[1624]: [182842]Completed change to active configuration
Jan 27 12:25:03.305871 osdx OSDxCLI[182842]: User 'admin' committed the configuration.
Jan 27 12:25:03.321639 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Jan 27 12:25:03.472937 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Jan 27 12:25:03.542427 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:04.678394 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu.
Jan 27 12:25:04.765210 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Jan 27 12:25:04.849221 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Jan 27 12:25:04.915662 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Jan 27 12:25:05.003338 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Jan 27 12:25:05.080943 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash cadda5fb1405a6b43b17519900de566b425483c229c767ababeecce534770074'.
Jan 27 12:25:05.174953 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'.
Jan 27 12:25:05.237026 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'.
Jan 27 12:25:05.332774 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Jan 27 12:25:05.390527 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Jan 27 12:25:05.498400 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:05.565710 osdx ubnt-cfgd[234110]: inactive
Jan 27 12:25:05.586561 osdx INFO[234118]: FRR daemons did not change
Jan 27 12:25:05.600109 osdx ca-certificates[234134]: Updating certificates in /etc/ssl/certs...
Jan 27 12:25:06.153114 osdx ubnt-cfgd[235146]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Jan 27 12:25:06.161274 osdx ca-certificates[235151]: 1 added, 0 removed; done.
Jan 27 12:25:06.164149 osdx ca-certificates[235158]: Running hooks in /etc/ca-certificates/update.d...
Jan 27 12:25:06.166857 osdx ca-certificates[235160]: done.
Jan 27 12:25:06.290585 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Jan 27 12:25:06.291985 osdx cfgd[1624]: [182842]Completed change to active configuration
Jan 27 12:25:06.294795 osdx OSDxCLI[182842]: User 'admin' committed the configuration.
Jan 27 12:25:06.310580 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] dnscrypt-proxy 2.0.45
Jan 27 12:25:06.310795 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Network connectivity detected
Jan 27 12:25:06.310656 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Jan 27 12:25:06.310973 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Dropping privileges
Jan 27 12:25:06.313493 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Network connectivity detected
Jan 27 12:25:06.313555 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 27 12:25:06.313555 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 27 12:25:06.313555 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH]
Jan 27 12:25:06.313555 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Firefox workaround initialized
Jan 27 12:25:06.313555 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpjfgvlchb]
Jan 27 12:25:06.489904 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:06.587937 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] [RD] OK (DoH) - rtt: 206ms
Jan 27 12:25:06.587937 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] Server with the lowest initial latency: RD (rtt: 206ms)
Jan 27 12:25:06.587937 osdx dnscrypt-proxy[235220]: [2026-01-27 12:25:06] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.215.168.65/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name DUT0
set service dns proxy static DUT0 protocol dns-over-https hash 12c40bfb5df92fd95801b9126229901e5bcb28821a7a2d668e3e85a6fc458153
set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0
set service dns proxy static DUT0 protocol dns-over-https host port 3000
set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64
set service dns static host-name dns.dut0 inet 10.215.168.64
set service ssh
set system certificate trust 'running://CA.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:

(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$

Show output

Jan 27 12:25:03.288147 osdx systemd-journald[1740]: Runtime Journal (/run/log/journal/37b75af121414321bf655c1ef6ebb727) is 900.0K, max 6.5M, 5.6M free.
Jan 27 12:25:03.288862 osdx systemd-journald[1740]: Received client request to rotate journal, rotating.
Jan 27 12:25:03.288911 osdx systemd-journald[1740]: Vacuuming done, freed 0B of archived journals from /run/log/journal/37b75af121414321bf655c1ef6ebb727.
Jan 27 12:25:03.299969 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system journal clear'.
Jan 27 12:25:03.520684 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 27 12:25:04.604421 osdx OSDxCLI[152046]: User 'admin' entered the configuration menu.
Jan 27 12:25:04.702348 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'.
Jan 27 12:25:04.780661 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 27 12:25:04.836738 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service ssh'.
Jan 27 12:25:04.936550 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:05.012599 osdx ubnt-cfgd[162034]: inactive
Jan 27 12:25:05.077808 osdx INFO[162053]: FRR daemons did not change
Jan 27 12:25:05.104865 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 27 12:25:05.149150 osdx WARNING[162122]: No supported link modes on interface eth0
Jan 27 12:25:05.150522 osdx modulelauncher[162122]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Jan 27 12:25:05.150535 osdx modulelauncher[162122]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Jan 27 12:25:05.151672 osdx modulelauncher[162122]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Jan 27 12:25:05.151681 osdx modulelauncher[162122]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Jan 27 12:25:05.245337 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Jan 27 12:25:05.256997 osdx sshd[162182]: Server listening on 0.0.0.0 port 22.
Jan 27 12:25:05.257021 osdx sshd[162182]: Server listening on :: port 22.
Jan 27 12:25:05.257102 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Jan 27 12:25:05.257917 osdx cfgd[1417]: [152046]Completed change to active configuration
Jan 27 12:25:05.271748 osdx OSDxCLI[152046]: User 'admin' committed the configuration.
Jan 27 12:25:05.348027 osdx OSDxCLI[152046]: User 'admin' left the configuration menu.
Jan 27 12:25:05.443475 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'.
Jan 27 12:25:09.660453 osdx OSDxCLI[152046]: User 'admin' entered the configuration menu.
Jan 27 12:25:09.734897 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'.
Jan 27 12:25:09.816691 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'.
Jan 27 12:25:09.891921 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'.
Jan 27 12:25:09.999625 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'.
Jan 27 12:25:10.053842 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'.
Jan 27 12:25:10.153415 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'.
Jan 27 12:25:10.214567 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 12c40bfb5df92fd95801b9126229901e5bcb28821a7a2d668e3e85a6fc458153'.
Jan 27 12:25:10.344892 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:10.452168 osdx ubnt-cfgd[162229]: inactive
Jan 27 12:25:10.485982 osdx INFO[162237]: FRR daemons did not change
Jan 27 12:25:10.557342 osdx ca-certificates[162253]: Updating certificates in /etc/ssl/certs...
Jan 27 12:25:11.116729 osdx ubnt-cfgd[163265]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Jan 27 12:25:11.126639 osdx ca-certificates[163269]: 1 added, 0 removed; done.
Jan 27 12:25:11.129477 osdx ca-certificates[163277]: Running hooks in /etc/ca-certificates/update.d...
Jan 27 12:25:11.132419 osdx ca-certificates[163279]: done.
Jan 27 12:25:11.233538 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Jan 27 12:25:11.234306 osdx systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups.
Jan 27 12:25:11.236606 osdx cfgd[1417]: [152046]Completed change to active configuration
Jan 27 12:25:11.240302 osdx OSDxCLI[152046]: User 'admin' committed the configuration.
Jan 27 12:25:11.256305 osdx OSDxCLI[152046]: User 'admin' left the configuration menu.
Jan 27 12:25:11.426721 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:11.470975 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] dnscrypt-proxy 2.0.45
Jan 27 12:25:11.471261 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] Network connectivity detected
Jan 27 12:25:11.471261 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] Dropping privileges
Jan 27 12:25:11.473784 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] Network connectivity detected
Jan 27 12:25:11.473883 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 27 12:25:11.473925 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 27 12:25:11.473982 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] Firefox workaround initialized
Jan 27 12:25:11.474019 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpp8f4xtii]
Jan 27 12:25:11.728149 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] [DUT0] OK (DoH) - rtt: 132ms
Jan 27 12:25:11.728149 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 132ms)
Jan 27 12:25:11.728149 osdx dnscrypt-proxy[163286]: [2026-01-27 12:25:11] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:

teldat.com has address 10.11.12.13

Server With Upstream DoH With Stamp

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash cadda5fb1405a6b43b17519900de566b425483c229c767ababeecce534770074 at DUT0 and expect this output:

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server cert file 'running://dns.dut0.crt'
set service dns proxy server cert key 'running://dns.dut0.key'
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDK3aX7FAWmtDsXUZkA3lZrQlSDwinHZ6ur7szlNHcAdApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'
set service dns resolver local
set service dns static host-name teldat.com inet 10.11.12.13
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Jan 27 12:25:20.337696 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.8M, max 13.8M, 11.9M free.
Jan 27 12:25:20.339860 osdx systemd-journald[1949]: Received client request to rotate journal, rotating.
Jan 27 12:25:20.339935 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4.
Jan 27 12:25:20.350168 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'.
Jan 27 12:25:20.585671 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 27 12:25:20.838559 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu.
Jan 27 12:25:20.926683 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Jan 27 12:25:20.996924 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 27 12:25:21.099982 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:21.167714 osdx ubnt-cfgd[236959]: inactive
Jan 27 12:25:21.187525 osdx INFO[236965]: FRR daemons did not change
Jan 27 12:25:21.223894 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 27 12:25:21.272219 osdx WARNING[237034]: No supported link modes on interface eth0
Jan 27 12:25:21.273661 osdx modulelauncher[237034]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Jan 27 12:25:21.273673 osdx modulelauncher[237034]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Jan 27 12:25:21.275106 osdx modulelauncher[237034]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Jan 27 12:25:21.275114 osdx modulelauncher[237034]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Jan 27 12:25:21.314299 osdx cfgd[1624]: [182842]Completed change to active configuration
Jan 27 12:25:21.327771 osdx OSDxCLI[182842]: User 'admin' committed the configuration.
Jan 27 12:25:21.349952 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Jan 27 12:25:21.508303 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Jan 27 12:25:21.574528 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:22.658722 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash cadda5fb1405a6b43b17519900de566b425483c229c767ababeecce534770074'.
Jan 27 12:25:22.796832 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu.
Jan 27 12:25:22.867054 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Jan 27 12:25:22.967762 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Jan 27 12:25:23.049446 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSDK3aX7FAWmtDsXUZkA3lZrQlSDwinHZ6ur7szlNHcAdApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'.
Jan 27 12:25:23.212073 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'.
Jan 27 12:25:23.335298 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'.
Jan 27 12:25:23.400488 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Jan 27 12:25:23.496407 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Jan 27 12:25:23.554593 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Jan 27 12:25:23.684119 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:23.746442 osdx ubnt-cfgd[237135]: inactive
Jan 27 12:25:23.765517 osdx INFO[237143]: FRR daemons did not change
Jan 27 12:25:23.779923 osdx ca-certificates[237158]: Updating certificates in /etc/ssl/certs...
Jan 27 12:25:24.338846 osdx ubnt-cfgd[238171]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Jan 27 12:25:24.348173 osdx ca-certificates[238176]: 1 added, 0 removed; done.
Jan 27 12:25:24.351077 osdx ca-certificates[238183]: Running hooks in /etc/ca-certificates/update.d...
Jan 27 12:25:24.354077 osdx ca-certificates[238185]: done.
Jan 27 12:25:24.472241 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Jan 27 12:25:24.473694 osdx cfgd[1624]: [182842]Completed change to active configuration
Jan 27 12:25:24.479636 osdx OSDxCLI[182842]: User 'admin' committed the configuration.
Jan 27 12:25:24.518337 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] dnscrypt-proxy 2.0.45
Jan 27 12:25:24.518656 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Network connectivity detected
Jan 27 12:25:24.518780 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Dropping privileges
Jan 27 12:25:24.519339 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Jan 27 12:25:24.521669 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Network connectivity detected
Jan 27 12:25:24.521728 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 27 12:25:24.521728 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 27 12:25:24.521728 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH]
Jan 27 12:25:24.521728 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Firefox workaround initialized
Jan 27 12:25:24.521728 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Loading the set of cloaking rules from [/tmp/tmplisdd2ac]
Jan 27 12:25:24.677002 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:24.886659 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] [RD] OK (DoH) - rtt: 153ms
Jan 27 12:25:24.886659 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] Server with the lowest initial latency: RD (rtt: 153ms)
Jan 27 12:25:24.886659 osdx dnscrypt-proxy[238245]: [2026-01-27 12:25:24] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 12c40bfb5df92fd95801b9126229901e5bcb28821a7a2d668e3e85a6fc458153 at DUT1 and expect this output:

Step 5: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.215.168.65/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name DUT0
set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEsQL-135L9lYAbkSYimQHlvLKIIaei1mjj6FpvxFgVMNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'
set service dns static host-name dns.dut0 inet 10.215.168.64
set service ssh
set system certificate trust 'running://CA.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:

(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$

Show output

Jan 27 12:25:20.321126 osdx systemd-journald[1740]: Runtime Journal (/run/log/journal/37b75af121414321bf655c1ef6ebb727) is 932.0K, max 6.5M, 5.6M free.
Jan 27 12:25:20.323221 osdx systemd-journald[1740]: Received client request to rotate journal, rotating.
Jan 27 12:25:20.323284 osdx systemd-journald[1740]: Vacuuming done, freed 0B of archived journals from /run/log/journal/37b75af121414321bf655c1ef6ebb727.
Jan 27 12:25:20.331448 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system journal clear'.
Jan 27 12:25:20.559295 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 27 12:25:21.598549 osdx OSDxCLI[152046]: User 'admin' entered the configuration menu.
Jan 27 12:25:21.690405 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'.
Jan 27 12:25:21.747938 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 27 12:25:21.848523 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service ssh'.
Jan 27 12:25:21.927649 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:22.000781 osdx ubnt-cfgd[164999]: inactive
Jan 27 12:25:22.077795 osdx INFO[165018]: FRR daemons did not change
Jan 27 12:25:22.107224 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 27 12:25:22.156679 osdx WARNING[165087]: No supported link modes on interface eth0
Jan 27 12:25:22.158091 osdx modulelauncher[165087]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Jan 27 12:25:22.158104 osdx modulelauncher[165087]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Jan 27 12:25:22.159321 osdx modulelauncher[165087]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Jan 27 12:25:22.159333 osdx modulelauncher[165087]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Jan 27 12:25:22.255650 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Jan 27 12:25:22.269990 osdx sshd[165147]: Server listening on 0.0.0.0 port 22.
Jan 27 12:25:22.270248 osdx sshd[165147]: Server listening on :: port 22.
Jan 27 12:25:22.270386 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Jan 27 12:25:22.271409 osdx cfgd[1417]: [152046]Completed change to active configuration
Jan 27 12:25:22.284075 osdx OSDxCLI[152046]: User 'admin' committed the configuration.
Jan 27 12:25:22.299500 osdx OSDxCLI[152046]: User 'admin' left the configuration menu.
Jan 27 12:25:22.447745 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'.
Jan 27 12:25:26.820362 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 12c40bfb5df92fd95801b9126229901e5bcb28821a7a2d668e3e85a6fc458153'.
Jan 27 12:25:26.968541 osdx OSDxCLI[152046]: User 'admin' entered the configuration menu.
Jan 27 12:25:27.050193 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'.
Jan 27 12:25:27.154657 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'.
Jan 27 12:25:27.222973 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'.
Jan 27 12:25:27.335977 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEsQL-135L9lYAbkSYimQHlvLKIIaei1mjj6FpvxFgVMNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'.
Jan 27 12:25:27.411077 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:27.506435 osdx ubnt-cfgd[165196]: inactive
Jan 27 12:25:27.527182 osdx INFO[165204]: FRR daemons did not change
Jan 27 12:25:27.541735 osdx ca-certificates[165220]: Updating certificates in /etc/ssl/certs...
Jan 27 12:25:28.051666 osdx ubnt-cfgd[166232]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Jan 27 12:25:28.058712 osdx ca-certificates[166237]: 1 added, 0 removed; done.
Jan 27 12:25:28.061809 osdx ca-certificates[166244]: Running hooks in /etc/ca-certificates/update.d...
Jan 27 12:25:28.064544 osdx ca-certificates[166246]: done.
Jan 27 12:25:28.131758 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Jan 27 12:25:28.134896 osdx cfgd[1417]: [152046]Completed change to active configuration
Jan 27 12:25:28.137266 osdx OSDxCLI[152046]: User 'admin' committed the configuration.
Jan 27 12:25:28.156734 osdx OSDxCLI[152046]: User 'admin' left the configuration menu.
Jan 27 12:25:28.166758 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] dnscrypt-proxy 2.0.45
Jan 27 12:25:28.166916 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] Network connectivity detected
Jan 27 12:25:28.166989 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] Dropping privileges
Jan 27 12:25:28.169072 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] Network connectivity detected
Jan 27 12:25:28.169113 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 27 12:25:28.169113 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 27 12:25:28.169113 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] Firefox workaround initialized
Jan 27 12:25:28.169113 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpz4d97zz2]
Jan 27 12:25:28.340126 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:28.403269 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] [DUT0] OK (DoH) - rtt: 121ms
Jan 27 12:25:28.403269 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 121ms)
Jan 27 12:25:28.403269 osdx dnscrypt-proxy[166253]: [2026-01-27 12:25:28] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:

teldat.com has address 10.11.12.13

Server With Upstream DNSCrypt

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server.

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server cert file 'running://dns.dut0.crt'
set service dns proxy server cert key 'running://dns.dut0.key'
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-crypt ip 10.215.168.1
set service dns proxy static RD protocol dns-crypt port 8443
set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns
set service dns proxy static RD protocol dns-crypt provider public-key 'b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10'
set service dns resolver local
set service dns static host-name teldat.com inet 10.11.12.13
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$

Show output

Jan 27 12:25:37.410730 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.8M, max 13.8M, 11.9M free.
Jan 27 12:25:37.412270 osdx systemd-journald[1949]: Received client request to rotate journal, rotating.
Jan 27 12:25:37.412320 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4.
Jan 27 12:25:37.425230 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'.
Jan 27 12:25:37.756055 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 27 12:25:37.984307 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu.
Jan 27 12:25:38.075474 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Jan 27 12:25:38.141908 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 27 12:25:38.245286 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:38.304848 osdx ubnt-cfgd[239987]: inactive
Jan 27 12:25:38.323002 osdx INFO[239993]: FRR daemons did not change
Jan 27 12:25:38.351469 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 27 12:25:38.394726 osdx WARNING[240062]: No supported link modes on interface eth0
Jan 27 12:25:38.396201 osdx modulelauncher[240062]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Jan 27 12:25:38.396218 osdx modulelauncher[240062]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Jan 27 12:25:38.397405 osdx modulelauncher[240062]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Jan 27 12:25:38.397416 osdx modulelauncher[240062]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Jan 27 12:25:38.429463 osdx cfgd[1624]: [182842]Completed change to active configuration
Jan 27 12:25:38.440557 osdx OSDxCLI[182842]: User 'admin' committed the configuration.
Jan 27 12:25:38.455627 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Jan 27 12:25:38.621848 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Jan 27 12:25:38.696778 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:39.777792 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Jan 27 12:25:39.912691 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu.
Jan 27 12:25:39.974078 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Jan 27 12:25:40.124749 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Jan 27 12:25:40.193202 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'.
Jan 27 12:25:40.319146 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'.
Jan 27 12:25:40.438126 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'.
Jan 27 12:25:40.585353 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10'.
Jan 27 12:25:40.697488 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Jan 27 12:25:40.815579 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'.
Jan 27 12:25:40.950367 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'.
Jan 27 12:25:41.026754 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Jan 27 12:25:41.133620 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:41.212083 osdx ubnt-cfgd[240165]: inactive
Jan 27 12:25:41.232103 osdx INFO[240173]: FRR daemons did not change
Jan 27 12:25:41.243344 osdx ca-certificates[240189]: Updating certificates in /etc/ssl/certs...
Jan 27 12:25:41.776585 osdx ubnt-cfgd[241201]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Jan 27 12:25:41.785166 osdx ca-certificates[241207]: 1 added, 0 removed; done.
Jan 27 12:25:41.788010 osdx ca-certificates[241213]: Running hooks in /etc/ca-certificates/update.d...
Jan 27 12:25:41.790679 osdx ca-certificates[241215]: done.
Jan 27 12:25:41.911824 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Jan 27 12:25:41.913109 osdx cfgd[1624]: [182842]Completed change to active configuration
Jan 27 12:25:41.915681 osdx OSDxCLI[182842]: User 'admin' committed the configuration.
Jan 27 12:25:41.931647 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Jan 27 12:25:41.936045 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] dnscrypt-proxy 2.0.45
Jan 27 12:25:41.936223 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Network connectivity detected
Jan 27 12:25:41.936389 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Dropping privileges
Jan 27 12:25:41.938939 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Network connectivity detected
Jan 27 12:25:41.938982 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 27 12:25:41.938982 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 27 12:25:41.938982 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH]
Jan 27 12:25:41.939026 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Firefox workaround initialized
Jan 27 12:25:41.939026 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpp2ir5e03]
Jan 27 12:25:41.939735 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Jan 27 12:25:41.939770 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Jan 27 12:25:41.939770 osdx dnscrypt-proxy[241275]: [2026-01-27 12:25:41] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.215.168.65/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name DUT0
set service dns proxy static DUT0 protocol dns-over-https hash 12c40bfb5df92fd95801b9126229901e5bcb28821a7a2d668e3e85a6fc458153
set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0
set service dns proxy static DUT0 protocol dns-over-https host port 3000
set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64
set service dns static host-name dns.dut0 inet 10.215.168.64
set service ssh
set system certificate trust 'running://CA.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:

(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$

Show output

Jan 27 12:25:37.389086 osdx systemd-journald[1740]: Runtime Journal (/run/log/journal/37b75af121414321bf655c1ef6ebb727) is 956.0K, max 6.5M, 5.5M free.
Jan 27 12:25:37.389743 osdx systemd-journald[1740]: Received client request to rotate journal, rotating.
Jan 27 12:25:37.389796 osdx systemd-journald[1740]: Vacuuming done, freed 0B of archived journals from /run/log/journal/37b75af121414321bf655c1ef6ebb727.
Jan 27 12:25:37.399020 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system journal clear'.
Jan 27 12:25:37.676183 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 27 12:25:38.684367 osdx OSDxCLI[152046]: User 'admin' entered the configuration menu.
Jan 27 12:25:38.781053 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'.
Jan 27 12:25:38.870964 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 27 12:25:38.972402 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service ssh'.
Jan 27 12:25:39.041480 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:39.133734 osdx ubnt-cfgd[167965]: inactive
Jan 27 12:25:39.202346 osdx INFO[167984]: FRR daemons did not change
Jan 27 12:25:39.229744 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 27 12:25:39.275476 osdx WARNING[168053]: No supported link modes on interface eth0
Jan 27 12:25:39.277152 osdx modulelauncher[168053]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Jan 27 12:25:39.277235 osdx modulelauncher[168053]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Jan 27 12:25:39.278561 osdx modulelauncher[168053]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Jan 27 12:25:39.278616 osdx modulelauncher[168053]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Jan 27 12:25:39.370103 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Jan 27 12:25:39.382316 osdx sshd[168113]: Server listening on 0.0.0.0 port 22.
Jan 27 12:25:39.382340 osdx sshd[168113]: Server listening on :: port 22.
Jan 27 12:25:39.382425 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Jan 27 12:25:39.383339 osdx cfgd[1417]: [152046]Completed change to active configuration
Jan 27 12:25:39.399593 osdx OSDxCLI[152046]: User 'admin' committed the configuration.
Jan 27 12:25:39.414748 osdx OSDxCLI[152046]: User 'admin' left the configuration menu.
Jan 27 12:25:39.561377 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'.
Jan 27 12:25:42.109551 osdx OSDxCLI[152046]: User 'admin' entered the configuration menu.
Jan 27 12:25:42.169983 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'.
Jan 27 12:25:42.276072 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'.
Jan 27 12:25:42.349053 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'.
Jan 27 12:25:42.458945 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'.
Jan 27 12:25:42.524949 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'.
Jan 27 12:25:42.635809 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'.
Jan 27 12:25:42.719664 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 12c40bfb5df92fd95801b9126229901e5bcb28821a7a2d668e3e85a6fc458153'.
Jan 27 12:25:42.847900 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:42.979439 osdx ubnt-cfgd[168160]: inactive
Jan 27 12:25:43.004614 osdx INFO[168168]: FRR daemons did not change
Jan 27 12:25:43.018834 osdx ca-certificates[168184]: Updating certificates in /etc/ssl/certs...
Jan 27 12:25:43.564657 osdx ubnt-cfgd[169196]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Jan 27 12:25:43.572746 osdx ca-certificates[169201]: 1 added, 0 removed; done.
Jan 27 12:25:43.575847 osdx ca-certificates[169208]: Running hooks in /etc/ca-certificates/update.d...
Jan 27 12:25:43.578756 osdx ca-certificates[169210]: done.
Jan 27 12:25:43.662416 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Jan 27 12:25:43.664874 osdx cfgd[1417]: [152046]Completed change to active configuration
Jan 27 12:25:43.668344 osdx OSDxCLI[152046]: User 'admin' committed the configuration.
Jan 27 12:25:43.684778 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] dnscrypt-proxy 2.0.45
Jan 27 12:25:43.684778 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] Network connectivity detected
Jan 27 12:25:43.684778 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] Dropping privileges
Jan 27 12:25:43.685480 osdx OSDxCLI[152046]: User 'admin' left the configuration menu.
Jan 27 12:25:43.686651 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] Network connectivity detected
Jan 27 12:25:43.686695 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 27 12:25:43.686695 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 27 12:25:43.686740 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] Firefox workaround initialized
Jan 27 12:25:43.686740 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpir2qr1zr]
Jan 27 12:25:43.841653 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:43.983769 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] [DUT0] OK (DoH) - rtt: 143ms
Jan 27 12:25:43.983769 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 143ms)
Jan 27 12:25:43.983769 osdx dnscrypt-proxy[169217]: [2026-01-27 12:25:43] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:

teldat.com has address 10.11.12.13

Server With Upstream DNSCrypt With Stamp

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10 ip 10.215.168.1 port 8443 at DUT0 and expect this output:

Step 3: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server cert file 'running://dns.dut0.crt'
set service dns proxy server cert key 'running://dns.dut0.key'
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILlA2XuZFQss2VWQCIZXU5kTIAN0eBrYgzPw5Uo0If4QGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'
set service dns resolver local
set service dns static host-name teldat.com inet 10.11.12.13
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$

Show output

Jan 27 12:25:52.403123 osdx systemd-journald[1949]: Runtime Journal (/run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4) is 1.8M, max 13.8M, 11.9M free.
Jan 27 12:25:52.403741 osdx systemd-journald[1949]: Received client request to rotate journal, rotating.
Jan 27 12:25:52.403782 osdx systemd-journald[1949]: Vacuuming done, freed 0B of archived journals from /run/log/journal/19d27b7fd9034c15b59c452d6ca2fcd4.
Jan 27 12:25:52.413902 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal clear'.
Jan 27 12:25:52.656148 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 27 12:25:52.913960 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu.
Jan 27 12:25:53.055043 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Jan 27 12:25:53.144373 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 27 12:25:53.217754 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:53.316485 osdx ubnt-cfgd[243012]: inactive
Jan 27 12:25:53.334899 osdx INFO[243018]: FRR daemons did not change
Jan 27 12:25:53.363393 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 27 12:25:53.409531 osdx WARNING[243087]: No supported link modes on interface eth0
Jan 27 12:25:53.411009 osdx modulelauncher[243087]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Jan 27 12:25:53.411025 osdx modulelauncher[243087]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Jan 27 12:25:53.412283 osdx modulelauncher[243087]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Jan 27 12:25:53.412293 osdx modulelauncher[243087]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Jan 27 12:25:53.448499 osdx cfgd[1624]: [182842]Completed change to active configuration
Jan 27 12:25:53.459640 osdx OSDxCLI[182842]: User 'admin' committed the configuration.
Jan 27 12:25:53.476172 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Jan 27 12:25:53.634077 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Jan 27 12:25:53.702533 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:55.111948 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Jan 27 12:25:55.235835 osdx OSDxCLI[182842]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key b9:40:d9:7b:99:15:0b:2c:d9:55:90:08:86:57:53:99:13:20:03:74:78:1a:d8:83:33:f0:e5:4a:34:21:fe:10 ip 10.215.168.1 port 8443'.
Jan 27 12:25:55.400613 osdx OSDxCLI[182842]: User 'admin' entered the configuration menu.
Jan 27 12:25:55.530612 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Jan 27 12:25:55.647865 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Jan 27 12:25:55.761801 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILlA2XuZFQss2VWQCIZXU5kTIAN0eBrYgzPw5Uo0If4QGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'.
Jan 27 12:25:55.844269 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Jan 27 12:25:55.962895 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'.
Jan 27 12:25:56.033098 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'.
Jan 27 12:25:56.130157 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Jan 27 12:25:56.244646 osdx OSDxCLI[182842]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:56.357674 osdx ubnt-cfgd[243189]: inactive
Jan 27 12:25:56.388056 osdx INFO[243197]: FRR daemons did not change
Jan 27 12:25:56.407581 osdx ca-certificates[243213]: Updating certificates in /etc/ssl/certs...
Jan 27 12:25:57.048283 osdx ubnt-cfgd[244225]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Jan 27 12:25:57.058306 osdx ca-certificates[244231]: 1 added, 0 removed; done.
Jan 27 12:25:57.061676 osdx ca-certificates[244237]: Running hooks in /etc/ca-certificates/update.d...
Jan 27 12:25:57.065580 osdx ca-certificates[244239]: done.
Jan 27 12:25:57.175732 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Jan 27 12:25:57.177135 osdx cfgd[1624]: [182842]Completed change to active configuration
Jan 27 12:25:57.179814 osdx OSDxCLI[182842]: User 'admin' committed the configuration.
Jan 27 12:25:57.196074 osdx OSDxCLI[182842]: User 'admin' left the configuration menu.
Jan 27 12:25:57.206080 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] dnscrypt-proxy 2.0.45
Jan 27 12:25:57.206835 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Network connectivity detected
Jan 27 12:25:57.206835 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Dropping privileges
Jan 27 12:25:57.211172 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Network connectivity detected
Jan 27 12:25:57.211172 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 27 12:25:57.211172 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 27 12:25:57.211172 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH]
Jan 27 12:25:57.211172 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Firefox workaround initialized
Jan 27 12:25:57.211172 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpcojyt1fr]
Jan 27 12:25:57.214168 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] [RD] OK (DNSCrypt) - rtt: 1ms
Jan 27 12:25:57.214318 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] Server with the lowest initial latency: RD (rtt: 1ms)
Jan 27 12:25:57.214318 osdx dnscrypt-proxy[244299]: [2026-01-27 12:25:57] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 12c40bfb5df92fd95801b9126229901e5bcb28821a7a2d668e3e85a6fc458153 at DUT1 and expect this output:

Step 6: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.215.168.65/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name DUT0
set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEsQL-135L9lYAbkSYimQHlvLKIIaei1mjj6FpvxFgVMNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'
set service dns static host-name dns.dut0 inet 10.215.168.64
set service ssh
set system certificate trust 'running://CA.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:

(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$

Show output

Jan 27 12:25:52.323829 osdx systemd-journald[1740]: Runtime Journal (/run/log/journal/37b75af121414321bf655c1ef6ebb727) is 956.0K, max 6.5M, 5.5M free.
Jan 27 12:25:52.324570 osdx systemd-journald[1740]: Received client request to rotate journal, rotating.
Jan 27 12:25:52.324632 osdx systemd-journald[1740]: Vacuuming done, freed 0B of archived journals from /run/log/journal/37b75af121414321bf655c1ef6ebb727.
Jan 27 12:25:52.335100 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system journal clear'.
Jan 27 12:25:52.568260 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system coredump delete all'.
Jan 27 12:25:53.747387 osdx OSDxCLI[152046]: User 'admin' entered the configuration menu.
Jan 27 12:25:53.854068 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'.
Jan 27 12:25:53.968147 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Jan 27 12:25:54.069403 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service ssh'.
Jan 27 12:25:54.148250 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:54.296822 osdx ubnt-cfgd[170931]: inactive
Jan 27 12:25:54.380008 osdx INFO[170950]: FRR daemons did not change
Jan 27 12:25:54.416580 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Jan 27 12:25:54.474880 osdx WARNING[171019]: No supported link modes on interface eth0
Jan 27 12:25:54.477055 osdx modulelauncher[171019]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Jan 27 12:25:54.477131 osdx modulelauncher[171019]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Jan 27 12:25:54.478706 osdx modulelauncher[171019]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Jan 27 12:25:54.478764 osdx modulelauncher[171019]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Jan 27 12:25:54.593120 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Jan 27 12:25:54.607082 osdx sshd[171079]: Server listening on 0.0.0.0 port 22.
Jan 27 12:25:54.607106 osdx sshd[171079]: Server listening on :: port 22.
Jan 27 12:25:54.607200 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Jan 27 12:25:54.608287 osdx cfgd[1417]: [152046]Completed change to active configuration
Jan 27 12:25:54.629485 osdx OSDxCLI[152046]: User 'admin' committed the configuration.
Jan 27 12:25:54.673190 osdx OSDxCLI[152046]: User 'admin' left the configuration menu.
Jan 27 12:25:54.838104 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'.
Jan 27 12:25:57.382246 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 12c40bfb5df92fd95801b9126229901e5bcb28821a7a2d668e3e85a6fc458153'.
Jan 27 12:25:57.560313 osdx OSDxCLI[152046]: User 'admin' entered the configuration menu.
Jan 27 12:25:57.645254 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'.
Jan 27 12:25:57.775445 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'.
Jan 27 12:25:57.871802 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'.
Jan 27 12:25:57.999653 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEsQL-135L9lYAbkSYimQHlvLKIIaei1mjj6FpvxFgVMNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'.
Jan 27 12:25:58.133000 osdx OSDxCLI[152046]: User 'admin' added a new cfg line: 'show working'.
Jan 27 12:25:58.210614 osdx ubnt-cfgd[171126]: inactive
Jan 27 12:25:58.236754 osdx INFO[171134]: FRR daemons did not change
Jan 27 12:25:58.255212 osdx ca-certificates[171148]: Updating certificates in /etc/ssl/certs...
Jan 27 12:25:58.920453 osdx ubnt-cfgd[172162]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Jan 27 12:25:58.930990 osdx ca-certificates[172168]: 1 added, 0 removed; done.
Jan 27 12:25:58.935004 osdx ca-certificates[172174]: Running hooks in /etc/ca-certificates/update.d...
Jan 27 12:25:58.938839 osdx ca-certificates[172176]: done.
Jan 27 12:25:59.025165 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Jan 27 12:25:59.027192 osdx cfgd[1417]: [152046]Completed change to active configuration
Jan 27 12:25:59.029913 osdx OSDxCLI[152046]: User 'admin' committed the configuration.
Jan 27 12:25:59.054409 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] dnscrypt-proxy 2.0.45
Jan 27 12:25:59.054667 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] Network connectivity detected
Jan 27 12:25:59.054779 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] Dropping privileges
Jan 27 12:25:59.057502 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] Network connectivity detected
Jan 27 12:25:59.057562 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Jan 27 12:25:59.057562 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Jan 27 12:25:59.057562 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] Firefox workaround initialized
Jan 27 12:25:59.057562 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp6rul5vid]
Jan 27 12:25:59.065431 osdx OSDxCLI[152046]: User 'admin' left the configuration menu.
Jan 27 12:25:59.279314 osdx OSDxCLI[152046]: User 'admin' executed a new command: 'system journal show | cat'.
Jan 27 12:25:59.308754 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] [DUT0] OK (DoH) - rtt: 138ms
Jan 27 12:25:59.308754 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 138ms)
Jan 27 12:25:59.308754 osdx dnscrypt-proxy[172183]: [2026-01-27 12:25:59] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:

teldat.com has address 10.11.12.13