Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash ff80e2d024d82777d02b37c8a1ed89520186169f14f43384f0622363e9f2d2a7 set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 12 17:48:16.343973 osdx systemd-journald[1959]: Runtime Journal (/run/log/journal/fef7273cfed74888920ec39438478308) is 2.3M, max 17.2M, 14.9M free. Feb 12 17:48:16.344767 osdx systemd-journald[1959]: Received client request to rotate journal, rotating. Feb 12 17:48:16.344815 osdx systemd-journald[1959]: Vacuuming done, freed 0B of archived journals from /run/log/journal/fef7273cfed74888920ec39438478308. Feb 12 17:48:16.357257 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal clear'. Feb 12 17:48:16.656402 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system coredump delete all'. Feb 12 17:48:17.037773 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:17.199387 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 12 17:48:17.339711 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 12 17:48:17.471455 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:48:17.577320 osdx ubnt-cfgd[232233]: inactive Feb 12 17:48:17.604744 osdx INFO[232239]: FRR daemons did not change Feb 12 17:48:17.644313 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 12 17:48:17.703407 osdx WARNING[232308]: No supported link modes on interface eth0 Feb 12 17:48:17.705136 osdx modulelauncher[232308]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 12 17:48:17.705153 osdx modulelauncher[232308]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 12 17:48:17.707194 osdx modulelauncher[232308]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 12 17:48:17.707210 osdx modulelauncher[232308]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 12 17:48:17.750142 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:48:17.763466 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:17.795430 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:17.983540 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 12 17:48:18.062801 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal show | cat'. Feb 12 17:48:18.329096 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:18.699268 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 12 17:48:18.776580 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 12 17:48:18.885735 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Feb 12 17:48:19.024228 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Feb 12 17:48:19.148209 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash ff80e2d024d82777d02b37c8a1ed89520186169f14f43384f0622363e9f2d2a7'. Feb 12 17:48:19.259644 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 12 17:48:19.368611 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:48:19.495438 osdx ubnt-cfgd[232404]: inactive Feb 12 17:48:19.528126 osdx INFO[232412]: FRR daemons did not change Feb 12 17:48:19.543137 osdx ca-certificates[232428]: Updating certificates in /etc/ssl/certs... Feb 12 17:48:20.207587 osdx ubnt-cfgd[233440]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 12 17:48:20.220924 osdx ca-certificates[233446]: 1 added, 0 removed; done. Feb 12 17:48:20.225179 osdx ca-certificates[233452]: Running hooks in /etc/ca-certificates/update.d... Feb 12 17:48:20.229470 osdx ca-certificates[233454]: done. Feb 12 17:48:20.364814 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 12 17:48:20.371558 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:48:20.374951 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:20.400823 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] dnscrypt-proxy 2.0.45 Feb 12 17:48:20.401284 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] Network connectivity detected Feb 12 17:48:20.402098 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] Dropping privileges Feb 12 17:48:20.406014 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] Network connectivity detected Feb 12 17:48:20.406014 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 12 17:48:20.406014 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 12 17:48:20.406014 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] Firefox workaround initialized Feb 12 17:48:20.406014 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp8u49l25j] Feb 12 17:48:20.414080 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:20.651658 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal show | cat'. Feb 12 17:48:20.661032 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] [RD] OK (DoH) - rtt: 227ms Feb 12 17:48:20.661032 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] Server with the lowest initial latency: RD (rtt: 227ms) Feb 12 17:48:20.661032 osdx dnscrypt-proxy[233510]: [2026-02-12 17:48:20] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Feb 12 17:48:33.338384 osdx systemd-journald[1959]: Runtime Journal (/run/log/journal/fef7273cfed74888920ec39438478308) is 2.2M, max 17.2M, 14.9M free. Feb 12 17:48:33.341496 osdx systemd-journald[1959]: Received client request to rotate journal, rotating. Feb 12 17:48:33.341621 osdx systemd-journald[1959]: Vacuuming done, freed 0B of archived journals from /run/log/journal/fef7273cfed74888920ec39438478308. Feb 12 17:48:33.350685 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal clear'. Feb 12 17:48:33.635198 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system coredump delete all'. Feb 12 17:48:33.951518 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:34.043788 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 12 17:48:34.114553 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 12 17:48:34.220135 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:48:34.283679 osdx ubnt-cfgd[235256]: inactive Feb 12 17:48:34.305946 osdx INFO[235262]: FRR daemons did not change Feb 12 17:48:34.341480 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 12 17:48:34.381447 osdx WARNING[235331]: No supported link modes on interface eth0 Feb 12 17:48:34.383369 osdx modulelauncher[235331]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 12 17:48:34.383381 osdx modulelauncher[235331]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 12 17:48:34.384933 osdx modulelauncher[235331]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 12 17:48:34.384942 osdx modulelauncher[235331]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 12 17:48:34.421859 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:48:34.433609 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:34.449279 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:34.627482 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 12 17:48:34.731692 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal show | cat'. Feb 12 17:48:35.309294 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:35.370899 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 12 17:48:35.527336 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:48:35.631441 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:35.682603 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:35.884104 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:35.951213 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 12 17:48:36.057595 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Feb 12 17:48:36.138408 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Feb 12 17:48:36.208109 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 12 17:48:36.338890 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show changes'. Feb 12 17:48:36.431052 osdx ubnt-cfgd[235434]: inactive Feb 12 17:48:36.847828 osdx INFO[235440]: FRR daemons did not change Feb 12 17:48:36.957937 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 12 17:48:36.959683 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:48:36.962232 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:36.983286 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:36] [NOTICE] dnscrypt-proxy 2.0.45 Feb 12 17:48:36.983651 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:36] [NOTICE] Network connectivity detected Feb 12 17:48:36.983899 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:36] [NOTICE] Dropping privileges Feb 12 17:48:36.987579 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:36] [NOTICE] Network connectivity detected Feb 12 17:48:36.987654 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:36] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 12 17:48:36.987654 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:36] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 12 17:48:36.987654 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:36] [NOTICE] Firefox workaround initialized Feb 12 17:48:36.987654 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:36] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpoxz4p9cc] Feb 12 17:48:36.988049 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:37.064223 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:37] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABAiNKMs5Avl_Rw23oUWNqGq": x509: certificate signed by unknown authority Feb 12 17:48:37.064378 osdx dnscrypt-proxy[235498]: [2026-02-12 17:48:37] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 12 17:48:47.315090 osdx systemd-journald[1959]: Runtime Journal (/run/log/journal/fef7273cfed74888920ec39438478308) is 2.2M, max 17.2M, 14.9M free. Feb 12 17:48:47.318217 osdx systemd-journald[1959]: Received client request to rotate journal, rotating. Feb 12 17:48:47.318267 osdx systemd-journald[1959]: Vacuuming done, freed 0B of archived journals from /run/log/journal/fef7273cfed74888920ec39438478308. Feb 12 17:48:47.328418 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal clear'. Feb 12 17:48:47.626519 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system coredump delete all'. Feb 12 17:48:47.949518 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:48.036357 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 12 17:48:48.160571 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 12 17:48:48.241291 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:48:48.347209 osdx ubnt-cfgd[235765]: inactive Feb 12 17:48:48.377191 osdx INFO[235771]: FRR daemons did not change Feb 12 17:48:48.414219 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 12 17:48:48.466887 osdx WARNING[235840]: No supported link modes on interface eth0 Feb 12 17:48:48.468664 osdx modulelauncher[235840]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 12 17:48:48.468678 osdx modulelauncher[235840]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 12 17:48:48.470016 osdx modulelauncher[235840]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 12 17:48:48.470033 osdx modulelauncher[235840]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 12 17:48:48.519548 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:48:48.533841 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:48.562739 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:48.717267 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 12 17:48:48.789355 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal show | cat'. Feb 12 17:48:48.932411 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:49.014449 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 12 17:48:49.138173 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:48:49.196286 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:49.257655 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:49.450840 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:49.570113 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 12 17:48:49.677399 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Feb 12 17:48:49.786385 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Feb 12 17:48:49.899124 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Feb 12 17:48:50.019091 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 12 17:48:50.146443 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show changes'. Feb 12 17:48:50.289446 osdx ubnt-cfgd[235944]: inactive Feb 12 17:48:50.322858 osdx INFO[235950]: FRR daemons did not change Feb 12 17:48:50.482648 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 12 17:48:50.484088 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:48:50.486862 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:50.513217 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:50.514140 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] dnscrypt-proxy 2.0.45 Feb 12 17:48:50.514443 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] Network connectivity detected Feb 12 17:48:50.514783 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] Dropping privileges Feb 12 17:48:50.517953 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] Network connectivity detected Feb 12 17:48:50.518078 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 12 17:48:50.518114 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 12 17:48:50.518160 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] Firefox workaround initialized Feb 12 17:48:50.518214 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpudn6eagk] Feb 12 17:48:50.627794 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] [RD] OK (DoH) - rtt: 76ms Feb 12 17:48:50.627794 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] Server with the lowest initial latency: RD (rtt: 76ms) Feb 12 17:48:50.627794 osdx dnscrypt-proxy[236008]: [2026-02-12 17:48:50] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash ff80e2d024d82777d02b37c8a1ed89520186169f14f43384f0622363e9f2d2a7 at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD_gOLQJNgnd9ArN8ih7YlSAYYWnxT0M4TwYiNj6fLSpwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD_gOLQJNgnd9ArN8ih7YlSAYYWnxT0M4TwYiNj6fLSpwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 12 17:48:56.347714 osdx systemd-journald[1959]: Runtime Journal (/run/log/journal/fef7273cfed74888920ec39438478308) is 2.2M, max 17.2M, 14.9M free. Feb 12 17:48:56.351509 osdx systemd-journald[1959]: Received client request to rotate journal, rotating. Feb 12 17:48:56.351587 osdx systemd-journald[1959]: Vacuuming done, freed 0B of archived journals from /run/log/journal/fef7273cfed74888920ec39438478308. Feb 12 17:48:56.360682 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal clear'. Feb 12 17:48:56.654007 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system coredump delete all'. Feb 12 17:48:56.942430 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:57.050021 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 12 17:48:57.121270 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 12 17:48:57.219427 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:48:57.309708 osdx ubnt-cfgd[236277]: inactive Feb 12 17:48:57.333776 osdx INFO[236283]: FRR daemons did not change Feb 12 17:48:57.407514 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 12 17:48:57.456185 osdx WARNING[236352]: No supported link modes on interface eth0 Feb 12 17:48:57.458361 osdx modulelauncher[236352]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 12 17:48:57.458375 osdx modulelauncher[236352]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 12 17:48:57.459923 osdx modulelauncher[236352]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 12 17:48:57.459936 osdx modulelauncher[236352]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 12 17:48:57.501463 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:48:57.515095 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:57.534878 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:57.695364 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 12 17:48:57.796483 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal show | cat'. Feb 12 17:48:57.947141 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash ff80e2d024d82777d02b37c8a1ed89520186169f14f43384f0622363e9f2d2a7'. Feb 12 17:48:58.128189 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:48:58.209231 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 12 17:48:58.314102 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 12 17:48:58.396503 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD_gOLQJNgnd9ArN8ih7YlSAYYWnxT0M4TwYiNj6fLSpwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Feb 12 17:48:58.513101 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 12 17:48:58.610744 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:48:58.699616 osdx ubnt-cfgd[236449]: inactive Feb 12 17:48:58.723571 osdx INFO[236457]: FRR daemons did not change Feb 12 17:48:58.738706 osdx ca-certificates[236473]: Updating certificates in /etc/ssl/certs... Feb 12 17:48:59.323723 osdx ubnt-cfgd[237485]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 12 17:48:59.331703 osdx ca-certificates[237491]: 1 added, 0 removed; done. Feb 12 17:48:59.334636 osdx ca-certificates[237497]: Running hooks in /etc/ca-certificates/update.d... Feb 12 17:48:59.337487 osdx ca-certificates[237499]: done. Feb 12 17:48:59.451940 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 12 17:48:59.453383 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:48:59.456090 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:48:59.472806 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:48:59.473026 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] dnscrypt-proxy 2.0.45 Feb 12 17:48:59.473166 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] Network connectivity detected Feb 12 17:48:59.473267 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] Dropping privileges Feb 12 17:48:59.476135 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] Network connectivity detected Feb 12 17:48:59.476205 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 12 17:48:59.476205 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 12 17:48:59.476205 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] Firefox workaround initialized Feb 12 17:48:59.476205 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpujvt37sd] Feb 12 17:48:59.566831 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] [RD] OK (DoH) - rtt: 71ms Feb 12 17:48:59.566831 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] Server with the lowest initial latency: RD (rtt: 71ms) Feb 12 17:48:59.566831 osdx dnscrypt-proxy[237555]: [2026-02-12 17:48:59] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
e3:36:1c:08:56:19:37:f9:ec:95:e3:77:f7:65:f8:dc:33:96:84:dd:91:3f:72:f0:73:13:4c:fe:6a:d0:3e:ad
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 'e3:36:1c:08:56:19:37:f9:ec:95:e3:77:f7:65:f8:dc:33:96:84:dd:91:3f:72:f0:73:13:4c:fe:6a:d0:3e:ad' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Feb 12 17:49:05.302621 osdx systemd-journald[1959]: Runtime Journal (/run/log/journal/fef7273cfed74888920ec39438478308) is 2.2M, max 17.2M, 14.9M free. Feb 12 17:49:05.304381 osdx systemd-journald[1959]: Received client request to rotate journal, rotating. Feb 12 17:49:05.304450 osdx systemd-journald[1959]: Vacuuming done, freed 0B of archived journals from /run/log/journal/fef7273cfed74888920ec39438478308. Feb 12 17:49:05.313429 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal clear'. Feb 12 17:49:05.620971 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system coredump delete all'. Feb 12 17:49:05.875337 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:49:05.972702 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 12 17:49:06.054251 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 12 17:49:06.174987 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:49:06.234155 osdx ubnt-cfgd[239299]: inactive Feb 12 17:49:06.257163 osdx INFO[239305]: FRR daemons did not change Feb 12 17:49:06.292355 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 12 17:49:06.334021 osdx WARNING[239374]: No supported link modes on interface eth0 Feb 12 17:49:06.335397 osdx modulelauncher[239374]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 12 17:49:06.335411 osdx modulelauncher[239374]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 12 17:49:06.336675 osdx modulelauncher[239374]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 12 17:49:06.336683 osdx modulelauncher[239374]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 12 17:49:06.375797 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:49:06.390499 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:49:06.407514 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:49:06.585827 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 12 17:49:06.665337 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal show | cat'. Feb 12 17:49:06.826467 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Feb 12 17:49:06.972488 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:49:07.041773 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 12 17:49:07.155047 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 12 17:49:07.250974 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Feb 12 17:49:07.339734 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Feb 12 17:49:07.404793 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Feb 12 17:49:07.509443 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key e3:36:1c:08:56:19:37:f9:ec:95:e3:77:f7:65:f8:dc:33:96:84:dd:91:3f:72:f0:73:13:4c:fe:6a:d0:3e:ad'. Feb 12 17:49:07.585692 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 12 17:49:07.706823 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:49:07.807241 osdx ubnt-cfgd[239473]: inactive Feb 12 17:49:07.828930 osdx INFO[239481]: FRR daemons did not change Feb 12 17:49:07.853614 osdx ca-certificates[239497]: Updating certificates in /etc/ssl/certs... Feb 12 17:49:08.434486 osdx ubnt-cfgd[240509]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 12 17:49:08.444237 osdx ca-certificates[240514]: 1 added, 0 removed; done. Feb 12 17:49:08.447205 osdx ca-certificates[240521]: Running hooks in /etc/ca-certificates/update.d... Feb 12 17:49:08.450000 osdx ca-certificates[240523]: done. Feb 12 17:49:08.556775 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 12 17:49:08.558169 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:49:08.561211 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:49:08.577035 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] dnscrypt-proxy 2.0.45 Feb 12 17:49:08.577276 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] Network connectivity detected Feb 12 17:49:08.577376 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] Dropping privileges Feb 12 17:49:08.580584 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] Network connectivity detected Feb 12 17:49:08.580679 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 12 17:49:08.580679 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 12 17:49:08.580734 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] Firefox workaround initialized Feb 12 17:49:08.580734 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpqk1s0m71] Feb 12 17:49:08.581618 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Feb 12 17:49:08.581618 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Feb 12 17:49:08.581618 osdx dnscrypt-proxy[240579]: [2026-02-12 17:49:08] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Feb 12 17:49:08.598842 osdx OSDxCLI[79875]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
e3:36:1c:08:56:19:37:f9:ec:95:e3:77:f7:65:f8:dc:33:96:84:dd:91:3f:72:f0:73:13:4c:fe:6a:d0:3e:ad
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key e3:36:1c:08:56:19:37:f9:ec:95:e3:77:f7:65:f8:dc:33:96:84:dd:91:3f:72:f0:73:13:4c:fe:6a:d0:3e:ad ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIOM2HAhWGTf57JXjd_dl-NwzloTdkT9y8HMTTP5q0D6tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIOM2HAhWGTf57JXjd_dl-NwzloTdkT9y8HMTTP5q0D6tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Feb 12 17:49:14.326597 osdx systemd-journald[1959]: Runtime Journal (/run/log/journal/fef7273cfed74888920ec39438478308) is 2.2M, max 17.2M, 14.9M free. Feb 12 17:49:14.327317 osdx systemd-journald[1959]: Received client request to rotate journal, rotating. Feb 12 17:49:14.327361 osdx systemd-journald[1959]: Vacuuming done, freed 0B of archived journals from /run/log/journal/fef7273cfed74888920ec39438478308. Feb 12 17:49:14.338950 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal clear'. Feb 12 17:49:14.576392 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system coredump delete all'. Feb 12 17:49:14.794180 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:49:14.919369 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 12 17:49:14.976613 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 12 17:49:15.084233 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:49:15.142318 osdx ubnt-cfgd[242319]: inactive Feb 12 17:49:15.161398 osdx INFO[242325]: FRR daemons did not change Feb 12 17:49:15.191328 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 12 17:49:15.235936 osdx WARNING[242394]: No supported link modes on interface eth0 Feb 12 17:49:15.237344 osdx modulelauncher[242394]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 12 17:49:15.237357 osdx modulelauncher[242394]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 12 17:49:15.238676 osdx modulelauncher[242394]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 12 17:49:15.238687 osdx modulelauncher[242394]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 12 17:49:15.270903 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:49:15.281883 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:49:15.297846 osdx OSDxCLI[79875]: User 'admin' left the configuration menu. Feb 12 17:49:15.470028 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 12 17:49:15.537207 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'system journal show | cat'. Feb 12 17:49:15.650956 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Feb 12 17:49:15.770812 osdx OSDxCLI[79875]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key e3:36:1c:08:56:19:37:f9:ec:95:e3:77:f7:65:f8:dc:33:96:84:dd:91:3f:72:f0:73:13:4c:fe:6a:d0:3e:ad ip 10.215.168.1 port 8443'. Feb 12 17:49:15.928701 osdx OSDxCLI[79875]: User 'admin' entered the configuration menu. Feb 12 17:49:15.989378 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 12 17:49:16.098667 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 12 17:49:16.176045 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIOM2HAhWGTf57JXjd_dl-NwzloTdkT9y8HMTTP5q0D6tGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Feb 12 17:49:16.279455 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 12 17:49:16.356085 osdx OSDxCLI[79875]: User 'admin' added a new cfg line: 'show working'. Feb 12 17:49:16.455773 osdx ubnt-cfgd[242493]: inactive Feb 12 17:49:16.478905 osdx INFO[242501]: FRR daemons did not change Feb 12 17:49:16.492846 osdx ca-certificates[242517]: Updating certificates in /etc/ssl/certs... Feb 12 17:49:17.019483 osdx ubnt-cfgd[243529]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 12 17:49:17.027464 osdx ca-certificates[243534]: 1 added, 0 removed; done. Feb 12 17:49:17.030455 osdx ca-certificates[243541]: Running hooks in /etc/ca-certificates/update.d... Feb 12 17:49:17.033246 osdx ca-certificates[243543]: done. Feb 12 17:49:17.131728 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 12 17:49:17.133107 osdx cfgd[1631]: [79875]Completed change to active configuration Feb 12 17:49:17.150255 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] dnscrypt-proxy 2.0.45 Feb 12 17:49:17.150485 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] Network connectivity detected Feb 12 17:49:17.150524 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] Dropping privileges Feb 12 17:49:17.152707 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] Network connectivity detected Feb 12 17:49:17.152762 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 12 17:49:17.152762 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 12 17:49:17.152762 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] Firefox workaround initialized Feb 12 17:49:17.152762 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpwtqula3f] Feb 12 17:49:17.153536 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Feb 12 17:49:17.153573 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Feb 12 17:49:17.153573 osdx dnscrypt-proxy[243599]: [2026-02-12 17:49:17] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Feb 12 17:49:17.359594 osdx OSDxCLI[79875]: User 'admin' committed the configuration. Feb 12 17:49:17.379107 osdx OSDxCLI[79875]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16