Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 61e33b590507053cca7bb79fc3cc0fec356bca904a3aa16313af16399684db2e set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:35:17.350328 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.3M, max 17.2M, 14.9M free. Feb 19 10:35:17.354050 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:35:17.354132 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:35:17.362909 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:35:17.694362 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:35:17.986958 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:18.084864 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:35:18.166761 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:35:18.296924 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:18.404648 osdx ubnt-cfgd[426711]: inactive Feb 19 10:35:18.424267 osdx INFO[426717]: FRR daemons did not change Feb 19 10:35:18.458052 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:35:18.501474 osdx WARNING[426786]: No supported link modes on interface eth0 Feb 19 10:35:18.502932 osdx modulelauncher[426786]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:35:18.502943 osdx modulelauncher[426786]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:35:18.504109 osdx modulelauncher[426786]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:35:18.504117 osdx modulelauncher[426786]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:35:18.541868 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:18.555211 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:18.578671 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:18.724325 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:35:18.793844 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:35:18.983870 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:19.050516 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 19 10:35:19.210965 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:35:19.318711 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Feb 19 10:35:19.430958 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Feb 19 10:35:19.551671 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 61e33b590507053cca7bb79fc3cc0fec356bca904a3aa16313af16399684db2e'. Feb 19 10:35:19.658945 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:35:19.791924 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:19.886830 osdx ubnt-cfgd[426882]: inactive Feb 19 10:35:19.907911 osdx INFO[426890]: FRR daemons did not change Feb 19 10:35:19.920567 osdx ca-certificates[426906]: Updating certificates in /etc/ssl/certs... Feb 19 10:35:20.464619 osdx ubnt-cfgd[427918]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:35:20.473587 osdx ca-certificates[427923]: 1 added, 0 removed; done. Feb 19 10:35:20.476538 osdx ca-certificates[427930]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:35:20.479495 osdx ca-certificates[427932]: done. Feb 19 10:35:20.594524 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:35:20.595922 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:20.598567 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:20.623404 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:35:20.623617 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] Network connectivity detected Feb 19 10:35:20.623709 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] Dropping privileges Feb 19 10:35:20.627273 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] Network connectivity detected Feb 19 10:35:20.627345 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:35:20.627345 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:35:20.627345 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] Firefox workaround initialized Feb 19 10:35:20.627345 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpxwsgnm96] Feb 19 10:35:20.654347 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:20.720749 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] [RD] OK (DoH) - rtt: 73ms Feb 19 10:35:20.720749 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] Server with the lowest initial latency: RD (rtt: 73ms) Feb 19 10:35:20.720749 osdx dnscrypt-proxy[427988]: [2026-02-19 10:35:20] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Feb 19 10:35:26.368344 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.2M, max 17.2M, 14.9M free. Feb 19 10:35:26.371900 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:35:26.371971 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:35:26.378669 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:35:26.601312 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:35:26.896546 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:27.014108 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:35:27.093684 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:35:27.164154 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:27.257484 osdx ubnt-cfgd[429722]: inactive Feb 19 10:35:27.279630 osdx INFO[429728]: FRR daemons did not change Feb 19 10:35:27.307867 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:35:27.351380 osdx WARNING[429797]: No supported link modes on interface eth0 Feb 19 10:35:27.353194 osdx modulelauncher[429797]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:35:27.353210 osdx modulelauncher[429797]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:35:27.354765 osdx modulelauncher[429797]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:35:27.354777 osdx modulelauncher[429797]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:35:27.389013 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:27.400142 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:27.423167 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:27.592672 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:35:27.688296 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:35:27.839038 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:27.906557 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:35:28.017120 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:28.097144 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:28.145349 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:28.313430 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:28.434457 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:35:28.531583 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Feb 19 10:35:28.619974 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Feb 19 10:35:28.707712 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:35:28.808470 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show changes'. Feb 19 10:35:28.890013 osdx ubnt-cfgd[429900]: inactive Feb 19 10:35:28.907689 osdx INFO[429906]: FRR daemons did not change Feb 19 10:35:29.012174 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:35:29.013253 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:29.015548 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:29.036080 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:35:29.036339 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] Network connectivity detected Feb 19 10:35:29.036401 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] Dropping privileges Feb 19 10:35:29.038690 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] Network connectivity detected Feb 19 10:35:29.038735 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:35:29.038735 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:35:29.038735 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] Firefox workaround initialized Feb 19 10:35:29.038735 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpgss8ulpv] Feb 19 10:35:29.044474 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:29.061340 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABBbrsu_DwA28j7vdnvjsFc5": x509: certificate signed by unknown authority Feb 19 10:35:29.061340 osdx dnscrypt-proxy[429964]: [2026-02-19 10:35:29] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:35:38.315490 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.2M, max 17.2M, 14.9M free. Feb 19 10:35:38.316978 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:35:38.317020 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:35:38.326275 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:35:38.536475 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:35:38.772279 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:38.858218 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:35:38.919367 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:35:39.030020 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:39.088979 osdx ubnt-cfgd[430224]: inactive Feb 19 10:35:39.106642 osdx INFO[430230]: FRR daemons did not change Feb 19 10:35:39.132980 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:35:39.178437 osdx WARNING[430299]: No supported link modes on interface eth0 Feb 19 10:35:39.179752 osdx modulelauncher[430299]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:35:39.179766 osdx modulelauncher[430299]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:35:39.180958 osdx modulelauncher[430299]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:35:39.180974 osdx modulelauncher[430299]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:35:39.215940 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:39.229085 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:39.247146 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:39.400225 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:35:39.470121 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:35:39.639262 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:39.695621 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:35:39.820993 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:39.870704 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:39.941610 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:40.090063 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:40.163072 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:35:40.266997 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Feb 19 10:35:40.321806 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Feb 19 10:35:40.413730 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Feb 19 10:35:40.469857 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:35:40.570874 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show changes'. Feb 19 10:35:40.632621 osdx ubnt-cfgd[430403]: inactive Feb 19 10:35:40.649885 osdx INFO[430409]: FRR daemons did not change Feb 19 10:35:40.761381 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:35:40.762782 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:40.765115 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:40.783926 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:35:40.784212 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] Network connectivity detected Feb 19 10:35:40.784247 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] Dropping privileges Feb 19 10:35:40.784238 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:40.787010 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] Network connectivity detected Feb 19 10:35:40.787097 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:35:40.787097 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:35:40.787097 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] Firefox workaround initialized Feb 19 10:35:40.787097 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpq1gdon_g] Feb 19 10:35:40.866591 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] [RD] OK (DoH) - rtt: 68ms Feb 19 10:35:40.866591 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] Server with the lowest initial latency: RD (rtt: 68ms) Feb 19 10:35:40.866591 osdx dnscrypt-proxy[430467]: [2026-02-19 10:35:40] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 61e33b590507053cca7bb79fc3cc0fec356bca904a3aa16313af16399684db2e at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBh4ztZBQcFPMp7t5_DzA_sNWvKkEo6oWMTrxY5loTbLgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBh4ztZBQcFPMp7t5_DzA_sNWvKkEo6oWMTrxY5loTbLgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:35:45.315469 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.2M, max 17.2M, 14.9M free. Feb 19 10:35:45.317810 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:35:45.317881 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:35:45.326591 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:35:45.602764 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:35:45.919069 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:46.022753 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:35:46.121173 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:35:46.267608 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:46.376798 osdx ubnt-cfgd[430722]: inactive Feb 19 10:35:46.397908 osdx INFO[430728]: FRR daemons did not change Feb 19 10:35:46.433815 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:35:46.482607 osdx WARNING[430797]: No supported link modes on interface eth0 Feb 19 10:35:46.484078 osdx modulelauncher[430797]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:35:46.484090 osdx modulelauncher[430797]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:35:46.485314 osdx modulelauncher[430797]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:35:46.485322 osdx modulelauncher[430797]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:35:46.527728 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:46.543981 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:46.575483 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:46.741726 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:35:46.811474 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:35:46.999632 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 61e33b590507053cca7bb79fc3cc0fec356bca904a3aa16313af16399684db2e'. Feb 19 10:35:47.136123 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:47.204025 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 19 10:35:47.316616 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:35:47.408024 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBh4ztZBQcFPMp7t5_DzA_sNWvKkEo6oWMTrxY5loTbLgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Feb 19 10:35:47.496916 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:35:47.580784 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:47.732519 osdx ubnt-cfgd[430894]: inactive Feb 19 10:35:47.754283 osdx INFO[430902]: FRR daemons did not change Feb 19 10:35:47.766756 osdx ca-certificates[430918]: Updating certificates in /etc/ssl/certs... Feb 19 10:35:48.408916 osdx ubnt-cfgd[431930]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:35:48.423452 osdx ca-certificates[431935]: 1 added, 0 removed; done. Feb 19 10:35:48.427168 osdx ca-certificates[431942]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:35:48.430593 osdx ca-certificates[431944]: done. Feb 19 10:35:48.542199 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:35:48.544299 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:48.547220 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:48.573621 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:35:48.573884 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] Network connectivity detected Feb 19 10:35:48.573978 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] Dropping privileges Feb 19 10:35:48.576517 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] Network connectivity detected Feb 19 10:35:48.576565 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:35:48.576565 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:35:48.576565 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] Firefox workaround initialized Feb 19 10:35:48.576626 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpbbck5cr4] Feb 19 10:35:48.605659 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:48.657592 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] [RD] OK (DoH) - rtt: 66ms Feb 19 10:35:48.657592 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] Server with the lowest initial latency: RD (rtt: 66ms) Feb 19 10:35:48.657592 osdx dnscrypt-proxy[432000]: [2026-02-19 10:35:48] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Feb 19 10:35:55.366472 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.2M, max 17.2M, 14.9M free. Feb 19 10:35:55.370316 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:35:55.370383 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:35:55.376989 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:35:55.647767 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:35:56.125964 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:56.290968 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:35:56.381640 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:35:56.512903 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:56.590339 osdx ubnt-cfgd[433733]: inactive Feb 19 10:35:56.621616 osdx INFO[433739]: FRR daemons did not change Feb 19 10:35:56.654334 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:35:56.705859 osdx WARNING[433808]: No supported link modes on interface eth0 Feb 19 10:35:56.707759 osdx modulelauncher[433808]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:35:56.707774 osdx modulelauncher[433808]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:35:56.709517 osdx modulelauncher[433808]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:35:56.709530 osdx modulelauncher[433808]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:35:56.751522 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:56.764241 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:56.784111 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:56.984208 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:35:57.076816 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:35:57.254676 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Feb 19 10:35:57.391997 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:35:57.453594 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 19 10:35:57.588969 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:35:57.660692 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Feb 19 10:35:57.759421 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Feb 19 10:35:57.820759 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Feb 19 10:35:57.939549 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7'. Feb 19 10:35:58.025034 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:35:58.141803 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:35:58.232353 osdx ubnt-cfgd[433907]: inactive Feb 19 10:35:58.252566 osdx INFO[433915]: FRR daemons did not change Feb 19 10:35:58.265781 osdx ca-certificates[433931]: Updating certificates in /etc/ssl/certs... Feb 19 10:35:58.850599 osdx ubnt-cfgd[434943]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:35:58.858244 osdx ca-certificates[434949]: 1 added, 0 removed; done. Feb 19 10:35:58.861214 osdx ca-certificates[434955]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:35:58.863957 osdx ca-certificates[434957]: done. Feb 19 10:35:58.982949 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:35:58.985173 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:35:58.989248 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:35:59.007680 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:35:59.007680 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] Network connectivity detected Feb 19 10:35:59.007680 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] Dropping privileges Feb 19 10:35:59.011184 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:35:59.012018 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] Network connectivity detected Feb 19 10:35:59.012081 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:35:59.012081 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:35:59.012081 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] Firefox workaround initialized Feb 19 10:35:59.012081 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpl6v25z18] Feb 19 10:35:59.012880 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Feb 19 10:35:59.012880 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Feb 19 10:35:59.012948 osdx dnscrypt-proxy[435013]: [2026-02-19 10:35:59] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIBhgiVgh47tZ-keNoqgy-2J62ytt9_kTrgIeoryHKVinGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIBhgiVgh47tZ-keNoqgy-2J62ytt9_kTrgIeoryHKVinGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Feb 19 10:36:05.320974 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.2M, max 17.2M, 14.9M free. Feb 19 10:36:05.322059 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:36:05.322147 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:36:05.334279 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:36:05.602294 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:36:05.923414 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:36:06.029952 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:36:06.117851 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:36:06.230813 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:06.308589 osdx ubnt-cfgd[436751]: inactive Feb 19 10:36:06.330721 osdx INFO[436757]: FRR daemons did not change Feb 19 10:36:06.366053 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:36:06.411219 osdx WARNING[436826]: No supported link modes on interface eth0 Feb 19 10:36:06.412681 osdx modulelauncher[436826]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:36:06.412697 osdx modulelauncher[436826]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:36:06.413928 osdx modulelauncher[436826]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:36:06.413941 osdx modulelauncher[436826]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:36:06.449821 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:36:06.464613 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:36:06.493238 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:36:06.689564 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:36:06.796751 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:36:06.914663 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Feb 19 10:36:07.108592 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7 ip 10.215.168.1 port 8443'. Feb 19 10:36:07.293234 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:36:07.355887 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 19 10:36:07.474556 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:36:07.547320 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIBhgiVgh47tZ-keNoqgy-2J62ytt9_kTrgIeoryHKVinGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Feb 19 10:36:07.652003 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:36:07.725928 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:07.830533 osdx ubnt-cfgd[436925]: inactive Feb 19 10:36:07.854884 osdx INFO[436933]: FRR daemons did not change Feb 19 10:36:07.869388 osdx ca-certificates[436948]: Updating certificates in /etc/ssl/certs... Feb 19 10:36:08.547713 osdx ubnt-cfgd[437961]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:36:08.557586 osdx ca-certificates[437966]: 1 added, 0 removed; done. Feb 19 10:36:08.562131 osdx ca-certificates[437973]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:36:08.565832 osdx ca-certificates[437975]: done. Feb 19 10:36:08.678433 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:36:08.679766 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:36:08.682450 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:36:08.697975 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:36:08.698337 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] Network connectivity detected Feb 19 10:36:08.698337 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] Dropping privileges Feb 19 10:36:08.700436 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] Network connectivity detected Feb 19 10:36:08.700512 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:36:08.700512 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:36:08.700512 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] Firefox workaround initialized Feb 19 10:36:08.700512 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp9zy5in5s] Feb 19 10:36:08.701786 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Feb 19 10:36:08.701786 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Feb 19 10:36:08.701786 osdx dnscrypt-proxy[438031]: [2026-02-19 10:36:08] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Feb 19 10:36:08.702482 osdx OSDxCLI[273452]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16