Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 61e33b590507053cca7bb79fc3cc0fec356bca904a3aa16313af16399684db2e set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:36:28.438820 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.6M, max 17.2M, 14.5M free. Feb 19 10:36:28.439500 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:36:28.439542 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:36:28.449139 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:36:28.748874 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:36:29.009188 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:36:29.171753 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:36:29.232548 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:36:29.333961 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:29.415487 osdx ubnt-cfgd[440163]: inactive Feb 19 10:36:29.438270 osdx INFO[440169]: FRR daemons did not change Feb 19 10:36:29.470931 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:36:29.522369 osdx WARNING[440238]: No supported link modes on interface eth0 Feb 19 10:36:29.524013 osdx modulelauncher[440238]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:36:29.524027 osdx modulelauncher[440238]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:36:29.525522 osdx modulelauncher[440238]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:36:29.525572 osdx modulelauncher[440238]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:36:29.582931 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:36:29.599084 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:36:29.627894 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:36:29.823561 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:36:29.962299 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:36:31.551349 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:36:31.649244 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 19 10:36:31.747875 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:36:31.819135 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Feb 19 10:36:31.927890 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Feb 19 10:36:32.050097 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 61e33b590507053cca7bb79fc3cc0fec356bca904a3aa16313af16399684db2e'. Feb 19 10:36:32.112396 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Feb 19 10:36:32.228045 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Feb 19 10:36:32.291924 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:36:32.392591 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Feb 19 10:36:32.465571 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:32.596465 osdx ubnt-cfgd[440337]: inactive Feb 19 10:36:32.619360 osdx INFO[440345]: FRR daemons did not change Feb 19 10:36:32.633665 osdx ca-certificates[440361]: Updating certificates in /etc/ssl/certs... Feb 19 10:36:33.281883 osdx ubnt-cfgd[441373]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:36:33.293798 osdx ca-certificates[441378]: 1 added, 0 removed; done. Feb 19 10:36:33.298052 osdx ca-certificates[441385]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:36:33.302639 osdx ca-certificates[441387]: done. Feb 19 10:36:33.455385 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:36:33.457446 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:36:33.461679 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:36:33.488453 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:36:33.488740 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Network connectivity detected Feb 19 10:36:33.488926 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Dropping privileges Feb 19 10:36:33.495534 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Network connectivity detected Feb 19 10:36:33.495712 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:36:33.495712 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:36:33.495712 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Feb 19 10:36:33.495712 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Firefox workaround initialized Feb 19 10:36:33.495712 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpr9w4oa2p] Feb 19 10:36:33.496343 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:36:33.569034 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] [RD] OK (DoH) - rtt: 48ms Feb 19 10:36:33.569034 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] Server with the lowest initial latency: RD (rtt: 48ms) Feb 19 10:36:33.569034 osdx dnscrypt-proxy[441446]: [2026-02-19 10:36:33] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash a33c574c90b1e3f8cc02a7425139a93b6a3d41c2efb3ebe8280ea5e3e60d8783 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:36:28.420527 osdx systemd-journald[1946]: Runtime Journal (/run/log/journal/23713d8b40eb43dfbc54dc8903f4bf64) is 900.0K, max 6.5M, 5.6M free. Feb 19 10:36:28.422120 osdx systemd-journald[1946]: Received client request to rotate journal, rotating. Feb 19 10:36:28.422191 osdx systemd-journald[1946]: Vacuuming done, freed 0B of archived journals from /run/log/journal/23713d8b40eb43dfbc54dc8903f4bf64. Feb 19 10:36:28.434719 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:36:28.668940 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:36:29.943389 osdx OSDxCLI[2298]: User 'admin' entered the configuration menu. Feb 19 10:36:30.113281 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Feb 19 10:36:30.200304 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:36:30.310353 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service ssh'. Feb 19 10:36:30.469499 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:30.587021 osdx ubnt-cfgd[259952]: inactive Feb 19 10:36:30.683383 osdx INFO[259973]: FRR daemons did not change Feb 19 10:36:30.746153 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:36:30.800797 osdx WARNING[260042]: No supported link modes on interface eth0 Feb 19 10:36:30.802293 osdx modulelauncher[260042]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:36:30.802306 osdx modulelauncher[260042]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:36:30.803757 osdx modulelauncher[260042]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:36:30.803770 osdx modulelauncher[260042]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:36:30.902750 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Feb 19 10:36:30.918363 osdx sshd[260108]: Server listening on 0.0.0.0 port 22. Feb 19 10:36:30.918394 osdx sshd[260108]: Server listening on :: port 22. Feb 19 10:36:30.918511 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Feb 19 10:36:30.919886 osdx cfgd[1621]: [2298]Completed change to active configuration Feb 19 10:36:30.933289 osdx OSDxCLI[2298]: User 'admin' committed the configuration. Feb 19 10:36:30.963278 osdx OSDxCLI[2298]: User 'admin' left the configuration menu. Feb 19 10:36:31.216963 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Feb 19 10:36:33.755737 osdx OSDxCLI[2298]: User 'admin' entered the configuration menu. Feb 19 10:36:33.917523 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Feb 19 10:36:34.050666 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Feb 19 10:36:34.131322 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Feb 19 10:36:34.280196 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Feb 19 10:36:34.395070 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Feb 19 10:36:34.480833 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Feb 19 10:36:34.603559 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash a33c574c90b1e3f8cc02a7425139a93b6a3d41c2efb3ebe8280ea5e3e60d8783'. Feb 19 10:36:34.700172 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:34.799318 osdx ubnt-cfgd[260155]: inactive Feb 19 10:36:34.821868 osdx INFO[260163]: FRR daemons did not change Feb 19 10:36:34.835740 osdx ca-certificates[260179]: Updating certificates in /etc/ssl/certs... Feb 19 10:36:35.444312 osdx ubnt-cfgd[261191]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:36:35.454992 osdx ca-certificates[261197]: 1 added, 0 removed; done. Feb 19 10:36:35.458826 osdx ca-certificates[261203]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:36:35.463002 osdx ca-certificates[261205]: done. Feb 19 10:36:35.574697 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:36:35.576744 osdx cfgd[1621]: [2298]Completed change to active configuration Feb 19 10:36:35.580001 osdx OSDxCLI[2298]: User 'admin' committed the configuration. Feb 19 10:36:35.610333 osdx OSDxCLI[2298]: User 'admin' left the configuration menu. Feb 19 10:36:35.626870 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:36:35.627094 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] Network connectivity detected Feb 19 10:36:35.627182 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] Dropping privileges Feb 19 10:36:35.629766 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] Network connectivity detected Feb 19 10:36:35.629828 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:36:35.629828 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:36:35.629828 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] Firefox workaround initialized Feb 19 10:36:35.629828 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp2dgu329l] Feb 19 10:36:35.725824 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] [DUT0] OK (DoH) - rtt: 60ms Feb 19 10:36:35.725824 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 60ms) Feb 19 10:36:35.725824 osdx dnscrypt-proxy[261212]: [2026-02-19 10:36:35] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 61e33b590507053cca7bb79fc3cc0fec356bca904a3aa16313af16399684db2e at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBh4ztZBQcFPMp7t5_DzA_sNWvKkEo6oWMTrxY5loTbLgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBh4ztZBQcFPMp7t5_DzA_sNWvKkEo6oWMTrxY5loTbLgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:36:43.279608 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.2M, max 17.2M, 14.9M free. Feb 19 10:36:43.281988 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:36:43.282060 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:36:43.290895 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:36:43.536372 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:36:43.801525 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:36:43.902574 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:36:44.005094 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:36:44.104556 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:44.172837 osdx ubnt-cfgd[443177]: inactive Feb 19 10:36:44.194815 osdx INFO[443183]: FRR daemons did not change Feb 19 10:36:44.230010 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:36:44.274958 osdx WARNING[443252]: No supported link modes on interface eth0 Feb 19 10:36:44.276770 osdx modulelauncher[443252]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:36:44.276784 osdx modulelauncher[443252]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:36:44.278047 osdx modulelauncher[443252]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:36:44.278058 osdx modulelauncher[443252]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:36:44.321020 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:36:44.333063 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:36:44.349378 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:36:44.512997 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:36:44.597291 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:36:45.736290 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 61e33b590507053cca7bb79fc3cc0fec356bca904a3aa16313af16399684db2e'. Feb 19 10:36:45.903394 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:36:45.973962 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 19 10:36:46.092074 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:36:46.152598 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSBh4ztZBQcFPMp7t5_DzA_sNWvKkEo6oWMTrxY5loTbLgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Feb 19 10:36:46.266112 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Feb 19 10:36:46.350994 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Feb 19 10:36:46.453665 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Feb 19 10:36:46.539128 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:36:46.632501 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Feb 19 10:36:46.711492 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:46.834108 osdx ubnt-cfgd[443353]: inactive Feb 19 10:36:46.858098 osdx INFO[443361]: FRR daemons did not change Feb 19 10:36:46.874646 osdx ca-certificates[443377]: Updating certificates in /etc/ssl/certs... Feb 19 10:36:47.536374 osdx ubnt-cfgd[444389]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:36:47.552215 osdx ca-certificates[444396]: 1 added, 0 removed; done. Feb 19 10:36:47.556043 osdx ca-certificates[444401]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:36:47.559604 osdx ca-certificates[444403]: done. Feb 19 10:36:47.686415 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:36:47.688054 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:36:47.690766 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:36:47.707977 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:36:47.708211 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Network connectivity detected Feb 19 10:36:47.708687 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Dropping privileges Feb 19 10:36:47.709882 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:36:47.712006 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Network connectivity detected Feb 19 10:36:47.712058 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:36:47.712058 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:36:47.712058 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Feb 19 10:36:47.712112 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Firefox workaround initialized Feb 19 10:36:47.712112 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpmbw110q9] Feb 19 10:36:47.846612 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] [RD] OK (DoH) - rtt: 109ms Feb 19 10:36:47.846612 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] Server with the lowest initial latency: RD (rtt: 109ms) Feb 19 10:36:47.846612 osdx dnscrypt-proxy[444462]: [2026-02-19 10:36:47] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash a33c574c90b1e3f8cc02a7425139a93b6a3d41c2efb3ebe8280ea5e3e60d8783 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgozxXTJCx4_jMAqdCUTmpO2o9QcLvs-voKA6l4-YNh4MNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgozxXTJCx4_jMAqdCUTmpO2o9QcLvs-voKA6l4-YNh4MNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:36:43.265743 osdx systemd-journald[1946]: Runtime Journal (/run/log/journal/23713d8b40eb43dfbc54dc8903f4bf64) is 932.0K, max 6.5M, 5.6M free. Feb 19 10:36:43.267113 osdx systemd-journald[1946]: Received client request to rotate journal, rotating. Feb 19 10:36:43.267181 osdx systemd-journald[1946]: Vacuuming done, freed 0B of archived journals from /run/log/journal/23713d8b40eb43dfbc54dc8903f4bf64. Feb 19 10:36:43.279798 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:36:43.527650 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:36:44.635311 osdx OSDxCLI[2298]: User 'admin' entered the configuration menu. Feb 19 10:36:44.720777 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Feb 19 10:36:44.797176 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:36:44.892680 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service ssh'. Feb 19 10:36:44.958814 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:45.053890 osdx ubnt-cfgd[262932]: inactive Feb 19 10:36:45.136029 osdx INFO[262953]: FRR daemons did not change Feb 19 10:36:45.167116 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:36:45.217624 osdx WARNING[263022]: No supported link modes on interface eth0 Feb 19 10:36:45.219548 osdx modulelauncher[263022]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:36:45.219566 osdx modulelauncher[263022]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:36:45.221029 osdx modulelauncher[263022]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:36:45.221055 osdx modulelauncher[263022]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:36:45.335712 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Feb 19 10:36:45.347567 osdx sshd[263088]: Server listening on 0.0.0.0 port 22. Feb 19 10:36:45.347592 osdx sshd[263088]: Server listening on :: port 22. Feb 19 10:36:45.347688 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Feb 19 10:36:45.348610 osdx cfgd[1621]: [2298]Completed change to active configuration Feb 19 10:36:45.361738 osdx OSDxCLI[2298]: User 'admin' committed the configuration. Feb 19 10:36:45.385619 osdx OSDxCLI[2298]: User 'admin' left the configuration menu. Feb 19 10:36:45.524539 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Feb 19 10:36:48.016053 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash a33c574c90b1e3f8cc02a7425139a93b6a3d41c2efb3ebe8280ea5e3e60d8783'. Feb 19 10:36:48.211755 osdx OSDxCLI[2298]: User 'admin' entered the configuration menu. Feb 19 10:36:48.306436 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Feb 19 10:36:48.442727 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Feb 19 10:36:48.546309 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Feb 19 10:36:48.667741 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgozxXTJCx4_jMAqdCUTmpO2o9QcLvs-voKA6l4-YNh4MNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Feb 19 10:36:48.780822 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:36:48.877990 osdx ubnt-cfgd[263135]: inactive Feb 19 10:36:48.906720 osdx INFO[263143]: FRR daemons did not change Feb 19 10:36:48.925755 osdx ca-certificates[263159]: Updating certificates in /etc/ssl/certs... Feb 19 10:36:49.595209 osdx ubnt-cfgd[264171]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:36:49.602617 osdx ca-certificates[264176]: 1 added, 0 removed; done. Feb 19 10:36:49.605548 osdx ca-certificates[264183]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:36:49.608405 osdx ca-certificates[264185]: done. Feb 19 10:36:49.687626 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:36:49.689534 osdx cfgd[1621]: [2298]Completed change to active configuration Feb 19 10:36:49.705552 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:36:49.705721 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] Network connectivity detected Feb 19 10:36:49.705827 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] Dropping privileges Feb 19 10:36:49.707731 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] Network connectivity detected Feb 19 10:36:49.707765 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:36:49.707765 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:36:49.707765 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] Firefox workaround initialized Feb 19 10:36:49.707810 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] Loading the set of cloaking rules from [/tmp/tmppc1ub6lk] Feb 19 10:36:49.807229 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] [DUT0] OK (DoH) - rtt: 64ms Feb 19 10:36:49.807229 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 64ms) Feb 19 10:36:49.807229 osdx dnscrypt-proxy[264192]: [2026-02-19 10:36:49] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Feb 19 10:36:52.627761 osdx OSDxCLI[2298]: User 'admin' committed the configuration. Feb 19 10:36:52.652776 osdx OSDxCLI[2298]: User 'admin' left the configuration menu.
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Feb 19 10:37:03.502220 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.3M, max 17.2M, 14.9M free. Feb 19 10:37:03.505382 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:37:03.505465 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:37:03.514966 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:37:03.767800 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:37:04.020449 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:37:04.127513 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:37:04.210169 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:37:04.317947 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:37:04.497223 osdx ubnt-cfgd[446196]: inactive Feb 19 10:37:04.518751 osdx INFO[446202]: FRR daemons did not change Feb 19 10:37:04.557315 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:37:04.599961 osdx WARNING[446271]: No supported link modes on interface eth0 Feb 19 10:37:04.601380 osdx modulelauncher[446271]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:37:04.601391 osdx modulelauncher[446271]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:37:04.602561 osdx modulelauncher[446271]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:37:04.602571 osdx modulelauncher[446271]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:37:04.643635 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:37:05.141245 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:37:05.170498 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:37:05.342894 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:37:05.618785 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:37:07.426011 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Feb 19 10:37:07.583030 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:37:07.663788 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 19 10:37:07.759703 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:37:07.829262 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Feb 19 10:37:07.921891 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Feb 19 10:37:07.979225 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Feb 19 10:37:08.071859 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7'. Feb 19 10:37:08.143591 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:37:08.256034 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Feb 19 10:37:08.359036 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Feb 19 10:37:08.416379 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Feb 19 10:37:08.531223 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:37:08.763753 osdx ubnt-cfgd[446373]: inactive Feb 19 10:37:08.790719 osdx INFO[446381]: FRR daemons did not change Feb 19 10:37:08.805542 osdx ca-certificates[446396]: Updating certificates in /etc/ssl/certs... Feb 19 10:37:09.340679 osdx ubnt-cfgd[447409]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:37:09.348327 osdx ca-certificates[447415]: 1 added, 0 removed; done. Feb 19 10:37:09.352183 osdx ca-certificates[447421]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:37:09.355261 osdx ca-certificates[447423]: done. Feb 19 10:37:09.469667 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:37:09.471135 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:37:09.488695 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:37:09.488963 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Network connectivity detected Feb 19 10:37:09.489000 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Dropping privileges Feb 19 10:37:09.491474 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Network connectivity detected Feb 19 10:37:09.491524 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:37:09.491524 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:37:09.491524 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Feb 19 10:37:09.491586 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Firefox workaround initialized Feb 19 10:37:09.491586 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpkp9_sp4r] Feb 19 10:37:09.492237 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Feb 19 10:37:09.492237 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Feb 19 10:37:09.492292 osdx dnscrypt-proxy[447482]: [2026-02-19 10:37:09] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Feb 19 10:37:10.798449 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:37:10.817863 osdx OSDxCLI[273452]: User 'admin' left the configuration menu.
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash a33c574c90b1e3f8cc02a7425139a93b6a3d41c2efb3ebe8280ea5e3e60d8783 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:37:03.496605 osdx systemd-journald[1946]: Runtime Journal (/run/log/journal/23713d8b40eb43dfbc54dc8903f4bf64) is 956.0K, max 6.5M, 5.5M free. Feb 19 10:37:03.498307 osdx systemd-journald[1946]: Received client request to rotate journal, rotating. Feb 19 10:37:03.498382 osdx systemd-journald[1946]: Vacuuming done, freed 0B of archived journals from /run/log/journal/23713d8b40eb43dfbc54dc8903f4bf64. Feb 19 10:37:03.507801 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:37:03.740967 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:37:05.738958 osdx OSDxCLI[2298]: User 'admin' entered the configuration menu. Feb 19 10:37:05.888686 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Feb 19 10:37:05.986989 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:37:06.153790 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service ssh'. Feb 19 10:37:06.327753 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:37:06.457867 osdx ubnt-cfgd[265915]: inactive Feb 19 10:37:06.547479 osdx INFO[265936]: FRR daemons did not change Feb 19 10:37:06.578307 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:37:06.627397 osdx WARNING[266005]: No supported link modes on interface eth0 Feb 19 10:37:06.628915 osdx modulelauncher[266005]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:37:06.628931 osdx modulelauncher[266005]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:37:06.630094 osdx modulelauncher[266005]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:37:06.630105 osdx modulelauncher[266005]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:37:06.714539 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Feb 19 10:37:06.726671 osdx sshd[266071]: Server listening on 0.0.0.0 port 22. Feb 19 10:37:06.726697 osdx sshd[266071]: Server listening on :: port 22. Feb 19 10:37:06.726777 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Feb 19 10:37:06.727590 osdx cfgd[1621]: [2298]Completed change to active configuration Feb 19 10:37:06.742179 osdx OSDxCLI[2298]: User 'admin' committed the configuration. Feb 19 10:37:07.134984 osdx OSDxCLI[2298]: User 'admin' left the configuration menu. Feb 19 10:37:07.232187 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Feb 19 10:37:11.202682 osdx OSDxCLI[2298]: User 'admin' entered the configuration menu. Feb 19 10:37:11.283019 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Feb 19 10:37:11.420279 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Feb 19 10:37:11.503534 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Feb 19 10:37:11.615940 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Feb 19 10:37:11.684325 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Feb 19 10:37:11.780640 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Feb 19 10:37:11.847844 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash a33c574c90b1e3f8cc02a7425139a93b6a3d41c2efb3ebe8280ea5e3e60d8783'. Feb 19 10:37:11.972480 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:37:12.063534 osdx ubnt-cfgd[266118]: inactive Feb 19 10:37:12.099180 osdx INFO[266126]: FRR daemons did not change Feb 19 10:37:12.115521 osdx ca-certificates[266141]: Updating certificates in /etc/ssl/certs... Feb 19 10:37:13.043493 osdx ubnt-cfgd[267154]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:37:13.051501 osdx ca-certificates[267159]: 1 added, 0 removed; done. Feb 19 10:37:13.055017 osdx ca-certificates[267166]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:37:13.058389 osdx ca-certificates[267168]: done. Feb 19 10:37:13.154901 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:37:13.157131 osdx cfgd[1621]: [2298]Completed change to active configuration Feb 19 10:37:13.159207 osdx OSDxCLI[2298]: User 'admin' committed the configuration. Feb 19 10:37:13.185809 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:37:13.186069 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] Network connectivity detected Feb 19 10:37:13.186145 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] Dropping privileges Feb 19 10:37:13.189213 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] Network connectivity detected Feb 19 10:37:13.189294 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:37:13.189294 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:37:13.189294 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] Firefox workaround initialized Feb 19 10:37:13.189294 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpcma_wj7_] Feb 19 10:37:13.202504 osdx OSDxCLI[2298]: User 'admin' left the configuration menu. Feb 19 10:37:13.329294 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] [DUT0] OK (DoH) - rtt: 83ms Feb 19 10:37:13.329294 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 83ms) Feb 19 10:37:13.329294 osdx dnscrypt-proxy[267175]: [2026-02-19 10:37:13] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIBhgiVgh47tZ-keNoqgy-2J62ytt9_kTrgIeoryHKVinGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIBhgiVgh47tZ-keNoqgy-2J62ytt9_kTrgIeoryHKVinGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Feb 19 10:37:22.345427 osdx systemd-journald[2186]: Runtime Journal (/run/log/journal/69bd8e6fd19244c08e519827aa7e309f) is 2.3M, max 17.2M, 14.9M free. Feb 19 10:37:22.345999 osdx systemd-journald[2186]: Received client request to rotate journal, rotating. Feb 19 10:37:22.346035 osdx systemd-journald[2186]: Vacuuming done, freed 0B of archived journals from /run/log/journal/69bd8e6fd19244c08e519827aa7e309f. Feb 19 10:37:22.357417 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:37:22.605775 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:37:23.017287 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:37:23.159141 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Feb 19 10:37:23.266084 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:37:23.396464 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:37:23.506497 osdx ubnt-cfgd[449215]: inactive Feb 19 10:37:23.528825 osdx INFO[449221]: FRR daemons did not change Feb 19 10:37:23.569614 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:37:23.632671 osdx WARNING[449290]: No supported link modes on interface eth0 Feb 19 10:37:23.634739 osdx modulelauncher[449290]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:37:23.634754 osdx modulelauncher[449290]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:37:23.636805 osdx modulelauncher[449290]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:37:23.636819 osdx modulelauncher[449290]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:37:23.688978 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:37:23.709544 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:37:23.728055 osdx OSDxCLI[273452]: User 'admin' left the configuration menu. Feb 19 10:37:23.880048 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Feb 19 10:37:23.953165 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'system journal show | cat'. Feb 19 10:37:25.360770 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Feb 19 10:37:25.480655 osdx OSDxCLI[273452]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 18:60:89:58:21:e3:bb:59:fa:47:8d:a2:a8:32:fb:62:7a:db:2b:6d:f7:f9:13:ae:02:1e:a2:bc:87:29:58:a7 ip 10.215.168.1 port 8443'. Feb 19 10:37:25.682764 osdx OSDxCLI[273452]: User 'admin' entered the configuration menu. Feb 19 10:37:25.810502 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Feb 19 10:37:25.941265 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Feb 19 10:37:26.071824 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIBhgiVgh47tZ-keNoqgy-2J62ytt9_kTrgIeoryHKVinGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Feb 19 10:37:26.204700 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns resolver local'. Feb 19 10:37:26.336066 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Feb 19 10:37:26.475931 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Feb 19 10:37:26.585843 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Feb 19 10:37:26.703785 osdx OSDxCLI[273452]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:37:26.798121 osdx ubnt-cfgd[449394]: inactive Feb 19 10:37:26.823320 osdx INFO[449402]: FRR daemons did not change Feb 19 10:37:26.837745 osdx ca-certificates[449418]: Updating certificates in /etc/ssl/certs... Feb 19 10:37:27.397687 osdx ubnt-cfgd[450430]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:37:27.405295 osdx ca-certificates[450435]: 1 added, 0 removed; done. Feb 19 10:37:27.408159 osdx ca-certificates[450442]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:37:27.410984 osdx ca-certificates[450444]: done. Feb 19 10:37:27.525973 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:37:27.527547 osdx cfgd[1859]: [273452]Completed change to active configuration Feb 19 10:37:27.530727 osdx OSDxCLI[273452]: User 'admin' committed the configuration. Feb 19 10:37:27.550774 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:37:27.551037 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Network connectivity detected Feb 19 10:37:27.551182 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Dropping privileges Feb 19 10:37:27.553971 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Network connectivity detected Feb 19 10:37:27.554056 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:37:27.554056 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:37:27.554056 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Feb 19 10:37:27.554056 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Firefox workaround initialized Feb 19 10:37:27.554056 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp38cvc5mg] Feb 19 10:37:27.554951 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Feb 19 10:37:27.554951 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Feb 19 10:37:27.555027 osdx dnscrypt-proxy[450503]: [2026-02-19 10:37:27] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Feb 19 10:37:27.558039 osdx OSDxCLI[273452]: User 'admin' left the configuration menu.
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash a33c574c90b1e3f8cc02a7425139a93b6a3d41c2efb3ebe8280ea5e3e60d8783 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgozxXTJCx4_jMAqdCUTmpO2o9QcLvs-voKA6l4-YNh4MNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgozxXTJCx4_jMAqdCUTmpO2o9QcLvs-voKA6l4-YNh4MNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Feb 19 10:37:22.319961 osdx systemd-journald[1946]: Runtime Journal (/run/log/journal/23713d8b40eb43dfbc54dc8903f4bf64) is 956.0K, max 6.5M, 5.5M free. Feb 19 10:37:22.323090 osdx systemd-journald[1946]: Received client request to rotate journal, rotating. Feb 19 10:37:22.323162 osdx systemd-journald[1946]: Vacuuming done, freed 0B of archived journals from /run/log/journal/23713d8b40eb43dfbc54dc8903f4bf64. Feb 19 10:37:22.332854 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'system journal clear'. Feb 19 10:37:22.595629 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'system coredump delete all'. Feb 19 10:37:23.986009 osdx OSDxCLI[2298]: User 'admin' entered the configuration menu. Feb 19 10:37:24.081927 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Feb 19 10:37:24.213769 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Feb 19 10:37:24.331033 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service ssh'. Feb 19 10:37:24.477697 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:37:24.569502 osdx ubnt-cfgd[268895]: inactive Feb 19 10:37:24.658042 osdx INFO[268916]: FRR daemons did not change Feb 19 10:37:24.699090 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Feb 19 10:37:24.758589 osdx WARNING[268985]: No supported link modes on interface eth0 Feb 19 10:37:24.760282 osdx modulelauncher[268985]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Feb 19 10:37:24.760301 osdx modulelauncher[268985]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Feb 19 10:37:24.762003 osdx modulelauncher[268985]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Feb 19 10:37:24.762016 osdx modulelauncher[268985]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Feb 19 10:37:24.879702 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Feb 19 10:37:24.897033 osdx sshd[269051]: Server listening on 0.0.0.0 port 22. Feb 19 10:37:24.897068 osdx sshd[269051]: Server listening on :: port 22. Feb 19 10:37:24.897225 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Feb 19 10:37:24.898565 osdx cfgd[1621]: [2298]Completed change to active configuration Feb 19 10:37:24.914524 osdx OSDxCLI[2298]: User 'admin' committed the configuration. Feb 19 10:37:24.949031 osdx OSDxCLI[2298]: User 'admin' left the configuration menu. Feb 19 10:37:25.158985 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Feb 19 10:37:27.756425 osdx OSDxCLI[2298]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash a33c574c90b1e3f8cc02a7425139a93b6a3d41c2efb3ebe8280ea5e3e60d8783'. Feb 19 10:37:27.892332 osdx OSDxCLI[2298]: User 'admin' entered the configuration menu. Feb 19 10:37:27.964838 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Feb 19 10:37:28.049372 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Feb 19 10:37:28.124692 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Feb 19 10:37:28.258480 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgozxXTJCx4_jMAqdCUTmpO2o9QcLvs-voKA6l4-YNh4MNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Feb 19 10:37:28.405723 osdx OSDxCLI[2298]: User 'admin' added a new cfg line: 'show working'. Feb 19 10:37:28.504153 osdx ubnt-cfgd[269099]: inactive Feb 19 10:37:28.524855 osdx INFO[269107]: FRR daemons did not change Feb 19 10:37:28.540433 osdx ca-certificates[269122]: Updating certificates in /etc/ssl/certs... Feb 19 10:37:29.205067 osdx ubnt-cfgd[270135]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Feb 19 10:37:29.213789 osdx ca-certificates[270141]: 1 added, 0 removed; done. Feb 19 10:37:29.217600 osdx ca-certificates[270147]: Running hooks in /etc/ca-certificates/update.d... Feb 19 10:37:29.220545 osdx ca-certificates[270149]: done. Feb 19 10:37:29.291544 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Feb 19 10:37:29.293745 osdx cfgd[1621]: [2298]Completed change to active configuration Feb 19 10:37:29.304626 osdx OSDxCLI[2298]: User 'admin' committed the configuration. Feb 19 10:37:29.333766 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] dnscrypt-proxy 2.0.45 Feb 19 10:37:29.334030 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] Network connectivity detected Feb 19 10:37:29.334116 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] Dropping privileges Feb 19 10:37:29.337195 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] Network connectivity detected Feb 19 10:37:29.337278 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Feb 19 10:37:29.337278 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Feb 19 10:37:29.337278 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] Firefox workaround initialized Feb 19 10:37:29.337278 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp_q_3d3lj] Feb 19 10:37:29.352903 osdx OSDxCLI[2298]: User 'admin' left the configuration menu. Feb 19 10:37:29.467912 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] [DUT0] OK (DoH) - rtt: 75ms Feb 19 10:37:29.468071 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 75ms) Feb 19 10:37:29.468124 osdx dnscrypt-proxy[270156]: [2026-02-19 10:37:29] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13