Static

Validation test suite using one of the DNS options available in an upstream server

DNS-over-HTTPS Server

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https hash f4497ee71a53d52ee4a7d76330057c4a3f34986666472f74c541bbcd7e41a847
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns resolver local
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Mar 20 10:24:49.314444 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.3M, max 17.2M, 14.8M free.
Mar 20 10:24:49.315864 osdx systemd-journald[2054]: Received client request to rotate journal, rotating.
Mar 20 10:24:49.315927 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a.
Mar 20 10:24:49.326582 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'.
Mar 20 10:24:49.592008 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 20 10:24:49.966985 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:24:50.102705 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 20 10:24:50.178740 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 20 10:24:50.302019 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:24:50.373527 osdx ubnt-cfgd[301344]: inactive
Mar 20 10:24:50.395886 osdx INFO[301350]: FRR daemons did not change
Mar 20 10:24:50.427857 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 20 10:24:50.472283 osdx WARNING[301419]: No supported link modes on interface eth0
Mar 20 10:24:50.473556 osdx modulelauncher[301419]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 20 10:24:50.473566 osdx modulelauncher[301419]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 20 10:24:50.474629 osdx modulelauncher[301419]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --
Mar 20 10:24:50.474636 osdx modulelauncher[301419]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75.
Mar 20 10:24:50.510690 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:24:50.524823 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:24:50.547078 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:24:50.691514 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 20 10:24:50.765583 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 20 10:24:50.943787 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:24:51.013151 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Mar 20 10:24:51.129431 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 20 10:24:51.210792 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Mar 20 10:24:51.317765 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Mar 20 10:24:51.430414 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash f4497ee71a53d52ee4a7d76330057c4a3f34986666472f74c541bbcd7e41a847'.
Mar 20 10:24:51.508983 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 20 10:24:51.589819 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:24:51.707076 osdx ubnt-cfgd[301515]: inactive
Mar 20 10:24:51.730535 osdx INFO[301523]: FRR daemons did not change
Mar 20 10:24:51.743916 osdx ca-certificates[301539]: Updating certificates in /etc/ssl/certs...
Mar 20 10:24:52.310603 osdx ubnt-cfgd[302551]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Mar 20 10:24:52.321318 osdx ca-certificates[302556]: 1 added, 0 removed; done.
Mar 20 10:24:52.325158 osdx ca-certificates[302563]: Running hooks in /etc/ca-certificates/update.d...
Mar 20 10:24:52.329028 osdx ca-certificates[302565]: done.
Mar 20 10:24:52.432098 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 20 10:24:52.433401 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:24:52.436886 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:24:52.461379 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] dnscrypt-proxy 2.0.45
Mar 20 10:24:52.461619 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] Network connectivity detected
Mar 20 10:24:52.461694 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] Dropping privileges
Mar 20 10:24:52.464887 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] Network connectivity detected
Mar 20 10:24:52.464967 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 20 10:24:52.464967 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 20 10:24:52.464967 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] Firefox workaround initialized
Mar 20 10:24:52.464967 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpsskssrn2]
Mar 20 10:24:52.467196 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:24:52.495176 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] [RD] OK (DoH) - rtt: 11ms
Mar 20 10:24:52.495176 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] Server with the lowest initial latency: RD (rtt: 11ms)
Mar 20 10:24:52.495176 osdx dnscrypt-proxy[302621]: [2026-03-20 10:24:52] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

Show output

;; communications error to ::1#53: connection refused
;; communications error to ::1#53: connection refused
teldat.com has address 19.18.17.16

---

DNS-over-HTTPS Server Trusting Fails

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Note

The above commands set the network topology to interact with the DNS server

Step 2: Modify the following configuration lines in DUT0 :

set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns resolver local

Note

The above commands set up the DNS server to be used.

Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:

: x509: certificate signed by unknown authority

Show output

Mar 20 10:24:57.321249 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.2M, max 17.2M, 14.9M free.
Mar 20 10:24:57.324637 osdx systemd-journald[2054]: Received client request to rotate journal, rotating.
Mar 20 10:24:57.324703 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a.
Mar 20 10:24:57.331653 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'.
Mar 20 10:24:57.537719 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 20 10:24:57.795392 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:24:57.886136 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 20 10:24:57.941199 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 20 10:24:58.054286 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:24:58.114310 osdx ubnt-cfgd[304354]: inactive
Mar 20 10:24:58.135287 osdx INFO[304360]: FRR daemons did not change
Mar 20 10:24:58.164677 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 20 10:24:58.210026 osdx WARNING[304429]: No supported link modes on interface eth0
Mar 20 10:24:58.211612 osdx modulelauncher[304429]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 20 10:24:58.211623 osdx modulelauncher[304429]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 20 10:24:58.213043 osdx modulelauncher[304429]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --
Mar 20 10:24:58.213051 osdx modulelauncher[304429]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75.
Mar 20 10:24:58.252842 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:24:58.266752 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:24:58.287798 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:24:58.436553 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 20 10:24:58.515273 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 20 10:24:58.680719 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:24:58.748347 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 20 10:24:58.857139 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:24:58.908580 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:24:58.965408 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:24:59.158532 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:24:59.222738 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 20 10:24:59.319809 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Mar 20 10:24:59.381177 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Mar 20 10:24:59.471639 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 20 10:24:59.531575 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show changes'.
Mar 20 10:24:59.630651 osdx ubnt-cfgd[304532]: inactive
Mar 20 10:24:59.650450 osdx INFO[304538]: FRR daemons did not change
Mar 20 10:24:59.749041 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 20 10:24:59.750517 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:24:59.753035 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:24:59.768573 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] dnscrypt-proxy 2.0.45
Mar 20 10:24:59.768801 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] Network connectivity detected
Mar 20 10:24:59.768909 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] Dropping privileges
Mar 20 10:24:59.772227 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] Network connectivity detected
Mar 20 10:24:59.772341 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 20 10:24:59.772391 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 20 10:24:59.772442 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] Firefox workaround initialized
Mar 20 10:24:59.772473 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpawdjcy5v]
Mar 20 10:24:59.772577 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:24:59.796551 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABCKS8f6Nvc7YbJQMTqlJyU2": x509: certificate signed by unknown authority
Mar 20 10:24:59.796551 osdx dnscrypt-proxy[304596]: [2026-03-20 10:24:59] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable

Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:

Show output

;; communications error to ::1#53: connection refused
;; communications error to ::1#53: connection refused
;; communications error to 127.0.0.1#53: timed out
;; no servers could be reached
  CLI Error: Command error

Note

The above command attempts to resolve the hostname but fails because the certificate cannot be verified

---

DNS-over-HTTPS Server Trusting

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Note

The above commands set the network topology to interact with the DNS server

Step 2: Modify the following configuration lines in DUT0 :

set service dns proxy server-name RD
set service dns proxy ssl-allow-insecure
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns resolver local

Note

The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Mar 20 10:25:09.312405 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.2M, max 17.2M, 14.9M free.
Mar 20 10:25:09.313409 osdx systemd-journald[2054]: Received client request to rotate journal, rotating.
Mar 20 10:25:09.313462 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a.
Mar 20 10:25:09.323128 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'.
Mar 20 10:25:09.552988 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 20 10:25:09.794499 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:09.885553 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 20 10:25:09.984322 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 20 10:25:10.041648 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:25:10.134851 osdx ubnt-cfgd[304860]: inactive
Mar 20 10:25:10.156084 osdx INFO[304866]: FRR daemons did not change
Mar 20 10:25:10.185423 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 20 10:25:10.224862 osdx WARNING[304935]: No supported link modes on interface eth0
Mar 20 10:25:10.226228 osdx modulelauncher[304935]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 20 10:25:10.226239 osdx modulelauncher[304935]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 20 10:25:10.227387 osdx modulelauncher[304935]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --
Mar 20 10:25:10.227398 osdx modulelauncher[304935]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75.
Mar 20 10:25:10.263837 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:25:10.275939 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:10.297094 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:25:10.439902 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 20 10:25:10.507479 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 20 10:25:10.687202 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:10.786120 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 20 10:25:10.850241 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:25:10.956066 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:10.974791 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:25:11.165624 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:11.223921 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 20 10:25:11.341880 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Mar 20 10:25:11.398037 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Mar 20 10:25:11.496510 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'.
Mar 20 10:25:11.603005 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 20 10:25:11.706015 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show changes'.
Mar 20 10:25:11.805135 osdx ubnt-cfgd[305039]: inactive
Mar 20 10:25:11.873993 osdx INFO[305045]: FRR daemons did not change
Mar 20 10:25:11.981706 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 20 10:25:11.982975 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:25:11.985294 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:12.002669 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] dnscrypt-proxy 2.0.45
Mar 20 10:25:12.002894 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] Network connectivity detected
Mar 20 10:25:12.002984 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] Dropping privileges
Mar 20 10:25:12.005710 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] Network connectivity detected
Mar 20 10:25:12.005762 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 20 10:25:12.005762 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 20 10:25:12.005762 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] Firefox workaround initialized
Mar 20 10:25:12.005762 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpg6w0xmz9]
Mar 20 10:25:12.008648 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:25:12.034917 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] [RD] OK (DoH) - rtt: 18ms
Mar 20 10:25:12.034917 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] Server with the lowest initial latency: RD (rtt: 18ms)
Mar 20 10:25:12.034917 osdx dnscrypt-proxy[305103]: [2026-03-20 10:25:12] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

Show output

;; communications error to ::1#53: connection refused
;; communications error to ::1#53: connection refused
teldat.com has address 19.18.17.16

---

DNS-over-HTTPS Server With Stamp

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash f4497ee71a53d52ee4a7d76330057c4a3f34986666472f74c541bbcd7e41a847 at DUT0 and expect this output:

Show output

sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD0SX7nGlPVLuSn12MwBXxKPzSYZmZHL3TFQbvNfkGoRwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD0SX7nGlPVLuSn12MwBXxKPzSYZmZHL3TFQbvNfkGoRwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'
set service dns resolver local
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Mar 20 10:25:16.366131 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.2M, max 17.2M, 14.9M free.
Mar 20 10:25:16.366589 osdx systemd-journald[2054]: Received client request to rotate journal, rotating.
Mar 20 10:25:16.366620 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a.
Mar 20 10:25:16.377226 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'.
Mar 20 10:25:16.599421 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 20 10:25:16.833363 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:16.925328 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 20 10:25:16.997255 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 20 10:25:17.100070 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:25:17.169055 osdx ubnt-cfgd[305357]: inactive
Mar 20 10:25:17.190725 osdx INFO[305363]: FRR daemons did not change
Mar 20 10:25:17.222459 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 20 10:25:17.266748 osdx WARNING[305432]: No supported link modes on interface eth0
Mar 20 10:25:17.268205 osdx modulelauncher[305432]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 20 10:25:17.268217 osdx modulelauncher[305432]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 20 10:25:17.269393 osdx modulelauncher[305432]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --
Mar 20 10:25:17.269402 osdx modulelauncher[305432]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75.
Mar 20 10:25:17.308567 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:25:17.321830 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:17.348910 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:25:17.495508 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 20 10:25:17.568917 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 20 10:25:17.741277 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash f4497ee71a53d52ee4a7d76330057c4a3f34986666472f74c541bbcd7e41a847'.
Mar 20 10:25:17.900376 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:17.989212 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Mar 20 10:25:18.132331 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 20 10:25:18.229593 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD0SX7nGlPVLuSn12MwBXxKPzSYZmZHL3TFQbvNfkGoRwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'.
Mar 20 10:25:18.285743 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 20 10:25:18.403185 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:25:18.472110 osdx ubnt-cfgd[305529]: inactive
Mar 20 10:25:18.495633 osdx INFO[305537]: FRR daemons did not change
Mar 20 10:25:18.508924 osdx ca-certificates[305553]: Updating certificates in /etc/ssl/certs...
Mar 20 10:25:19.121391 osdx ubnt-cfgd[306565]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Mar 20 10:25:19.132254 osdx ca-certificates[306570]: 1 added, 0 removed; done.
Mar 20 10:25:19.136360 osdx ca-certificates[306577]: Running hooks in /etc/ca-certificates/update.d...
Mar 20 10:25:19.139692 osdx ca-certificates[306579]: done.
Mar 20 10:25:19.250834 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 20 10:25:19.252119 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:25:19.254680 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:19.269933 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] dnscrypt-proxy 2.0.45
Mar 20 10:25:19.270113 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] Network connectivity detected
Mar 20 10:25:19.270180 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] Dropping privileges
Mar 20 10:25:19.272175 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] Network connectivity detected
Mar 20 10:25:19.272223 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 20 10:25:19.272223 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 20 10:25:19.272223 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] Firefox workaround initialized
Mar 20 10:25:19.272223 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpsra6y8tw]
Mar 20 10:25:19.282926 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:25:19.306906 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] [RD] OK (DoH) - rtt: 13ms
Mar 20 10:25:19.306906 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] Server with the lowest initial latency: RD (rtt: 13ms)
Mar 20 10:25:19.306906 osdx dnscrypt-proxy[306635]: [2026-03-20 10:25:19] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

Show output

;; communications error to ::1#53: connection refused
;; communications error to ::1#53: connection refused
teldat.com has address 19.18.17.16

---

DNSCrypt Server

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server.

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Show output

87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-crypt ip 10.215.168.1
set service dns proxy static RD protocol dns-crypt port 8443
set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns
set service dns proxy static RD protocol dns-crypt provider public-key '87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e'
set service dns resolver local
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$

Show output

Mar 20 10:25:24.306980 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.2M, max 17.2M, 14.9M free.
Mar 20 10:25:24.308221 osdx systemd-journald[2054]: Received client request to rotate journal, rotating.
Mar 20 10:25:24.308269 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a.
Mar 20 10:25:24.317264 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'.
Mar 20 10:25:24.544800 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 20 10:25:24.813296 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:24.910172 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 20 10:25:24.992131 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 20 10:25:25.106021 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:25:25.174203 osdx ubnt-cfgd[308371]: inactive
Mar 20 10:25:25.192187 osdx INFO[308377]: FRR daemons did not change
Mar 20 10:25:25.220217 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 20 10:25:25.267452 osdx WARNING[308446]: No supported link modes on interface eth0
Mar 20 10:25:25.268791 osdx modulelauncher[308446]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 20 10:25:25.268802 osdx modulelauncher[308446]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 20 10:25:25.269937 osdx modulelauncher[308446]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --
Mar 20 10:25:25.269947 osdx modulelauncher[308446]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75.
Mar 20 10:25:25.302886 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:25:25.313550 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:25.366541 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:25:25.483116 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 20 10:25:25.561292 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 20 10:25:25.676830 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Mar 20 10:25:25.863670 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:25.937930 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Mar 20 10:25:26.033349 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 20 10:25:26.092521 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'.
Mar 20 10:25:26.196791 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'.
Mar 20 10:25:26.252428 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'.
Mar 20 10:25:26.352422 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e'.
Mar 20 10:25:26.402246 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 20 10:25:26.510233 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:25:26.575670 osdx ubnt-cfgd[308545]: inactive
Mar 20 10:25:26.597230 osdx INFO[308553]: FRR daemons did not change
Mar 20 10:25:26.609096 osdx ca-certificates[308569]: Updating certificates in /etc/ssl/certs...
Mar 20 10:25:27.145912 osdx ubnt-cfgd[309581]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Mar 20 10:25:27.153697 osdx ca-certificates[309587]: 1 added, 0 removed; done.
Mar 20 10:25:27.156563 osdx ca-certificates[309593]: Running hooks in /etc/ca-certificates/update.d...
Mar 20 10:25:27.159323 osdx ca-certificates[309595]: done.
Mar 20 10:25:27.264607 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 20 10:25:27.265856 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:25:27.267936 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:27.283642 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] dnscrypt-proxy 2.0.45
Mar 20 10:25:27.283886 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] Network connectivity detected
Mar 20 10:25:27.283886 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] Dropping privileges
Mar 20 10:25:27.286442 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] Network connectivity detected
Mar 20 10:25:27.286442 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 20 10:25:27.286442 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 20 10:25:27.286442 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] Firefox workaround initialized
Mar 20 10:25:27.286442 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpdiunnr7f]
Mar 20 10:25:27.287289 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Mar 20 10:25:27.287289 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Mar 20 10:25:27.287338 osdx dnscrypt-proxy[309651]: [2026-03-20 10:25:27] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Mar 20 10:25:27.287715 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

Show output

;; communications error to ::1#53: connection refused
;; communications error to ::1#53: connection refused
teldat.com has address 19.18.17.16

---

DNSCrypt Server With Stamp

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Show output

87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e

Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e ip 10.215.168.1 port 8443 at DUT0 and expect this output:

Show output

sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIfdENCoAgn65DMdssHl0q-bCeb1aOeGLiXL04QtV9hOGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z

Step 3: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIfdENCoAgn65DMdssHl0q-bCeb1aOeGLiXL04QtV9hOGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'
set service dns resolver local
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$

Show output

Mar 20 10:25:32.386821 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.2M, max 17.2M, 14.9M free.
Mar 20 10:25:32.388808 osdx systemd-journald[2054]: Received client request to rotate journal, rotating.
Mar 20 10:25:32.388865 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a.
Mar 20 10:25:32.398514 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'.
Mar 20 10:25:32.764123 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 20 10:25:33.172628 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:33.311277 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 20 10:25:33.380200 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 20 10:25:33.475111 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:25:33.537987 osdx ubnt-cfgd[311385]: inactive
Mar 20 10:25:33.560069 osdx INFO[311391]: FRR daemons did not change
Mar 20 10:25:33.596820 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 20 10:25:33.651079 osdx WARNING[311460]: No supported link modes on interface eth0
Mar 20 10:25:33.652817 osdx modulelauncher[311460]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 20 10:25:33.652833 osdx modulelauncher[311460]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 20 10:25:33.654094 osdx modulelauncher[311460]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --
Mar 20 10:25:33.654104 osdx modulelauncher[311460]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75.
Mar 20 10:25:33.699554 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:25:33.712302 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:33.728035 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:25:33.899887 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 20 10:25:33.993888 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 20 10:25:34.143145 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Mar 20 10:25:34.264399 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e ip 10.215.168.1 port 8443'.
Mar 20 10:25:34.433307 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu.
Mar 20 10:25:34.514543 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Mar 20 10:25:34.613417 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 20 10:25:34.727348 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIfdENCoAgn65DMdssHl0q-bCeb1aOeGLiXL04QtV9hOGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'.
Mar 20 10:25:34.783092 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 20 10:25:34.898694 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'.
Mar 20 10:25:34.987581 osdx ubnt-cfgd[311560]: inactive
Mar 20 10:25:35.015621 osdx INFO[311568]: FRR daemons did not change
Mar 20 10:25:35.030594 osdx ca-certificates[311583]: Updating certificates in /etc/ssl/certs...
Mar 20 10:25:35.671347 osdx ubnt-cfgd[312596]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Mar 20 10:25:35.680367 osdx ca-certificates[312601]: 1 added, 0 removed; done.
Mar 20 10:25:35.683950 osdx ca-certificates[312608]: Running hooks in /etc/ca-certificates/update.d...
Mar 20 10:25:35.687760 osdx ca-certificates[312610]: done.
Mar 20 10:25:35.793107 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 20 10:25:35.794431 osdx cfgd[1833]: [183021]Completed change to active configuration
Mar 20 10:25:35.796795 osdx OSDxCLI[183021]: User 'admin' committed the configuration.
Mar 20 10:25:35.819304 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] dnscrypt-proxy 2.0.45
Mar 20 10:25:35.819519 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] Network connectivity detected
Mar 20 10:25:35.819636 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] Dropping privileges
Mar 20 10:25:35.821795 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Mar 20 10:25:35.823244 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] Network connectivity detected
Mar 20 10:25:35.823295 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 20 10:25:35.823295 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 20 10:25:35.823295 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] Firefox workaround initialized
Mar 20 10:25:35.823295 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp0okmh2ig]
Mar 20 10:25:35.824005 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Mar 20 10:25:35.824050 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Mar 20 10:25:35.824050 osdx dnscrypt-proxy[312666]: [2026-03-20 10:25:35] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

Show output

;; communications error to ::1#53: connection refused
;; communications error to ::1#53: connection refused
teldat.com has address 19.18.17.16

---