Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash f4497ee71a53d52ee4a7d76330057c4a3f34986666472f74c541bbcd7e41a847 set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 20 10:25:54.320669 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.3M, max 17.2M, 14.9M free. Mar 20 10:25:54.324165 osdx systemd-journald[2054]: Received client request to rotate journal, rotating. Mar 20 10:25:54.324235 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a. Mar 20 10:25:54.332762 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'. Mar 20 10:25:54.608461 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'. Mar 20 10:25:54.844668 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu. Mar 20 10:25:54.935603 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 20 10:25:55.017117 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 20 10:25:55.117589 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:25:55.185737 osdx ubnt-cfgd[314798]: inactive Mar 20 10:25:55.207982 osdx INFO[314804]: FRR daemons did not change Mar 20 10:25:55.236155 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 20 10:25:55.283138 osdx WARNING[314873]: No supported link modes on interface eth0 Mar 20 10:25:55.284597 osdx modulelauncher[314873]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 20 10:25:55.284612 osdx modulelauncher[314873]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 20 10:25:55.285768 osdx modulelauncher[314873]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 20 10:25:55.285779 osdx modulelauncher[314873]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 20 10:25:55.326476 osdx cfgd[1833]: [183021]Completed change to active configuration Mar 20 10:25:55.337737 osdx OSDxCLI[183021]: User 'admin' committed the configuration. Mar 20 10:25:55.366565 osdx OSDxCLI[183021]: User 'admin' left the configuration menu. Mar 20 10:25:55.547972 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 20 10:25:55.652266 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'. Mar 20 10:25:57.046501 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu. Mar 20 10:25:57.105114 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 20 10:25:57.203694 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 20 10:25:57.263751 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Mar 20 10:25:57.375447 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Mar 20 10:25:57.502480 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash f4497ee71a53d52ee4a7d76330057c4a3f34986666472f74c541bbcd7e41a847'. Mar 20 10:25:57.554501 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 20 10:25:57.642783 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 20 10:25:57.703142 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 20 10:25:57.843008 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 20 10:25:57.947055 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:25:58.040529 osdx ubnt-cfgd[314972]: inactive Mar 20 10:25:58.060910 osdx INFO[314980]: FRR daemons did not change Mar 20 10:25:58.074907 osdx ca-certificates[314995]: Updating certificates in /etc/ssl/certs... Mar 20 10:25:58.578929 osdx ubnt-cfgd[316008]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 20 10:25:58.586874 osdx ca-certificates[316013]: 1 added, 0 removed; done. Mar 20 10:25:58.589694 osdx ca-certificates[316020]: Running hooks in /etc/ca-certificates/update.d... Mar 20 10:25:58.592509 osdx ca-certificates[316022]: done. Mar 20 10:25:58.732539 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 20 10:25:58.734117 osdx cfgd[1833]: [183021]Completed change to active configuration Mar 20 10:25:58.736774 osdx OSDxCLI[183021]: User 'admin' committed the configuration. Mar 20 10:25:58.753792 osdx OSDxCLI[183021]: User 'admin' left the configuration menu. Mar 20 10:25:58.757820 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] dnscrypt-proxy 2.0.45 Mar 20 10:25:58.758019 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Network connectivity detected Mar 20 10:25:58.758193 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Dropping privileges Mar 20 10:25:58.761319 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Network connectivity detected Mar 20 10:25:58.761400 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 20 10:25:58.761400 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 20 10:25:58.761400 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 20 10:25:58.761400 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Firefox workaround initialized Mar 20 10:25:58.761400 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpjsodotyd] Mar 20 10:25:58.792608 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] [RD] OK (DoH) - rtt: 13ms Mar 20 10:25:58.792608 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] Server with the lowest initial latency: RD (rtt: 13ms) Mar 20 10:25:58.792608 osdx dnscrypt-proxy[316081]: [2026-03-20 10:25:58] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash e694e2261b8856b6b3b9c4c634833cac4e6be53c870f6b873e8ece32ca354459 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 20 10:25:54.299723 osdx systemd-journald[1944]: Runtime Journal (/run/log/journal/e123bcf6d5be44acb5b98c152ad7b31f) is 900.0K, max 6.5M, 5.6M free. Mar 20 10:25:54.303793 osdx systemd-journald[1944]: Received client request to rotate journal, rotating. Mar 20 10:25:54.303865 osdx systemd-journald[1944]: Vacuuming done, freed 0B of archived journals from /run/log/journal/e123bcf6d5be44acb5b98c152ad7b31f. Mar 20 10:25:54.313553 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system journal clear'. Mar 20 10:25:54.552138 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system coredump delete all'. Mar 20 10:25:55.766685 osdx OSDxCLI[56616]: User 'admin' entered the configuration menu. Mar 20 10:25:55.874770 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 20 10:25:55.962996 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 20 10:25:56.084518 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service ssh'. Mar 20 10:25:56.211015 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:25:56.322526 osdx ubnt-cfgd[171274]: inactive Mar 20 10:25:56.421993 osdx INFO[171295]: FRR daemons did not change Mar 20 10:25:56.475119 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 20 10:25:56.530268 osdx WARNING[171364]: No supported link modes on interface eth0 Mar 20 10:25:56.531766 osdx modulelauncher[171364]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 20 10:25:56.531780 osdx modulelauncher[171364]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 20 10:25:56.533138 osdx modulelauncher[171364]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 20 10:25:56.533150 osdx modulelauncher[171364]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 20 10:25:56.623494 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 20 10:25:56.640258 osdx sshd[171430]: Server listening on 0.0.0.0 port 22. Mar 20 10:25:56.640291 osdx sshd[171430]: Server listening on :: port 22. Mar 20 10:25:56.640390 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 20 10:25:56.641387 osdx cfgd[1619]: [56616]Completed change to active configuration Mar 20 10:25:56.654241 osdx OSDxCLI[56616]: User 'admin' committed the configuration. Mar 20 10:25:56.673667 osdx OSDxCLI[56616]: User 'admin' left the configuration menu. Mar 20 10:25:56.820081 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 20 10:25:58.950094 osdx OSDxCLI[56616]: User 'admin' entered the configuration menu. Mar 20 10:25:59.014727 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 20 10:25:59.099640 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 20 10:25:59.161832 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 20 10:25:59.272367 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Mar 20 10:25:59.342917 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Mar 20 10:25:59.453501 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Mar 20 10:25:59.515640 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash e694e2261b8856b6b3b9c4c634833cac4e6be53c870f6b873e8ece32ca354459'. Mar 20 10:25:59.624311 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:25:59.728487 osdx ubnt-cfgd[171477]: inactive Mar 20 10:25:59.753906 osdx INFO[171485]: FRR daemons did not change Mar 20 10:25:59.766908 osdx ca-certificates[171500]: Updating certificates in /etc/ssl/certs... Mar 20 10:26:00.253646 osdx ubnt-cfgd[172513]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 20 10:26:00.261837 osdx ca-certificates[172518]: 1 added, 0 removed; done. Mar 20 10:26:00.264913 osdx ca-certificates[172525]: Running hooks in /etc/ca-certificates/update.d... Mar 20 10:26:00.267700 osdx ca-certificates[172527]: done. Mar 20 10:26:00.347498 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 20 10:26:00.349284 osdx cfgd[1619]: [56616]Completed change to active configuration Mar 20 10:26:00.352985 osdx OSDxCLI[56616]: User 'admin' committed the configuration. Mar 20 10:26:00.368820 osdx OSDxCLI[56616]: User 'admin' left the configuration menu. Mar 20 10:26:00.396275 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] dnscrypt-proxy 2.0.45 Mar 20 10:26:00.396592 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] Network connectivity detected Mar 20 10:26:00.396866 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] Dropping privileges Mar 20 10:26:00.398872 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] Network connectivity detected Mar 20 10:26:00.398953 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 20 10:26:00.398987 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 20 10:26:00.399043 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] Firefox workaround initialized Mar 20 10:26:00.399084 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpdw0numh8] Mar 20 10:26:00.506890 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] [DUT0] OK (DoH) - rtt: 12ms Mar 20 10:26:00.506890 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 12ms) Mar 20 10:26:00.506890 osdx dnscrypt-proxy[172534]: [2026-03-20 10:26:00] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Mar 20 10:26:00.536559 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system journal show | cat'.
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash f4497ee71a53d52ee4a7d76330057c4a3f34986666472f74c541bbcd7e41a847 at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD0SX7nGlPVLuSn12MwBXxKPzSYZmZHL3TFQbvNfkGoRwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD0SX7nGlPVLuSn12MwBXxKPzSYZmZHL3TFQbvNfkGoRwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 20 10:26:11.307401 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.2M, max 17.2M, 14.9M free. Mar 20 10:26:11.309045 osdx systemd-journald[2054]: Received client request to rotate journal, rotating. Mar 20 10:26:11.309113 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a. Mar 20 10:26:11.317799 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'. Mar 20 10:26:11.571489 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'. Mar 20 10:26:11.900891 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu. Mar 20 10:26:12.023441 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 20 10:26:12.082457 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 20 10:26:12.191802 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:12.256131 osdx ubnt-cfgd[317816]: inactive Mar 20 10:26:12.278014 osdx INFO[317822]: FRR daemons did not change Mar 20 10:26:12.309065 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 20 10:26:12.351518 osdx WARNING[317891]: No supported link modes on interface eth0 Mar 20 10:26:12.352886 osdx modulelauncher[317891]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 20 10:26:12.352898 osdx modulelauncher[317891]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 20 10:26:12.354028 osdx modulelauncher[317891]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 20 10:26:12.354036 osdx modulelauncher[317891]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 20 10:26:12.391176 osdx cfgd[1833]: [183021]Completed change to active configuration Mar 20 10:26:12.405097 osdx OSDxCLI[183021]: User 'admin' committed the configuration. Mar 20 10:26:12.420429 osdx OSDxCLI[183021]: User 'admin' left the configuration menu. Mar 20 10:26:12.572155 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 20 10:26:12.668769 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'. Mar 20 10:26:13.941127 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash f4497ee71a53d52ee4a7d76330057c4a3f34986666472f74c541bbcd7e41a847'. Mar 20 10:26:14.092508 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu. Mar 20 10:26:14.156389 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 20 10:26:14.253776 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 20 10:26:14.327155 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSD0SX7nGlPVLuSn12MwBXxKPzSYZmZHL3TFQbvNfkGoRwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Mar 20 10:26:14.418258 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 20 10:26:14.472695 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 20 10:26:14.569460 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 20 10:26:14.628927 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 20 10:26:14.742754 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 20 10:26:14.852463 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:14.916103 osdx ubnt-cfgd[317992]: inactive Mar 20 10:26:14.939386 osdx INFO[318000]: FRR daemons did not change Mar 20 10:26:14.952927 osdx ca-certificates[318016]: Updating certificates in /etc/ssl/certs... Mar 20 10:26:15.512781 osdx ubnt-cfgd[319028]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 20 10:26:15.520594 osdx ca-certificates[319034]: 1 added, 0 removed; done. Mar 20 10:26:15.523488 osdx ca-certificates[319040]: Running hooks in /etc/ca-certificates/update.d... Mar 20 10:26:15.526163 osdx ca-certificates[319042]: done. Mar 20 10:26:15.665366 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 20 10:26:15.666790 osdx cfgd[1833]: [183021]Completed change to active configuration Mar 20 10:26:15.668927 osdx OSDxCLI[183021]: User 'admin' committed the configuration. Mar 20 10:26:15.683677 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] dnscrypt-proxy 2.0.45 Mar 20 10:26:15.683939 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Network connectivity detected Mar 20 10:26:15.684032 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Dropping privileges Mar 20 10:26:15.686745 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Network connectivity detected Mar 20 10:26:15.686801 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 20 10:26:15.686801 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 20 10:26:15.686801 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 20 10:26:15.686862 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Firefox workaround initialized Mar 20 10:26:15.686862 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpiz5rufv6] Mar 20 10:26:15.694350 osdx OSDxCLI[183021]: User 'admin' left the configuration menu. Mar 20 10:26:15.739113 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] [RD] OK (DoH) - rtt: 11ms Mar 20 10:26:15.739113 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] Server with the lowest initial latency: RD (rtt: 11ms) Mar 20 10:26:15.739113 osdx dnscrypt-proxy[319101]: [2026-03-20 10:26:15] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash e694e2261b8856b6b3b9c4c634833cac4e6be53c870f6b873e8ece32ca354459 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQg5pTiJhuIVrazucTGNIM8rE5r5TyHD2uHPo7OMso1RFkNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQg5pTiJhuIVrazucTGNIM8rE5r5TyHD2uHPo7OMso1RFkNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 20 10:26:12.295450 osdx systemd-journald[1944]: Runtime Journal (/run/log/journal/e123bcf6d5be44acb5b98c152ad7b31f) is 932.0K, max 6.5M, 5.6M free. Mar 20 10:26:12.297524 osdx systemd-journald[1944]: Received client request to rotate journal, rotating. Mar 20 10:26:12.297593 osdx systemd-journald[1944]: Vacuuming done, freed 0B of archived journals from /run/log/journal/e123bcf6d5be44acb5b98c152ad7b31f. Mar 20 10:26:12.307879 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system journal clear'. Mar 20 10:26:12.562114 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system coredump delete all'. Mar 20 10:26:13.758336 osdx OSDxCLI[56616]: User 'admin' entered the configuration menu. Mar 20 10:26:13.934241 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 20 10:26:14.017120 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 20 10:26:14.098452 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service ssh'. Mar 20 10:26:14.211868 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:14.283828 osdx ubnt-cfgd[174261]: inactive Mar 20 10:26:14.360710 osdx INFO[174282]: FRR daemons did not change Mar 20 10:26:14.389534 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 20 10:26:14.433732 osdx WARNING[174351]: No supported link modes on interface eth0 Mar 20 10:26:14.435038 osdx modulelauncher[174351]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 20 10:26:14.435050 osdx modulelauncher[174351]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 20 10:26:14.436218 osdx modulelauncher[174351]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 20 10:26:14.436227 osdx modulelauncher[174351]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 20 10:26:14.522034 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 20 10:26:14.533404 osdx sshd[174417]: Server listening on 0.0.0.0 port 22. Mar 20 10:26:14.533428 osdx sshd[174417]: Server listening on :: port 22. Mar 20 10:26:14.533515 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 20 10:26:14.534295 osdx cfgd[1619]: [56616]Completed change to active configuration Mar 20 10:26:14.546147 osdx OSDxCLI[56616]: User 'admin' committed the configuration. Mar 20 10:26:14.560739 osdx OSDxCLI[56616]: User 'admin' left the configuration menu. Mar 20 10:26:14.724073 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 20 10:26:16.935543 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash e694e2261b8856b6b3b9c4c634833cac4e6be53c870f6b873e8ece32ca354459'. Mar 20 10:26:17.066673 osdx OSDxCLI[56616]: User 'admin' entered the configuration menu. Mar 20 10:26:17.123285 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 20 10:26:17.222813 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 20 10:26:17.290367 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 20 10:26:17.393185 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQg5pTiJhuIVrazucTGNIM8rE5r5TyHD2uHPo7OMso1RFkNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Mar 20 10:26:17.472258 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:17.572217 osdx ubnt-cfgd[174465]: inactive Mar 20 10:26:17.593926 osdx INFO[174473]: FRR daemons did not change Mar 20 10:26:17.607852 osdx ca-certificates[174489]: Updating certificates in /etc/ssl/certs... Mar 20 10:26:18.169583 osdx ubnt-cfgd[175501]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 20 10:26:18.177326 osdx ca-certificates[175507]: 1 added, 0 removed; done. Mar 20 10:26:18.180164 osdx ca-certificates[175513]: Running hooks in /etc/ca-certificates/update.d... Mar 20 10:26:18.183033 osdx ca-certificates[175515]: done. Mar 20 10:26:18.249991 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 20 10:26:18.252347 osdx cfgd[1619]: [56616]Completed change to active configuration Mar 20 10:26:18.255505 osdx OSDxCLI[56616]: User 'admin' committed the configuration. Mar 20 10:26:18.269945 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] dnscrypt-proxy 2.0.45 Mar 20 10:26:18.270237 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] Network connectivity detected Mar 20 10:26:18.270237 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] Dropping privileges Mar 20 10:26:18.272371 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] Network connectivity detected Mar 20 10:26:18.272431 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 20 10:26:18.272431 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 20 10:26:18.272431 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] Firefox workaround initialized Mar 20 10:26:18.272431 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpk5xpee9o] Mar 20 10:26:18.284573 osdx OSDxCLI[56616]: User 'admin' left the configuration menu. Mar 20 10:26:18.376790 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] [DUT0] OK (DoH) - rtt: 20ms Mar 20 10:26:18.376790 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 20ms) Mar 20 10:26:18.376790 osdx dnscrypt-proxy[175522]: [2026-03-20 10:26:18] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Mar 20 10:26:24.287078 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.3M, max 17.2M, 14.9M free. Mar 20 10:26:24.288084 osdx systemd-journald[2054]: Received client request to rotate journal, rotating. Mar 20 10:26:24.288138 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a. Mar 20 10:26:24.297143 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'. Mar 20 10:26:24.523496 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'. Mar 20 10:26:24.778789 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu. Mar 20 10:26:24.907525 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 20 10:26:24.960614 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 20 10:26:25.078517 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:25.145533 osdx ubnt-cfgd[320832]: inactive Mar 20 10:26:25.168426 osdx INFO[320838]: FRR daemons did not change Mar 20 10:26:25.200099 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 20 10:26:25.245594 osdx WARNING[320907]: No supported link modes on interface eth0 Mar 20 10:26:25.246993 osdx modulelauncher[320907]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 20 10:26:25.247008 osdx modulelauncher[320907]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 20 10:26:25.248179 osdx modulelauncher[320907]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 20 10:26:25.248188 osdx modulelauncher[320907]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 20 10:26:25.280884 osdx cfgd[1833]: [183021]Completed change to active configuration Mar 20 10:26:25.294610 osdx OSDxCLI[183021]: User 'admin' committed the configuration. Mar 20 10:26:25.311155 osdx OSDxCLI[183021]: User 'admin' left the configuration menu. Mar 20 10:26:25.455065 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 20 10:26:25.522527 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'. Mar 20 10:26:26.638967 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Mar 20 10:26:26.771247 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu. Mar 20 10:26:26.826268 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 20 10:26:26.921260 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 20 10:26:26.983121 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Mar 20 10:26:27.079773 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Mar 20 10:26:27.136762 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Mar 20 10:26:27.235902 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e'. Mar 20 10:26:27.295360 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 20 10:26:27.402675 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 20 10:26:27.502733 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 20 10:26:27.558276 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 20 10:26:27.669167 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:27.740047 osdx ubnt-cfgd[321009]: inactive Mar 20 10:26:27.759842 osdx INFO[321017]: FRR daemons did not change Mar 20 10:26:27.775327 osdx ca-certificates[321032]: Updating certificates in /etc/ssl/certs... Mar 20 10:26:28.330165 osdx ubnt-cfgd[322045]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 20 10:26:28.338930 osdx ca-certificates[322051]: 1 added, 0 removed; done. Mar 20 10:26:28.342873 osdx ca-certificates[322057]: Running hooks in /etc/ca-certificates/update.d... Mar 20 10:26:28.346736 osdx ca-certificates[322059]: done. Mar 20 10:26:28.464556 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 20 10:26:28.466129 osdx cfgd[1833]: [183021]Completed change to active configuration Mar 20 10:26:28.468926 osdx OSDxCLI[183021]: User 'admin' committed the configuration. Mar 20 10:26:28.485149 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] dnscrypt-proxy 2.0.45 Mar 20 10:26:28.485369 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Network connectivity detected Mar 20 10:26:28.485437 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Dropping privileges Mar 20 10:26:28.487867 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Network connectivity detected Mar 20 10:26:28.487932 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 20 10:26:28.487932 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 20 10:26:28.487932 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 20 10:26:28.487932 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Firefox workaround initialized Mar 20 10:26:28.487932 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpg62y5mmm] Mar 20 10:26:28.488975 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Mar 20 10:26:28.488975 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Mar 20 10:26:28.489048 osdx dnscrypt-proxy[322118]: [2026-03-20 10:26:28] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Mar 20 10:26:28.498047 osdx OSDxCLI[183021]: User 'admin' left the configuration menu.
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash e694e2261b8856b6b3b9c4c634833cac4e6be53c870f6b873e8ece32ca354459 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 20 10:26:24.262541 osdx systemd-journald[1944]: Runtime Journal (/run/log/journal/e123bcf6d5be44acb5b98c152ad7b31f) is 956.0K, max 6.5M, 5.5M free. Mar 20 10:26:24.266124 osdx systemd-journald[1944]: Received client request to rotate journal, rotating. Mar 20 10:26:24.266196 osdx systemd-journald[1944]: Vacuuming done, freed 0B of archived journals from /run/log/journal/e123bcf6d5be44acb5b98c152ad7b31f. Mar 20 10:26:24.275948 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system journal clear'. Mar 20 10:26:24.490769 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system coredump delete all'. Mar 20 10:26:25.558648 osdx OSDxCLI[56616]: User 'admin' entered the configuration menu. Mar 20 10:26:25.654449 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 20 10:26:25.717610 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 20 10:26:25.808058 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service ssh'. Mar 20 10:26:25.871518 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:26.008350 osdx ubnt-cfgd[177239]: inactive Mar 20 10:26:26.092696 osdx INFO[177260]: FRR daemons did not change Mar 20 10:26:26.130131 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 20 10:26:26.179073 osdx WARNING[177329]: No supported link modes on interface eth0 Mar 20 10:26:26.180522 osdx modulelauncher[177329]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 20 10:26:26.180536 osdx modulelauncher[177329]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 20 10:26:26.181699 osdx modulelauncher[177329]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 20 10:26:26.181710 osdx modulelauncher[177329]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 20 10:26:26.274371 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 20 10:26:26.285923 osdx sshd[177395]: Server listening on 0.0.0.0 port 22. Mar 20 10:26:26.285947 osdx sshd[177395]: Server listening on :: port 22. Mar 20 10:26:26.286023 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 20 10:26:26.287218 osdx cfgd[1619]: [56616]Completed change to active configuration Mar 20 10:26:26.298846 osdx OSDxCLI[56616]: User 'admin' committed the configuration. Mar 20 10:26:26.315650 osdx OSDxCLI[56616]: User 'admin' left the configuration menu. Mar 20 10:26:26.464662 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 20 10:26:28.706793 osdx OSDxCLI[56616]: User 'admin' entered the configuration menu. Mar 20 10:26:28.764956 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 20 10:26:28.863655 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 20 10:26:28.933282 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 20 10:26:29.042487 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Mar 20 10:26:29.147543 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Mar 20 10:26:29.212703 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Mar 20 10:26:29.308666 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash e694e2261b8856b6b3b9c4c634833cac4e6be53c870f6b873e8ece32ca354459'. Mar 20 10:26:29.385273 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:29.476195 osdx ubnt-cfgd[177442]: inactive Mar 20 10:26:29.497344 osdx INFO[177450]: FRR daemons did not change Mar 20 10:26:29.509578 osdx ca-certificates[177466]: Updating certificates in /etc/ssl/certs... Mar 20 10:26:29.996873 osdx ubnt-cfgd[178478]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 20 10:26:30.004400 osdx ca-certificates[178483]: 1 added, 0 removed; done. Mar 20 10:26:30.007313 osdx ca-certificates[178490]: Running hooks in /etc/ca-certificates/update.d... Mar 20 10:26:30.010262 osdx ca-certificates[178492]: done. Mar 20 10:26:30.078517 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 20 10:26:30.080330 osdx cfgd[1619]: [56616]Completed change to active configuration Mar 20 10:26:30.084055 osdx OSDxCLI[56616]: User 'admin' committed the configuration. Mar 20 10:26:30.097929 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] dnscrypt-proxy 2.0.45 Mar 20 10:26:30.098101 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] Network connectivity detected Mar 20 10:26:30.098218 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] Dropping privileges Mar 20 10:26:30.100272 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] Network connectivity detected Mar 20 10:26:30.100309 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 20 10:26:30.100309 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 20 10:26:30.100345 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] Firefox workaround initialized Mar 20 10:26:30.100345 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] Loading the set of cloaking rules from [/tmp/tmppm_okh45] Mar 20 10:26:30.106567 osdx OSDxCLI[56616]: User 'admin' left the configuration menu. Mar 20 10:26:30.181335 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] [DUT0] OK (DoH) - rtt: 11ms Mar 20 10:26:30.181335 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 11ms) Mar 20 10:26:30.181335 osdx dnscrypt-proxy[178499]: [2026-03-20 10:26:30] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIfdENCoAgn65DMdssHl0q-bCeb1aOeGLiXL04QtV9hOGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIfdENCoAgn65DMdssHl0q-bCeb1aOeGLiXL04QtV9hOGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Mar 20 10:26:36.291586 osdx systemd-journald[2054]: Runtime Journal (/run/log/journal/ba147585e3944580985006d3d45a280a) is 2.3M, max 17.2M, 14.9M free. Mar 20 10:26:36.295512 osdx systemd-journald[2054]: Received client request to rotate journal, rotating. Mar 20 10:26:36.295573 osdx systemd-journald[2054]: Vacuuming done, freed 0B of archived journals from /run/log/journal/ba147585e3944580985006d3d45a280a. Mar 20 10:26:36.302240 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal clear'. Mar 20 10:26:36.525755 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system coredump delete all'. Mar 20 10:26:36.780611 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu. Mar 20 10:26:36.873436 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 20 10:26:36.945269 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 20 10:26:37.006550 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:37.096863 osdx ubnt-cfgd[323850]: inactive Mar 20 10:26:37.114234 osdx INFO[323856]: FRR daemons did not change Mar 20 10:26:37.147517 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 20 10:26:37.186673 osdx WARNING[323925]: No supported link modes on interface eth0 Mar 20 10:26:37.188213 osdx modulelauncher[323925]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 20 10:26:37.188226 osdx modulelauncher[323925]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 20 10:26:37.189432 osdx modulelauncher[323925]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 20 10:26:37.189441 osdx modulelauncher[323925]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 20 10:26:37.223386 osdx cfgd[1833]: [183021]Completed change to active configuration Mar 20 10:26:37.236003 osdx OSDxCLI[183021]: User 'admin' committed the configuration. Mar 20 10:26:37.251780 osdx OSDxCLI[183021]: User 'admin' left the configuration menu. Mar 20 10:26:37.419907 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 20 10:26:37.498479 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'system journal show | cat'. Mar 20 10:26:38.903378 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Mar 20 10:26:39.044137 osdx OSDxCLI[183021]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 87:dd:10:d0:a8:02:09:fa:e4:33:1d:b2:c1:e5:d2:af:9b:09:e6:f5:68:e7:86:2e:25:cb:d3:84:2d:57:d8:4e ip 10.215.168.1 port 8443'. Mar 20 10:26:39.211175 osdx OSDxCLI[183021]: User 'admin' entered the configuration menu. Mar 20 10:26:39.293914 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 20 10:26:39.404364 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 20 10:26:39.479833 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIIfdENCoAgn65DMdssHl0q-bCeb1aOeGLiXL04QtV9hOGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Mar 20 10:26:39.612164 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 20 10:26:39.709494 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 20 10:26:39.845961 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 20 10:26:39.904760 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 20 10:26:40.059733 osdx OSDxCLI[183021]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:40.136657 osdx ubnt-cfgd[324027]: inactive Mar 20 10:26:40.161355 osdx INFO[324035]: FRR daemons did not change Mar 20 10:26:40.178556 osdx ca-certificates[324051]: Updating certificates in /etc/ssl/certs... Mar 20 10:26:40.799510 osdx ubnt-cfgd[325063]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 20 10:26:40.808153 osdx ca-certificates[325068]: 1 added, 0 removed; done. Mar 20 10:26:40.811986 osdx ca-certificates[325075]: Running hooks in /etc/ca-certificates/update.d... Mar 20 10:26:40.814963 osdx ca-certificates[325077]: done. Mar 20 10:26:40.964051 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 20 10:26:40.969452 osdx cfgd[1833]: [183021]Completed change to active configuration Mar 20 10:26:40.976792 osdx OSDxCLI[183021]: User 'admin' committed the configuration. Mar 20 10:26:41.004290 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] dnscrypt-proxy 2.0.45 Mar 20 10:26:41.004290 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Network connectivity detected Mar 20 10:26:41.005064 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Dropping privileges Mar 20 10:26:41.005892 osdx OSDxCLI[183021]: User 'admin' left the configuration menu. Mar 20 10:26:41.009405 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Network connectivity detected Mar 20 10:26:41.009552 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 20 10:26:41.009552 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 20 10:26:41.009552 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 20 10:26:41.009552 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Firefox workaround initialized Mar 20 10:26:41.009552 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpj2hzul0u] Mar 20 10:26:41.010837 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Mar 20 10:26:41.010837 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Mar 20 10:26:41.010837 osdx dnscrypt-proxy[325136]: [2026-03-20 10:26:41] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash e694e2261b8856b6b3b9c4c634833cac4e6be53c870f6b873e8ece32ca354459 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQg5pTiJhuIVrazucTGNIM8rE5r5TyHD2uHPo7OMso1RFkNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQg5pTiJhuIVrazucTGNIM8rE5r5TyHD2uHPo7OMso1RFkNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 20 10:26:36.272457 osdx systemd-journald[1944]: Runtime Journal (/run/log/journal/e123bcf6d5be44acb5b98c152ad7b31f) is 956.0K, max 6.5M, 5.5M free. Mar 20 10:26:36.275936 osdx systemd-journald[1944]: Received client request to rotate journal, rotating. Mar 20 10:26:36.276018 osdx systemd-journald[1944]: Vacuuming done, freed 0B of archived journals from /run/log/journal/e123bcf6d5be44acb5b98c152ad7b31f. Mar 20 10:26:36.284086 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system journal clear'. Mar 20 10:26:36.504002 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'system coredump delete all'. Mar 20 10:26:37.647371 osdx OSDxCLI[56616]: User 'admin' entered the configuration menu. Mar 20 10:26:37.768079 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 20 10:26:37.844388 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 20 10:26:37.950158 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service ssh'. Mar 20 10:26:38.033708 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:38.173648 osdx ubnt-cfgd[180216]: inactive Mar 20 10:26:38.256349 osdx INFO[180237]: FRR daemons did not change Mar 20 10:26:38.291927 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 20 10:26:38.353510 osdx WARNING[180306]: No supported link modes on interface eth0 Mar 20 10:26:38.355558 osdx modulelauncher[180306]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 20 10:26:38.355647 osdx modulelauncher[180306]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 20 10:26:38.357289 osdx modulelauncher[180306]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 20 10:26:38.357355 osdx modulelauncher[180306]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 20 10:26:38.460519 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 20 10:26:38.476760 osdx sshd[180372]: Server listening on 0.0.0.0 port 22. Mar 20 10:26:38.476789 osdx sshd[180372]: Server listening on :: port 22. Mar 20 10:26:38.476891 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 20 10:26:38.478014 osdx cfgd[1619]: [56616]Completed change to active configuration Mar 20 10:26:38.493210 osdx OSDxCLI[56616]: User 'admin' committed the configuration. Mar 20 10:26:38.521967 osdx OSDxCLI[56616]: User 'admin' left the configuration menu. Mar 20 10:26:38.708916 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 20 10:26:41.239585 osdx OSDxCLI[56616]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash e694e2261b8856b6b3b9c4c634833cac4e6be53c870f6b873e8ece32ca354459'. Mar 20 10:26:41.432033 osdx OSDxCLI[56616]: User 'admin' entered the configuration menu. Mar 20 10:26:41.523992 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 20 10:26:41.578048 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 20 10:26:41.672900 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 20 10:26:41.736582 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQg5pTiJhuIVrazucTGNIM8rE5r5TyHD2uHPo7OMso1RFkNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Mar 20 10:26:41.843005 osdx OSDxCLI[56616]: User 'admin' added a new cfg line: 'show working'. Mar 20 10:26:41.905708 osdx ubnt-cfgd[180419]: inactive Mar 20 10:26:41.925631 osdx INFO[180427]: FRR daemons did not change Mar 20 10:26:41.941814 osdx ca-certificates[180442]: Updating certificates in /etc/ssl/certs... Mar 20 10:26:42.464069 osdx ubnt-cfgd[181455]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 20 10:26:42.471353 osdx ca-certificates[181461]: 1 added, 0 removed; done. Mar 20 10:26:42.474388 osdx ca-certificates[181467]: Running hooks in /etc/ca-certificates/update.d... Mar 20 10:26:42.477742 osdx ca-certificates[181469]: done. Mar 20 10:26:42.556666 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 20 10:26:42.559314 osdx cfgd[1619]: [56616]Completed change to active configuration Mar 20 10:26:42.566529 osdx OSDxCLI[56616]: User 'admin' committed the configuration. Mar 20 10:26:42.597188 osdx OSDxCLI[56616]: User 'admin' left the configuration menu. Mar 20 10:26:42.601793 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] dnscrypt-proxy 2.0.45 Mar 20 10:26:42.602027 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] Network connectivity detected Mar 20 10:26:42.602173 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] Dropping privileges Mar 20 10:26:42.604748 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] Network connectivity detected Mar 20 10:26:42.604790 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 20 10:26:42.604790 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 20 10:26:42.604832 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] Firefox workaround initialized Mar 20 10:26:42.604832 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp7z80iogm] Mar 20 10:26:42.732809 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] [DUT0] OK (DoH) - rtt: 12ms Mar 20 10:26:42.732809 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 12ms) Mar 20 10:26:42.732809 osdx dnscrypt-proxy[181476]: [2026-03-20 10:26:42] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13