Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash a91e708969927d2f5720bb78c799ea1656d98ed9fbeabfca48887da4ed4634cd set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:26:48.291764 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:26:48.293717 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:26:48.293766 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:26:48.303663 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:26:48.510347 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:26:48.715208 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:48.803002 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:26:48.874079 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:48.976660 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:49.031919 osdx ubnt-cfgd[879478]: inactive Mar 05 21:26:49.051855 osdx INFO[879484]: FRR daemons did not change Mar 05 21:26:49.081734 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:26:49.121273 osdx WARNING[879553]: No supported link modes on interface eth0 Mar 05 21:26:49.122588 osdx modulelauncher[879553]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:26:49.122599 osdx modulelauncher[879553]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:26:49.123742 osdx modulelauncher[879553]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:26:49.123751 osdx modulelauncher[879553]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:26:49.162456 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:49.173777 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:49.190101 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:49.333592 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:26:49.399061 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:26:49.541041 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:49.612384 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 05 21:26:49.707840 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:26:49.773462 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Mar 05 21:26:49.869961 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Mar 05 21:26:49.929786 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash a91e708969927d2f5720bb78c799ea1656d98ed9fbeabfca48887da4ed4634cd'. Mar 05 21:26:50.018164 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:26:50.097166 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:50.183569 osdx ubnt-cfgd[879649]: inactive Mar 05 21:26:50.205923 osdx INFO[879657]: FRR daemons did not change Mar 05 21:26:50.218890 osdx ca-certificates[879672]: Updating certificates in /etc/ssl/certs... Mar 05 21:26:50.738963 osdx ubnt-cfgd[880685]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:26:50.749386 osdx ca-certificates[880691]: 1 added, 0 removed; done. Mar 05 21:26:50.752288 osdx ca-certificates[880697]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:26:50.755001 osdx ca-certificates[880699]: done. Mar 05 21:26:50.874032 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:26:50.875127 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:50.877102 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:50.893593 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:50.901764 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:26:50.901976 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] Network connectivity detected Mar 05 21:26:50.902031 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] Dropping privileges Mar 05 21:26:50.903943 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] Network connectivity detected Mar 05 21:26:50.903977 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:26:50.903977 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:26:50.904004 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] Firefox workaround initialized Mar 05 21:26:50.904004 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpzxxn1u5k] Mar 05 21:26:50.999184 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] [RD] OK (DoH) - rtt: 78ms Mar 05 21:26:50.999184 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] Server with the lowest initial latency: RD (rtt: 78ms) Mar 05 21:26:50.999184 osdx dnscrypt-proxy[880755]: [2026-03-05 21:26:50] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Mar 05 21:26:56.322947 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:26:56.324448 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:26:56.324502 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:26:56.332116 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:26:56.540575 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:26:56.751777 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:56.832599 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:26:56.899257 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:56.999759 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:57.057195 osdx ubnt-cfgd[882490]: inactive Mar 05 21:26:57.076264 osdx INFO[882496]: FRR daemons did not change Mar 05 21:26:57.104450 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:26:57.149277 osdx WARNING[882565]: No supported link modes on interface eth0 Mar 05 21:26:57.150592 osdx modulelauncher[882565]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:26:57.150603 osdx modulelauncher[882565]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:26:57.151672 osdx modulelauncher[882565]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:26:57.151680 osdx modulelauncher[882565]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:26:57.185936 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:57.196821 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:57.212063 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:57.352771 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:26:57.416757 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:26:57.550628 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:57.614796 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:57.734499 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:57.784974 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:57.837915 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:58.102795 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:58.170796 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:26:58.285544 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Mar 05 21:26:58.371443 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Mar 05 21:26:58.460586 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:26:58.521027 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show changes'. Mar 05 21:26:58.619775 osdx ubnt-cfgd[882668]: inactive Mar 05 21:26:58.640794 osdx INFO[882674]: FRR daemons did not change Mar 05 21:26:58.737034 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:26:58.739067 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:58.742507 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:58.762626 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:26:58.762817 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] Network connectivity detected Mar 05 21:26:58.762858 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] Dropping privileges Mar 05 21:26:58.764667 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] Network connectivity detected Mar 05 21:26:58.764713 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:26:58.764713 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:26:58.764713 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] Firefox workaround initialized Mar 05 21:26:58.764713 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpe2l_xs92] Mar 05 21:26:58.777332 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:58.786713 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABD0SH7kClNPxHbVd2G6Qj1T": x509: certificate signed by unknown authority Mar 05 21:26:58.786713 osdx dnscrypt-proxy[882732]: [2026-03-05 21:26:58] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:27:08.317566 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:27:08.318886 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:27:08.318934 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:27:08.328666 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:27:08.565675 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:27:08.811563 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:08.904016 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:27:08.977978 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:27:09.052983 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:27:09.152973 osdx ubnt-cfgd[882996]: inactive Mar 05 21:27:09.192965 osdx INFO[883002]: FRR daemons did not change Mar 05 21:27:09.222887 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:27:09.263043 osdx WARNING[883071]: No supported link modes on interface eth0 Mar 05 21:27:09.264667 osdx modulelauncher[883071]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:27:09.264678 osdx modulelauncher[883071]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:27:09.266113 osdx modulelauncher[883071]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:27:09.266123 osdx modulelauncher[883071]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:27:09.301111 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:27:09.312966 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:09.329644 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:09.492749 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:27:09.559118 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:27:09.746610 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:09.821055 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:27:09.955366 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:27:10.039998 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:10.089699 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:10.255175 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:10.311813 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:27:10.413381 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Mar 05 21:27:10.466984 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Mar 05 21:27:10.570067 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Mar 05 21:27:10.657104 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:27:10.738844 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show changes'. Mar 05 21:27:10.848400 osdx ubnt-cfgd[883175]: inactive Mar 05 21:27:10.867531 osdx INFO[883181]: FRR daemons did not change Mar 05 21:27:10.971136 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:27:10.972914 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:27:10.975026 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:10.999917 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:10] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:27:11.000147 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:10] [NOTICE] Network connectivity detected Mar 05 21:27:11.000169 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] Dropping privileges Mar 05 21:27:11.002045 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] Network connectivity detected Mar 05 21:27:11.002093 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:27:11.002093 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:27:11.002093 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] Firefox workaround initialized Mar 05 21:27:11.002093 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] Loading the set of cloaking rules from [/tmp/tmprucatgbg] Mar 05 21:27:11.018531 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:11.080585 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] [RD] OK (DoH) - rtt: 70ms Mar 05 21:27:11.080585 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] Server with the lowest initial latency: RD (rtt: 70ms) Mar 05 21:27:11.080585 osdx dnscrypt-proxy[883239]: [2026-03-05 21:27:11] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash a91e708969927d2f5720bb78c799ea1656d98ed9fbeabfca48887da4ed4634cd at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCpHnCJaZJ9L1cgu3jHmeoWVtmO2fvqv8pIiH2k7UY0zQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCpHnCJaZJ9L1cgu3jHmeoWVtmO2fvqv8pIiH2k7UY0zQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:27:15.284721 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:27:15.287010 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:27:15.287061 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:27:15.295564 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:27:15.499899 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:27:15.836507 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:15.925189 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:27:16.014526 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:27:16.118700 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:27:16.190648 osdx ubnt-cfgd[883495]: inactive Mar 05 21:27:16.215371 osdx INFO[883501]: FRR daemons did not change Mar 05 21:27:16.267044 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:27:16.308776 osdx WARNING[883570]: No supported link modes on interface eth0 Mar 05 21:27:16.310144 osdx modulelauncher[883570]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:27:16.310160 osdx modulelauncher[883570]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:27:16.311259 osdx modulelauncher[883570]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:27:16.311267 osdx modulelauncher[883570]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:27:16.345671 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:27:16.356627 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:16.383108 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:16.529784 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:27:16.593276 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:27:16.723832 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash a91e708969927d2f5720bb78c799ea1656d98ed9fbeabfca48887da4ed4634cd'. Mar 05 21:27:16.891198 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:16.952729 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 05 21:27:17.048564 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:27:17.108868 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCpHnCJaZJ9L1cgu3jHmeoWVtmO2fvqv8pIiH2k7UY0zQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Mar 05 21:27:17.196885 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:27:17.298484 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:27:17.359974 osdx ubnt-cfgd[883667]: inactive Mar 05 21:27:17.379810 osdx INFO[883675]: FRR daemons did not change Mar 05 21:27:17.393328 osdx ca-certificates[883691]: Updating certificates in /etc/ssl/certs... Mar 05 21:27:17.923347 osdx ubnt-cfgd[884703]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:27:17.931430 osdx ca-certificates[884709]: 1 added, 0 removed; done. Mar 05 21:27:17.935149 osdx ca-certificates[884715]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:27:17.937922 osdx ca-certificates[884717]: done. Mar 05 21:27:18.047366 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:27:18.048619 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:27:18.051014 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:18.066881 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:27:18.067139 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] Network connectivity detected Mar 05 21:27:18.067245 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] Dropping privileges Mar 05 21:27:18.069544 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:18.070114 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] Network connectivity detected Mar 05 21:27:18.070166 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:27:18.070166 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:27:18.070166 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] Firefox workaround initialized Mar 05 21:27:18.070166 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpinw4ukh6] Mar 05 21:27:18.168357 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] [RD] OK (DoH) - rtt: 83ms Mar 05 21:27:18.168357 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] Server with the lowest initial latency: RD (rtt: 83ms) Mar 05 21:27:18.168357 osdx dnscrypt-proxy[884773]: [2026-03-05 21:27:18] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 'b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Mar 05 21:27:23.287061 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:27:23.287648 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:27:23.287696 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:27:23.297833 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:27:23.546252 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:27:23.810708 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:23.895256 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:27:23.963546 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:27:24.066307 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:27:24.125920 osdx ubnt-cfgd[886506]: inactive Mar 05 21:27:24.145085 osdx INFO[886512]: FRR daemons did not change Mar 05 21:27:24.179661 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:27:24.223481 osdx WARNING[886581]: No supported link modes on interface eth0 Mar 05 21:27:24.224992 osdx modulelauncher[886581]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:27:24.225005 osdx modulelauncher[886581]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:27:24.226171 osdx modulelauncher[886581]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:27:24.226179 osdx modulelauncher[886581]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:27:24.263327 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:27:24.274619 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:24.290444 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:24.428469 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:27:24.495262 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:27:24.600994 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Mar 05 21:27:24.782182 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:24.839226 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 05 21:27:24.933450 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:27:24.990341 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Mar 05 21:27:25.083105 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Mar 05 21:27:25.138146 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Mar 05 21:27:25.234221 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e'. Mar 05 21:27:25.284799 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:27:25.387923 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:27:25.453716 osdx ubnt-cfgd[886680]: inactive Mar 05 21:27:25.473547 osdx INFO[886688]: FRR daemons did not change Mar 05 21:27:25.486624 osdx ca-certificates[886704]: Updating certificates in /etc/ssl/certs... Mar 05 21:27:26.004136 osdx ubnt-cfgd[887716]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:27:26.012781 osdx ca-certificates[887722]: 1 added, 0 removed; done. Mar 05 21:27:26.016489 osdx ca-certificates[887728]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:27:26.020051 osdx ca-certificates[887730]: done. Mar 05 21:27:26.127986 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:27:26.129438 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:27:26.132847 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:26.149182 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:26.154764 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:27:26.154964 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] Network connectivity detected Mar 05 21:27:26.155006 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] Dropping privileges Mar 05 21:27:26.157541 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] Network connectivity detected Mar 05 21:27:26.157608 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:27:26.157608 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:27:26.157608 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] Firefox workaround initialized Mar 05 21:27:26.157608 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] Loading the set of cloaking rules from [/tmp/tmppcfts06_] Mar 05 21:27:26.158282 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Mar 05 21:27:26.158282 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Mar 05 21:27:26.158327 osdx dnscrypt-proxy[887786]: [2026-03-05 21:27:26] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILUIlnh4yjqUNi7D39zTSJQkOZKiK1OV5b28aNEzzeleGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILUIlnh4yjqUNi7D39zTSJQkOZKiK1OV5b28aNEzzeleGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Mar 05 21:27:31.349761 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:27:31.351253 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:27:31.351316 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:27:31.361680 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:27:31.591787 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:27:31.847502 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:31.927602 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:27:32.008277 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:27:32.126265 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:27:32.200245 osdx ubnt-cfgd[889519]: inactive Mar 05 21:27:32.218419 osdx INFO[889525]: FRR daemons did not change Mar 05 21:27:32.247252 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:27:32.287083 osdx WARNING[889594]: No supported link modes on interface eth0 Mar 05 21:27:32.288559 osdx modulelauncher[889594]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:27:32.288571 osdx modulelauncher[889594]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:27:32.289678 osdx modulelauncher[889594]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:27:32.289685 osdx modulelauncher[889594]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:27:32.323786 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:27:32.337683 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:32.353572 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:32.500945 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:27:32.569255 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:27:32.672716 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Mar 05 21:27:32.763619 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e ip 10.215.168.1 port 8443'. Mar 05 21:27:32.915178 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:27:32.970962 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 05 21:27:33.064846 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:27:33.124527 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILUIlnh4yjqUNi7D39zTSJQkOZKiK1OV5b28aNEzzeleGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Mar 05 21:27:33.211555 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:27:33.340753 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:27:33.411991 osdx ubnt-cfgd[889693]: inactive Mar 05 21:27:33.434702 osdx INFO[889701]: FRR daemons did not change Mar 05 21:27:33.447290 osdx ca-certificates[889717]: Updating certificates in /etc/ssl/certs... Mar 05 21:27:33.968444 osdx ubnt-cfgd[890729]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:27:33.976014 osdx ca-certificates[890735]: 1 added, 0 removed; done. Mar 05 21:27:33.978722 osdx ca-certificates[890741]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:27:33.981337 osdx ca-certificates[890743]: done. Mar 05 21:27:34.071581 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:27:34.072806 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:27:34.074693 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:27:34.090691 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:27:34.090934 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] Network connectivity detected Mar 05 21:27:34.090978 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] Dropping privileges Mar 05 21:27:34.093442 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:27:34.093926 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] Network connectivity detected Mar 05 21:27:34.093961 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:27:34.093961 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:27:34.093998 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] Firefox workaround initialized Mar 05 21:27:34.093998 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] Loading the set of cloaking rules from [/tmp/tmppnssktc4] Mar 05 21:27:34.094609 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Mar 05 21:27:34.094609 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Mar 05 21:27:34.094609 osdx dnscrypt-proxy[890799]: [2026-03-05 21:27:34] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16