Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash a91e708969927d2f5720bb78c799ea1656d98ed9fbeabfca48887da4ed4634cd set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:25:47.304173 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:25:47.307215 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:25:47.307283 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:25:47.314483 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:25:47.540409 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:25:47.760601 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:25:47.844629 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:25:47.911808 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:25:48.012426 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:25:48.071260 osdx ubnt-cfgd[867052]: inactive Mar 05 21:25:48.090275 osdx INFO[867058]: FRR daemons did not change Mar 05 21:25:48.119213 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:25:48.159622 osdx WARNING[867127]: No supported link modes on interface eth0 Mar 05 21:25:48.160927 osdx modulelauncher[867127]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:25:48.160939 osdx modulelauncher[867127]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:25:48.162181 osdx modulelauncher[867127]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:25:48.162189 osdx modulelauncher[867127]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:25:48.196178 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:25:48.207396 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:25:48.224584 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:25:48.380276 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:25:48.451792 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:25:49.558262 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:25:49.613847 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 05 21:25:49.710513 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:25:49.771681 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Mar 05 21:25:49.866430 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Mar 05 21:25:49.923811 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash a91e708969927d2f5720bb78c799ea1656d98ed9fbeabfca48887da4ed4634cd'. Mar 05 21:25:50.019463 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 05 21:25:50.074077 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 05 21:25:50.166971 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:25:50.231142 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 05 21:25:50.331956 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:25:50.420490 osdx ubnt-cfgd[867226]: inactive Mar 05 21:25:50.446115 osdx INFO[867234]: FRR daemons did not change Mar 05 21:25:50.460419 osdx ca-certificates[867250]: Updating certificates in /etc/ssl/certs... Mar 05 21:25:51.024887 osdx ubnt-cfgd[868262]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:25:51.032476 osdx ca-certificates[868267]: 1 added, 0 removed; done. Mar 05 21:25:51.035346 osdx ca-certificates[868274]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:25:51.038104 osdx ca-certificates[868276]: done. Mar 05 21:25:51.187680 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:25:51.189058 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:25:51.191262 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:25:51.207885 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:25:51.208096 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Network connectivity detected Mar 05 21:25:51.208255 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Dropping privileges Mar 05 21:25:51.210609 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Network connectivity detected Mar 05 21:25:51.210653 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:25:51.210653 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:25:51.210653 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 05 21:25:51.210723 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Firefox workaround initialized Mar 05 21:25:51.210723 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Loading the set of cloaking rules from [/tmp/tmprzlbcirz] Mar 05 21:25:51.218113 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:25:51.298909 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] [RD] OK (DoH) - rtt: 70ms Mar 05 21:25:51.298909 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] Server with the lowest initial latency: RD (rtt: 70ms) Mar 05 21:25:51.298909 osdx dnscrypt-proxy[868332]: [2026-03-05 21:25:51] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 284a8d573f3089879ca44cf34776520b09c4226eec806559b8876582ac37e8a2 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:25:47.291719 osdx systemd-journald[1982]: Runtime Journal (/run/log/journal/870944ec2cb343ee825d9d66ec6747cc) is 896.0K, max 6.4M, 5.6M free. Mar 05 21:25:47.293087 osdx systemd-journald[1982]: Received client request to rotate journal, rotating. Mar 05 21:25:47.293134 osdx systemd-journald[1982]: Vacuuming done, freed 0B of archived journals from /run/log/journal/870944ec2cb343ee825d9d66ec6747cc. Mar 05 21:25:47.303844 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:25:47.520153 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:25:48.483320 osdx OSDxCLI[632527]: User 'admin' entered the configuration menu. Mar 05 21:25:48.566440 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 05 21:25:48.633563 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:25:48.725655 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service ssh'. Mar 05 21:25:48.791160 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:25:48.877617 osdx ubnt-cfgd[661996]: inactive Mar 05 21:25:48.985595 osdx INFO[662017]: FRR daemons did not change Mar 05 21:25:49.013109 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:25:49.058843 osdx WARNING[662086]: No supported link modes on interface eth0 Mar 05 21:25:49.060180 osdx modulelauncher[662086]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:25:49.060194 osdx modulelauncher[662086]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:25:49.061459 osdx modulelauncher[662086]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 05 21:25:49.061467 osdx modulelauncher[662086]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 05 21:25:49.157716 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 05 21:25:49.177919 osdx sshd[662152]: Server listening on 0.0.0.0 port 22. Mar 05 21:25:49.178184 osdx sshd[662152]: Server listening on :: port 22. Mar 05 21:25:49.178344 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 05 21:25:49.180288 osdx cfgd[1620]: [632527]Completed change to active configuration Mar 05 21:25:49.192884 osdx OSDxCLI[632527]: User 'admin' committed the configuration. Mar 05 21:25:49.210556 osdx OSDxCLI[632527]: User 'admin' left the configuration menu. Mar 05 21:25:49.365959 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 05 21:25:51.439174 osdx OSDxCLI[632527]: User 'admin' entered the configuration menu. Mar 05 21:25:51.559354 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 05 21:25:51.677178 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 05 21:25:51.785471 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 05 21:25:51.857021 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Mar 05 21:25:51.977963 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Mar 05 21:25:52.070002 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Mar 05 21:25:52.132146 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 284a8d573f3089879ca44cf34776520b09c4226eec806559b8876582ac37e8a2'. Mar 05 21:25:52.245038 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:25:52.318157 osdx ubnt-cfgd[662199]: inactive Mar 05 21:25:52.360377 osdx INFO[662207]: FRR daemons did not change Mar 05 21:25:52.399036 osdx ca-certificates[662222]: Updating certificates in /etc/ssl/certs... Mar 05 21:25:52.996350 osdx ubnt-cfgd[663235]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:25:53.007648 osdx ca-certificates[663239]: 1 added, 0 removed; done. Mar 05 21:25:53.010874 osdx ca-certificates[663247]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:25:53.014066 osdx ca-certificates[663249]: done. Mar 05 21:25:53.093545 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:25:53.096299 osdx cfgd[1620]: [632527]Completed change to active configuration Mar 05 21:25:53.099092 osdx OSDxCLI[632527]: User 'admin' committed the configuration. Mar 05 21:25:53.114607 osdx OSDxCLI[632527]: User 'admin' left the configuration menu. Mar 05 21:25:53.269465 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:25:53.321939 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:25:53.322216 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] Network connectivity detected Mar 05 21:25:53.322246 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] Dropping privileges Mar 05 21:25:53.324323 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] Network connectivity detected Mar 05 21:25:53.324393 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:25:53.324393 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:25:53.324393 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] Firefox workaround initialized Mar 05 21:25:53.324393 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpiwa25kwp] Mar 05 21:25:53.439377 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] [DUT0] OK (DoH) - rtt: 73ms Mar 05 21:25:53.439377 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 73ms) Mar 05 21:25:53.439377 osdx dnscrypt-proxy[663256]: [2026-03-05 21:25:53] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash a91e708969927d2f5720bb78c799ea1656d98ed9fbeabfca48887da4ed4634cd at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCpHnCJaZJ9L1cgu3jHmeoWVtmO2fvqv8pIiH2k7UY0zQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCpHnCJaZJ9L1cgu3jHmeoWVtmO2fvqv8pIiH2k7UY0zQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:26:02.353643 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:26:02.355297 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:26:02.355350 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:26:02.364572 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:26:02.568417 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:26:02.814072 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:02.899754 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:26:02.973303 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:03.033601 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:03.126208 osdx ubnt-cfgd[870067]: inactive Mar 05 21:26:03.146353 osdx INFO[870073]: FRR daemons did not change Mar 05 21:26:03.183333 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:26:03.226916 osdx WARNING[870142]: No supported link modes on interface eth0 Mar 05 21:26:03.228353 osdx modulelauncher[870142]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:26:03.228367 osdx modulelauncher[870142]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:26:03.229516 osdx modulelauncher[870142]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:26:03.229525 osdx modulelauncher[870142]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:26:03.266273 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:03.277512 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:03.293975 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:03.457223 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:26:03.532714 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:26:04.666109 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash a91e708969927d2f5720bb78c799ea1656d98ed9fbeabfca48887da4ed4634cd'. Mar 05 21:26:04.807851 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:04.872901 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 05 21:26:04.966820 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:26:05.026599 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSCpHnCJaZJ9L1cgu3jHmeoWVtmO2fvqv8pIiH2k7UY0zQpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Mar 05 21:26:05.120813 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 05 21:26:05.181367 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 05 21:26:05.308524 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 05 21:26:05.375032 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:26:05.481233 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 05 21:26:05.562571 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:05.652948 osdx ubnt-cfgd[870243]: inactive Mar 05 21:26:05.673001 osdx INFO[870251]: FRR daemons did not change Mar 05 21:26:05.685884 osdx ca-certificates[870267]: Updating certificates in /etc/ssl/certs... Mar 05 21:26:06.232627 osdx ubnt-cfgd[871279]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:26:06.240413 osdx ca-certificates[871285]: 1 added, 0 removed; done. Mar 05 21:26:06.244097 osdx ca-certificates[871291]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:26:06.247697 osdx ca-certificates[871293]: done. Mar 05 21:26:06.355640 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:26:06.356911 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:06.359329 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:06.385043 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:26:06.385259 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Network connectivity detected Mar 05 21:26:06.385429 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Dropping privileges Mar 05 21:26:06.387764 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Network connectivity detected Mar 05 21:26:06.387817 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:26:06.387817 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:26:06.387817 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 05 21:26:06.387817 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Firefox workaround initialized Mar 05 21:26:06.387817 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpwdnwdkww] Mar 05 21:26:06.433494 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:06.486327 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] [RD] OK (DoH) - rtt: 77ms Mar 05 21:26:06.486327 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] Server with the lowest initial latency: RD (rtt: 77ms) Mar 05 21:26:06.486327 osdx dnscrypt-proxy[871352]: [2026-03-05 21:26:06] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 284a8d573f3089879ca44cf34776520b09c4226eec806559b8876582ac37e8a2 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKEqNVz8wiYecpEzzR3ZSCwnEIm7sgGVZuIdlgqw36KINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKEqNVz8wiYecpEzzR3ZSCwnEIm7sgGVZuIdlgqw36KINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:26:02.322837 osdx systemd-journald[1982]: Runtime Journal (/run/log/journal/870944ec2cb343ee825d9d66ec6747cc) is 928.0K, max 6.4M, 5.5M free. Mar 05 21:26:02.325601 osdx systemd-journald[1982]: Received client request to rotate journal, rotating. Mar 05 21:26:02.325670 osdx systemd-journald[1982]: Vacuuming done, freed 0B of archived journals from /run/log/journal/870944ec2cb343ee825d9d66ec6747cc. Mar 05 21:26:02.334195 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:26:02.522306 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:26:03.587732 osdx OSDxCLI[632527]: User 'admin' entered the configuration menu. Mar 05 21:26:03.686813 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 05 21:26:03.754059 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:03.848852 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service ssh'. Mar 05 21:26:03.911565 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:04.002537 osdx ubnt-cfgd[664982]: inactive Mar 05 21:26:04.083024 osdx INFO[665003]: FRR daemons did not change Mar 05 21:26:04.109539 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:26:04.155410 osdx WARNING[665072]: No supported link modes on interface eth0 Mar 05 21:26:04.156855 osdx modulelauncher[665072]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:26:04.156869 osdx modulelauncher[665072]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:26:04.158156 osdx modulelauncher[665072]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 05 21:26:04.158220 osdx modulelauncher[665072]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 05 21:26:04.253916 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 05 21:26:04.268715 osdx sshd[665138]: Server listening on 0.0.0.0 port 22. Mar 05 21:26:04.268744 osdx sshd[665138]: Server listening on :: port 22. Mar 05 21:26:04.268853 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 05 21:26:04.270634 osdx cfgd[1620]: [632527]Completed change to active configuration Mar 05 21:26:04.283442 osdx OSDxCLI[632527]: User 'admin' committed the configuration. Mar 05 21:26:04.298897 osdx OSDxCLI[632527]: User 'admin' left the configuration menu. Mar 05 21:26:04.457738 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 05 21:26:06.643575 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 284a8d573f3089879ca44cf34776520b09c4226eec806559b8876582ac37e8a2'. Mar 05 21:26:06.803088 osdx OSDxCLI[632527]: User 'admin' entered the configuration menu. Mar 05 21:26:06.912417 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 05 21:26:06.975342 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 05 21:26:07.069728 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 05 21:26:07.133768 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKEqNVz8wiYecpEzzR3ZSCwnEIm7sgGVZuIdlgqw36KINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Mar 05 21:26:07.281673 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:07.355735 osdx ubnt-cfgd[665185]: inactive Mar 05 21:26:07.382453 osdx INFO[665193]: FRR daemons did not change Mar 05 21:26:07.400779 osdx ca-certificates[665209]: Updating certificates in /etc/ssl/certs... Mar 05 21:26:07.990393 osdx ubnt-cfgd[666221]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:26:07.998058 osdx ca-certificates[666226]: 1 added, 0 removed; done. Mar 05 21:26:08.001753 osdx ca-certificates[666233]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:26:08.004978 osdx ca-certificates[666235]: done. Mar 05 21:26:08.081948 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:26:08.084167 osdx cfgd[1620]: [632527]Completed change to active configuration Mar 05 21:26:08.087097 osdx OSDxCLI[632527]: User 'admin' committed the configuration. Mar 05 21:26:08.102829 osdx OSDxCLI[632527]: User 'admin' left the configuration menu. Mar 05 21:26:08.127058 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:26:08.127296 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] Network connectivity detected Mar 05 21:26:08.127326 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] Dropping privileges Mar 05 21:26:08.129345 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] Network connectivity detected Mar 05 21:26:08.129426 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:26:08.129465 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:26:08.129465 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] Firefox workaround initialized Mar 05 21:26:08.129465 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] Loading the set of cloaking rules from [/tmp/tmppc_okaqk] Mar 05 21:26:08.281362 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:26:08.298231 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] [DUT0] OK (DoH) - rtt: 81ms Mar 05 21:26:08.298231 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 81ms) Mar 05 21:26:08.298231 osdx dnscrypt-proxy[666242]: [2026-03-05 21:26:08] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 'b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Mar 05 21:26:16.289794 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:26:16.290411 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:26:16.290458 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:26:16.298991 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:26:16.502781 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:26:16.718420 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:16.812253 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:26:16.883369 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:16.980625 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:17.060168 osdx ubnt-cfgd[873084]: inactive Mar 05 21:26:17.078841 osdx INFO[873090]: FRR daemons did not change Mar 05 21:26:17.114255 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:26:17.154076 osdx WARNING[873159]: No supported link modes on interface eth0 Mar 05 21:26:17.155428 osdx modulelauncher[873159]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:26:17.155439 osdx modulelauncher[873159]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:26:17.156601 osdx modulelauncher[873159]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:26:17.156609 osdx modulelauncher[873159]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:26:17.189433 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:17.200891 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:17.217276 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:17.362096 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:26:17.430929 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:26:18.540253 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Mar 05 21:26:18.673225 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:18.727274 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 05 21:26:18.832857 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:26:18.897202 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Mar 05 21:26:19.010717 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Mar 05 21:26:19.072814 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Mar 05 21:26:19.171842 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e'. Mar 05 21:26:19.221706 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:26:19.327947 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 05 21:26:19.429998 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 05 21:26:19.500121 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 05 21:26:19.629949 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:19.745985 osdx ubnt-cfgd[873261]: inactive Mar 05 21:26:19.769322 osdx INFO[873269]: FRR daemons did not change Mar 05 21:26:19.781873 osdx ca-certificates[873285]: Updating certificates in /etc/ssl/certs... Mar 05 21:26:20.325323 osdx ubnt-cfgd[874297]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:26:20.334646 osdx ca-certificates[874302]: 1 added, 0 removed; done. Mar 05 21:26:20.337422 osdx ca-certificates[874309]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:26:20.340032 osdx ca-certificates[874311]: done. Mar 05 21:26:20.450585 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:26:20.451977 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:20.454507 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:20.470175 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:26:20.470392 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Network connectivity detected Mar 05 21:26:20.470426 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:20.470640 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Dropping privileges Mar 05 21:26:20.472414 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Network connectivity detected Mar 05 21:26:20.472459 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:26:20.472459 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:26:20.472459 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 05 21:26:20.472459 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Firefox workaround initialized Mar 05 21:26:20.472459 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Loading the set of cloaking rules from [/tmp/tmprwpovttw] Mar 05 21:26:20.473160 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Mar 05 21:26:20.473222 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Mar 05 21:26:20.473222 osdx dnscrypt-proxy[874370]: [2026-03-05 21:26:20] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 284a8d573f3089879ca44cf34776520b09c4226eec806559b8876582ac37e8a2 set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:26:16.264594 osdx systemd-journald[1982]: Runtime Journal (/run/log/journal/870944ec2cb343ee825d9d66ec6747cc) is 952.0K, max 6.4M, 5.5M free. Mar 05 21:26:16.266204 osdx systemd-journald[1982]: Received client request to rotate journal, rotating. Mar 05 21:26:16.266250 osdx systemd-journald[1982]: Vacuuming done, freed 0B of archived journals from /run/log/journal/870944ec2cb343ee825d9d66ec6747cc. Mar 05 21:26:16.273864 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:26:16.466561 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:26:17.473278 osdx OSDxCLI[632527]: User 'admin' entered the configuration menu. Mar 05 21:26:17.609072 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 05 21:26:17.659945 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:17.757137 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service ssh'. Mar 05 21:26:17.836492 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:17.929484 osdx ubnt-cfgd[667966]: inactive Mar 05 21:26:18.008458 osdx INFO[667987]: FRR daemons did not change Mar 05 21:26:18.042197 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:26:18.087978 osdx WARNING[668056]: No supported link modes on interface eth0 Mar 05 21:26:18.089378 osdx modulelauncher[668056]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:26:18.089392 osdx modulelauncher[668056]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:26:18.090637 osdx modulelauncher[668056]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 05 21:26:18.090647 osdx modulelauncher[668056]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 05 21:26:18.178524 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 05 21:26:18.189388 osdx sshd[668122]: Server listening on 0.0.0.0 port 22. Mar 05 21:26:18.189413 osdx sshd[668122]: Server listening on :: port 22. Mar 05 21:26:18.189519 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 05 21:26:18.190761 osdx cfgd[1620]: [632527]Completed change to active configuration Mar 05 21:26:18.205986 osdx OSDxCLI[632527]: User 'admin' committed the configuration. Mar 05 21:26:18.225589 osdx OSDxCLI[632527]: User 'admin' left the configuration menu. Mar 05 21:26:18.369049 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 05 21:26:20.680924 osdx OSDxCLI[632527]: User 'admin' entered the configuration menu. Mar 05 21:26:20.742980 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 05 21:26:20.833487 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 05 21:26:20.887592 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 05 21:26:20.995185 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Mar 05 21:26:21.054034 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Mar 05 21:26:21.153828 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Mar 05 21:26:21.208959 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 284a8d573f3089879ca44cf34776520b09c4226eec806559b8876582ac37e8a2'. Mar 05 21:26:21.313924 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:21.377840 osdx ubnt-cfgd[668169]: inactive Mar 05 21:26:21.400744 osdx INFO[668177]: FRR daemons did not change Mar 05 21:26:21.417133 osdx ca-certificates[668193]: Updating certificates in /etc/ssl/certs... Mar 05 21:26:21.924769 osdx ubnt-cfgd[669205]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:26:21.932200 osdx ca-certificates[669211]: 1 added, 0 removed; done. Mar 05 21:26:21.935057 osdx ca-certificates[669217]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:26:21.937793 osdx ca-certificates[669219]: done. Mar 05 21:26:22.022728 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:26:22.026447 osdx cfgd[1620]: [632527]Completed change to active configuration Mar 05 21:26:22.028587 osdx OSDxCLI[632527]: User 'admin' committed the configuration. Mar 05 21:26:22.041610 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:26:22.041827 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] Network connectivity detected Mar 05 21:26:22.041827 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] Dropping privileges Mar 05 21:26:22.043601 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] Network connectivity detected Mar 05 21:26:22.043640 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:26:22.043640 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:26:22.043640 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] Firefox workaround initialized Mar 05 21:26:22.043640 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpuvp7r5it] Mar 05 21:26:22.054257 osdx OSDxCLI[632527]: User 'admin' left the configuration menu. Mar 05 21:26:22.162623 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] [DUT0] OK (DoH) - rtt: 81ms Mar 05 21:26:22.162623 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 81ms) Mar 05 21:26:22.162623 osdx dnscrypt-proxy[669226]: [2026-03-05 21:26:22] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILUIlnh4yjqUNi7D39zTSJQkOZKiK1OV5b28aNEzzeleGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILUIlnh4yjqUNi7D39zTSJQkOZKiK1OV5b28aNEzzeleGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Mar 05 21:26:28.288779 osdx systemd-journald[466780]: Runtime Journal (/run/log/journal/78445f9299f9414990e66dc8aa510838) is 1.8M, max 13.8M, 11.9M free. Mar 05 21:26:28.291717 osdx systemd-journald[466780]: Received client request to rotate journal, rotating. Mar 05 21:26:28.291788 osdx systemd-journald[466780]: Vacuuming done, freed 0B of archived journals from /run/log/journal/78445f9299f9414990e66dc8aa510838. Mar 05 21:26:28.298745 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:26:28.507274 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:26:28.777711 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:28.902880 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 05 21:26:28.989907 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:29.063189 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:29.167839 osdx ubnt-cfgd[876103]: inactive Mar 05 21:26:29.185380 osdx INFO[876109]: FRR daemons did not change Mar 05 21:26:29.215721 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:26:29.258428 osdx WARNING[876178]: No supported link modes on interface eth0 Mar 05 21:26:29.259827 osdx modulelauncher[876178]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:26:29.259840 osdx modulelauncher[876178]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:26:29.260948 osdx modulelauncher[876178]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 05 21:26:29.260957 osdx modulelauncher[876178]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 05 21:26:29.297852 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:29.308779 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:29.334925 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:29.485164 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 05 21:26:29.570522 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'system journal show | cat'. Mar 05 21:26:30.767171 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Mar 05 21:26:30.887456 osdx OSDxCLI[849840]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key b5:08:96:78:78:ca:3a:94:36:2e:c3:df:dc:d3:48:94:24:39:92:a2:2b:53:95:e5:bd:bc:68:d1:33:cd:e9:5e ip 10.215.168.1 port 8443'. Mar 05 21:26:31.082031 osdx OSDxCLI[849840]: User 'admin' entered the configuration menu. Mar 05 21:26:31.185793 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 05 21:26:31.293204 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 05 21:26:31.369207 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzILUIlnh4yjqUNi7D39zTSJQkOZKiK1OV5b28aNEzzeleGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Mar 05 21:26:31.474842 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 05 21:26:31.541264 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 05 21:26:31.632298 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 05 21:26:31.689374 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 05 21:26:31.786482 osdx OSDxCLI[849840]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:31.860568 osdx ubnt-cfgd[876280]: inactive Mar 05 21:26:31.880651 osdx INFO[876288]: FRR daemons did not change Mar 05 21:26:31.892455 osdx ca-certificates[876304]: Updating certificates in /etc/ssl/certs... Mar 05 21:26:32.401980 osdx ubnt-cfgd[877316]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:26:32.409850 osdx ca-certificates[877322]: 1 added, 0 removed; done. Mar 05 21:26:32.412673 osdx ca-certificates[877328]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:26:32.415276 osdx ca-certificates[877330]: done. Mar 05 21:26:32.524116 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:26:32.525674 osdx cfgd[1863]: [849840]Completed change to active configuration Mar 05 21:26:32.528063 osdx OSDxCLI[849840]: User 'admin' committed the configuration. Mar 05 21:26:32.543503 osdx OSDxCLI[849840]: User 'admin' left the configuration menu. Mar 05 21:26:32.543804 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:26:32.543952 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Network connectivity detected Mar 05 21:26:32.544135 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Dropping privileges Mar 05 21:26:32.546269 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Network connectivity detected Mar 05 21:26:32.546323 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:26:32.546323 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:26:32.546323 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 05 21:26:32.546382 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Firefox workaround initialized Mar 05 21:26:32.546382 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp6q92aazi] Mar 05 21:26:32.547047 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Mar 05 21:26:32.547047 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Mar 05 21:26:32.547107 osdx dnscrypt-proxy[877389]: [2026-03-05 21:26:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 284a8d573f3089879ca44cf34776520b09c4226eec806559b8876582ac37e8a2 at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKEqNVz8wiYecpEzzR3ZSCwnEIm7sgGVZuIdlgqw36KINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKEqNVz8wiYecpEzzR3ZSCwnEIm7sgGVZuIdlgqw36KINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 05 21:26:28.264138 osdx systemd-journald[1982]: Runtime Journal (/run/log/journal/870944ec2cb343ee825d9d66ec6747cc) is 952.0K, max 6.4M, 5.5M free. Mar 05 21:26:28.267021 osdx systemd-journald[1982]: Received client request to rotate journal, rotating. Mar 05 21:26:28.267081 osdx systemd-journald[1982]: Vacuuming done, freed 0B of archived journals from /run/log/journal/870944ec2cb343ee825d9d66ec6747cc. Mar 05 21:26:28.274101 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system journal clear'. Mar 05 21:26:28.468121 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'system coredump delete all'. Mar 05 21:26:29.646357 osdx OSDxCLI[632527]: User 'admin' entered the configuration menu. Mar 05 21:26:29.770274 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 05 21:26:29.825176 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 05 21:26:29.919518 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service ssh'. Mar 05 21:26:29.979412 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:30.074943 osdx ubnt-cfgd[670942]: inactive Mar 05 21:26:30.168205 osdx INFO[670963]: FRR daemons did not change Mar 05 21:26:30.199047 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 05 21:26:30.249675 osdx WARNING[671032]: No supported link modes on interface eth0 Mar 05 21:26:30.251300 osdx modulelauncher[671032]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 05 21:26:30.251377 osdx modulelauncher[671032]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 05 21:26:30.252877 osdx modulelauncher[671032]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 05 21:26:30.252883 osdx modulelauncher[671032]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 05 21:26:30.355375 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 05 21:26:30.367185 osdx sshd[671098]: Server listening on 0.0.0.0 port 22. Mar 05 21:26:30.367213 osdx sshd[671098]: Server listening on :: port 22. Mar 05 21:26:30.367327 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 05 21:26:30.369521 osdx cfgd[1620]: [632527]Completed change to active configuration Mar 05 21:26:30.382577 osdx OSDxCLI[632527]: User 'admin' committed the configuration. Mar 05 21:26:30.399970 osdx OSDxCLI[632527]: User 'admin' left the configuration menu. Mar 05 21:26:30.573175 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 05 21:26:32.764352 osdx OSDxCLI[632527]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 284a8d573f3089879ca44cf34776520b09c4226eec806559b8876582ac37e8a2'. Mar 05 21:26:32.905952 osdx OSDxCLI[632527]: User 'admin' entered the configuration menu. Mar 05 21:26:32.967341 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 05 21:26:33.066952 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 05 21:26:33.129903 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 05 21:26:33.230163 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKEqNVz8wiYecpEzzR3ZSCwnEIm7sgGVZuIdlgqw36KINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Mar 05 21:26:33.306635 osdx OSDxCLI[632527]: User 'admin' added a new cfg line: 'show working'. Mar 05 21:26:33.393902 osdx ubnt-cfgd[671145]: inactive Mar 05 21:26:33.413377 osdx INFO[671153]: FRR daemons did not change Mar 05 21:26:33.426087 osdx ca-certificates[671169]: Updating certificates in /etc/ssl/certs... Mar 05 21:26:33.953802 osdx ubnt-cfgd[672181]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 05 21:26:33.961046 osdx ca-certificates[672187]: 1 added, 0 removed; done. Mar 05 21:26:33.963988 osdx ca-certificates[672193]: Running hooks in /etc/ca-certificates/update.d... Mar 05 21:26:33.966880 osdx ca-certificates[672195]: done. Mar 05 21:26:34.055408 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 05 21:26:34.059332 osdx cfgd[1620]: [632527]Completed change to active configuration Mar 05 21:26:34.061776 osdx OSDxCLI[632527]: User 'admin' committed the configuration. Mar 05 21:26:34.077192 osdx OSDxCLI[632527]: User 'admin' left the configuration menu. Mar 05 21:26:34.088812 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] dnscrypt-proxy 2.0.45 Mar 05 21:26:34.089039 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] Network connectivity detected Mar 05 21:26:34.089106 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] Dropping privileges Mar 05 21:26:34.091086 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] Network connectivity detected Mar 05 21:26:34.091171 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 05 21:26:34.091171 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 05 21:26:34.091171 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] Firefox workaround initialized Mar 05 21:26:34.091171 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpoky70pb1] Mar 05 21:26:34.210890 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] [DUT0] OK (DoH) - rtt: 80ms Mar 05 21:26:34.210890 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 80ms) Mar 05 21:26:34.210890 osdx dnscrypt-proxy[672202]: [2026-03-05 21:26:34] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13