Static

Validation test suite using one of the DNS options available in an upstream server

DNS-over-HTTPS Server

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https hash be1776c8fd054dc1035f9bd9cce747bd437a0829719601a16e96bc6bbfcd87b0
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns resolver local
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Mar 23 10:24:44.306956 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free.
Mar 23 10:24:44.309424 osdx systemd-journald[2086]: Received client request to rotate journal, rotating.
Mar 23 10:24:44.309488 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904.
Mar 23 10:24:44.318279 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'.
Mar 23 10:24:44.533612 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 23 10:24:44.746145 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:24:44.825700 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 23 10:24:44.898068 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 23 10:24:44.958881 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:24:45.059491 osdx ubnt-cfgd[286065]: inactive
Mar 23 10:24:45.081001 osdx INFO[286071]: FRR daemons did not change
Mar 23 10:24:45.109413 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 23 10:24:45.150484 osdx WARNING[286140]: No supported link modes on interface eth0
Mar 23 10:24:45.151826 osdx modulelauncher[286140]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 23 10:24:45.151840 osdx modulelauncher[286140]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 23 10:24:45.153271 osdx modulelauncher[286140]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Mar 23 10:24:45.153279 osdx modulelauncher[286140]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Mar 23 10:24:45.186477 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:24:45.200420 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:24:45.220466 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:24:45.373384 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 23 10:24:45.450183 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 23 10:24:45.645567 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:24:45.721277 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Mar 23 10:24:45.826351 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 23 10:24:45.902542 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Mar 23 10:24:46.008004 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Mar 23 10:24:46.105908 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash be1776c8fd054dc1035f9bd9cce747bd437a0829719601a16e96bc6bbfcd87b0'.
Mar 23 10:24:46.154529 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 23 10:24:46.258319 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:24:46.322199 osdx ubnt-cfgd[286236]: inactive
Mar 23 10:24:46.342404 osdx INFO[286244]: FRR daemons did not change
Mar 23 10:24:46.355009 osdx ca-certificates[286260]: Updating certificates in /etc/ssl/certs...
Mar 23 10:24:46.876157 osdx ubnt-cfgd[287272]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Mar 23 10:24:46.883587 osdx ca-certificates[287278]: 1 added, 0 removed; done.
Mar 23 10:24:46.886330 osdx ca-certificates[287284]: Running hooks in /etc/ca-certificates/update.d...
Mar 23 10:24:46.889041 osdx ca-certificates[287286]: done.
Mar 23 10:24:46.997771 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 23 10:24:47.000080 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:24:47.002215 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:24:47.017830 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] dnscrypt-proxy 2.0.45
Mar 23 10:24:47.018014 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] Network connectivity detected
Mar 23 10:24:47.018069 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] Dropping privileges
Mar 23 10:24:47.019952 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] Network connectivity detected
Mar 23 10:24:47.019985 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 23 10:24:47.019985 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 23 10:24:47.020020 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] Firefox workaround initialized
Mar 23 10:24:47.020020 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp8oqoyefq]
Mar 23 10:24:47.030371 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:24:47.056920 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] [RD] OK (DoH) - rtt: 13ms
Mar 23 10:24:47.056920 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] Server with the lowest initial latency: RD (rtt: 13ms)
Mar 23 10:24:47.056920 osdx dnscrypt-proxy[287342]: [2026-03-23 10:24:47] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

DNS-over-HTTPS Server Trusting Fails

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Note

The above commands set the network topology to interact with the DNS server

Step 2: Modify the following configuration lines in DUT0 :

set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns resolver local

Note

The above commands set up the DNS server to be used.

Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:

: x509: certificate signed by unknown authority

Show output

Mar 23 10:24:52.313661 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free.
Mar 23 10:24:52.315892 osdx systemd-journald[2086]: Received client request to rotate journal, rotating.
Mar 23 10:24:52.315966 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904.
Mar 23 10:24:52.325928 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'.
Mar 23 10:24:52.543529 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 23 10:24:52.798418 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:24:52.908958 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 23 10:24:52.978994 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 23 10:24:53.118732 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:24:53.219924 osdx ubnt-cfgd[289074]: inactive
Mar 23 10:24:53.244169 osdx INFO[289080]: FRR daemons did not change
Mar 23 10:24:53.279883 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 23 10:24:53.328443 osdx WARNING[289149]: No supported link modes on interface eth0
Mar 23 10:24:53.329955 osdx modulelauncher[289149]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 23 10:24:53.329973 osdx modulelauncher[289149]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 23 10:24:53.331206 osdx modulelauncher[289149]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Mar 23 10:24:53.331218 osdx modulelauncher[289149]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Mar 23 10:24:53.371927 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:24:53.383937 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:24:53.398739 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:24:53.573003 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 23 10:24:53.680276 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 23 10:24:53.842834 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:24:53.912624 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 23 10:24:54.026614 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:24:54.081818 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:24:54.147386 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:24:54.290034 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:24:54.366645 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 23 10:24:54.477020 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Mar 23 10:24:54.530690 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Mar 23 10:24:54.629431 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 23 10:24:54.686456 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show changes'.
Mar 23 10:24:54.783472 osdx ubnt-cfgd[289252]: inactive
Mar 23 10:24:54.800329 osdx INFO[289258]: FRR daemons did not change
Mar 23 10:24:54.904199 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 23 10:24:54.905347 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:24:54.907555 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:24:54.922523 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:24:54.924007 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] dnscrypt-proxy 2.0.45
Mar 23 10:24:54.924240 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] Network connectivity detected
Mar 23 10:24:54.924367 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] Dropping privileges
Mar 23 10:24:54.926673 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] Network connectivity detected
Mar 23 10:24:54.926737 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 23 10:24:54.926737 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 23 10:24:54.926737 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] Firefox workaround initialized
Mar 23 10:24:54.926737 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpl2yz85x2]
Mar 23 10:24:54.947773 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABD5XUO3xG0WpPOpu8BuDpc5": x509: certificate signed by unknown authority
Mar 23 10:24:54.947773 osdx dnscrypt-proxy[289316]: [2026-03-23 10:24:54] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable

Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:

Note

The above command attempts to resolve the hostname but fails because the certificate cannot be verified

DNS-over-HTTPS Server Trusting

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Note

The above commands set the network topology to interact with the DNS server

Step 2: Modify the following configuration lines in DUT0 :

set service dns proxy server-name RD
set service dns proxy ssl-allow-insecure
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns resolver local

Note

The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Mar 23 10:25:04.303357 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free.
Mar 23 10:25:04.307070 osdx systemd-journald[2086]: Received client request to rotate journal, rotating.
Mar 23 10:25:04.307150 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904.
Mar 23 10:25:04.313481 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'.
Mar 23 10:25:04.532533 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 23 10:25:04.762004 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:04.893383 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 23 10:25:04.949616 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 23 10:25:05.049262 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:25:05.107908 osdx ubnt-cfgd[289579]: inactive
Mar 23 10:25:05.131189 osdx INFO[289585]: FRR daemons did not change
Mar 23 10:25:05.159055 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 23 10:25:05.203773 osdx WARNING[289654]: No supported link modes on interface eth0
Mar 23 10:25:05.205453 osdx modulelauncher[289654]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 23 10:25:05.205466 osdx modulelauncher[289654]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 23 10:25:05.206634 osdx modulelauncher[289654]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Mar 23 10:25:05.206642 osdx modulelauncher[289654]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Mar 23 10:25:05.242579 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:25:05.254563 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:05.273757 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:25:05.412137 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 23 10:25:05.504121 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 23 10:25:05.664573 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:05.733035 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 23 10:25:05.839842 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:25:05.890898 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:05.954559 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:25:06.089598 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:06.157573 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 23 10:25:06.272417 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Mar 23 10:25:06.329702 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Mar 23 10:25:06.427409 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'.
Mar 23 10:25:06.509208 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 23 10:25:06.568413 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show changes'.
Mar 23 10:25:06.708614 osdx ubnt-cfgd[289758]: inactive
Mar 23 10:25:06.730367 osdx INFO[289764]: FRR daemons did not change
Mar 23 10:25:06.831422 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 23 10:25:06.832713 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:25:06.834958 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:06.854716 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] dnscrypt-proxy 2.0.45
Mar 23 10:25:06.854946 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] Network connectivity detected
Mar 23 10:25:06.855103 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] Dropping privileges
Mar 23 10:25:06.857368 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] Network connectivity detected
Mar 23 10:25:06.857437 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 23 10:25:06.857437 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 23 10:25:06.857466 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] Firefox workaround initialized
Mar 23 10:25:06.857466 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp2gdkc8oi]
Mar 23 10:25:06.875861 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] [RD] OK (DoH) - rtt: 11ms
Mar 23 10:25:06.875861 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] Server with the lowest initial latency: RD (rtt: 11ms)
Mar 23 10:25:06.875861 osdx dnscrypt-proxy[289822]: [2026-03-23 10:25:06] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Mar 23 10:25:06.890898 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

DNS-over-HTTPS Server With Stamp

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash be1776c8fd054dc1035f9bd9cce747bd437a0829719601a16e96bc6bbfcd87b0 at DUT0 and expect this output:

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSC-F3bI_QVNwQNfm9nM50e9Q3oIKXGWAaFulrxrv82HsApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'
set service dns resolver local
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Mar 23 10:25:11.329937 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free.
Mar 23 10:25:11.330480 osdx systemd-journald[2086]: Received client request to rotate journal, rotating.
Mar 23 10:25:11.330516 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904.
Mar 23 10:25:11.339597 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'.
Mar 23 10:25:11.549934 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 23 10:25:11.773263 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:11.856129 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 23 10:25:11.934585 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 23 10:25:12.002566 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:25:12.094905 osdx ubnt-cfgd[290077]: inactive
Mar 23 10:25:12.115421 osdx INFO[290083]: FRR daemons did not change
Mar 23 10:25:12.146492 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 23 10:25:12.188751 osdx WARNING[290152]: No supported link modes on interface eth0
Mar 23 10:25:12.190451 osdx modulelauncher[290152]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 23 10:25:12.190473 osdx modulelauncher[290152]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 23 10:25:12.191985 osdx modulelauncher[290152]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Mar 23 10:25:12.191993 osdx modulelauncher[290152]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Mar 23 10:25:12.227783 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:25:12.239588 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:12.263203 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:25:12.404130 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 23 10:25:12.470743 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 23 10:25:12.618838 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash be1776c8fd054dc1035f9bd9cce747bd437a0829719601a16e96bc6bbfcd87b0'.
Mar 23 10:25:12.771783 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:12.829966 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Mar 23 10:25:12.925845 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 23 10:25:13.002462 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSC-F3bI_QVNwQNfm9nM50e9Q3oIKXGWAaFulrxrv82HsApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'.
Mar 23 10:25:13.105922 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 23 10:25:13.218430 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:25:13.307755 osdx ubnt-cfgd[290249]: inactive
Mar 23 10:25:13.327409 osdx INFO[290257]: FRR daemons did not change
Mar 23 10:25:13.340586 osdx ca-certificates[290273]: Updating certificates in /etc/ssl/certs...
Mar 23 10:25:13.860510 osdx ubnt-cfgd[291285]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Mar 23 10:25:13.868404 osdx ca-certificates[291291]: 1 added, 0 removed; done.
Mar 23 10:25:13.871142 osdx ca-certificates[291297]: Running hooks in /etc/ca-certificates/update.d...
Mar 23 10:25:13.873763 osdx ca-certificates[291299]: done.
Mar 23 10:25:13.978805 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 23 10:25:13.979928 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:25:13.982153 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:13.997854 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:25:14.006894 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] dnscrypt-proxy 2.0.45
Mar 23 10:25:14.007072 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] Network connectivity detected
Mar 23 10:25:14.007149 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] Dropping privileges
Mar 23 10:25:14.009163 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] Network connectivity detected
Mar 23 10:25:14.009206 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 23 10:25:14.009206 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 23 10:25:14.009239 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] Firefox workaround initialized
Mar 23 10:25:14.009239 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] Loading the set of cloaking rules from [/tmp/tmplbsx1cds]
Mar 23 10:25:14.037561 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] [RD] OK (DoH) - rtt: 10ms
Mar 23 10:25:14.037561 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] Server with the lowest initial latency: RD (rtt: 10ms)
Mar 23 10:25:14.037561 osdx dnscrypt-proxy[291355]: [2026-03-23 10:25:14] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

DNSCrypt Server

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server.

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-crypt ip 10.215.168.1
set service dns proxy static RD protocol dns-crypt port 8443
set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns
set service dns proxy static RD protocol dns-crypt provider public-key 'a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8'
set service dns resolver local
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$

Show output

Mar 23 10:25:19.287793 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free.
Mar 23 10:25:19.290139 osdx systemd-journald[2086]: Received client request to rotate journal, rotating.
Mar 23 10:25:19.290203 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904.
Mar 23 10:25:19.298262 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'.
Mar 23 10:25:19.511844 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 23 10:25:19.796883 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:19.883462 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 23 10:25:19.959517 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 23 10:25:20.044902 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:25:20.165261 osdx ubnt-cfgd[293088]: inactive
Mar 23 10:25:20.188447 osdx INFO[293094]: FRR daemons did not change
Mar 23 10:25:20.222150 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 23 10:25:20.266559 osdx WARNING[293163]: No supported link modes on interface eth0
Mar 23 10:25:20.268327 osdx modulelauncher[293163]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 23 10:25:20.268341 osdx modulelauncher[293163]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 23 10:25:20.269777 osdx modulelauncher[293163]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Mar 23 10:25:20.269785 osdx modulelauncher[293163]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Mar 23 10:25:20.304801 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:25:20.317284 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:20.337233 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:25:20.492950 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 23 10:25:20.557187 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 23 10:25:20.729127 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Mar 23 10:25:20.862514 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:20.917649 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Mar 23 10:25:21.012418 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 23 10:25:21.070080 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'.
Mar 23 10:25:21.178538 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'.
Mar 23 10:25:21.249524 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'.
Mar 23 10:25:21.418460 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8'.
Mar 23 10:25:21.478690 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 23 10:25:21.594821 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:25:21.692004 osdx ubnt-cfgd[293262]: inactive
Mar 23 10:25:21.712699 osdx INFO[293270]: FRR daemons did not change
Mar 23 10:25:21.725951 osdx ca-certificates[293286]: Updating certificates in /etc/ssl/certs...
Mar 23 10:25:22.271702 osdx ubnt-cfgd[294298]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Mar 23 10:25:22.279545 osdx ca-certificates[294304]: 1 added, 0 removed; done.
Mar 23 10:25:22.283360 osdx ca-certificates[294310]: Running hooks in /etc/ca-certificates/update.d...
Mar 23 10:25:22.287014 osdx ca-certificates[294312]: done.
Mar 23 10:25:22.390543 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 23 10:25:22.391760 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:25:22.393870 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:22.415677 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] dnscrypt-proxy 2.0.45
Mar 23 10:25:22.415911 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] Network connectivity detected
Mar 23 10:25:22.416009 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] Dropping privileges
Mar 23 10:25:22.418421 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] Network connectivity detected
Mar 23 10:25:22.418485 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 23 10:25:22.418485 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 23 10:25:22.418485 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] Firefox workaround initialized
Mar 23 10:25:22.418485 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpdwqnne72]
Mar 23 10:25:22.419449 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Mar 23 10:25:22.419449 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Mar 23 10:25:22.419513 osdx dnscrypt-proxy[294368]: [2026-03-23 10:25:22] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Mar 23 10:25:22.421355 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.

Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16

DNSCrypt Server With Stamp

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8 ip 10.215.168.1 port 8443 at DUT0 and expect this output:

Step 3: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIKhjKhLsqJdLl-1HgLxWzbFeCoNp-La3ArpT3rcqsh7oGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'
set service dns resolver local
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$

Show output

Mar 23 10:25:28.335204 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free.
Mar 23 10:25:28.338187 osdx systemd-journald[2086]: Received client request to rotate journal, rotating.
Mar 23 10:25:28.338266 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904.
Mar 23 10:25:28.347745 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'.
Mar 23 10:25:28.603242 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'.
Mar 23 10:25:28.851618 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:28.948800 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Mar 23 10:25:29.018660 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Mar 23 10:25:29.123527 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:25:29.199711 osdx ubnt-cfgd[296101]: inactive
Mar 23 10:25:29.220430 osdx INFO[296107]: FRR daemons did not change
Mar 23 10:25:29.250199 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Mar 23 10:25:29.299218 osdx WARNING[296176]: No supported link modes on interface eth0
Mar 23 10:25:29.301008 osdx modulelauncher[296176]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Mar 23 10:25:29.301025 osdx modulelauncher[296176]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Mar 23 10:25:29.302565 osdx modulelauncher[296176]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Mar 23 10:25:29.302573 osdx modulelauncher[296176]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Mar 23 10:25:29.338777 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:25:29.352804 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:29.369340 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:25:29.513586 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Mar 23 10:25:29.595263 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'.
Mar 23 10:25:29.782227 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Mar 23 10:25:29.886815 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8 ip 10.215.168.1 port 8443'.
Mar 23 10:25:30.035165 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu.
Mar 23 10:25:30.092170 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Mar 23 10:25:30.191681 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Mar 23 10:25:30.251149 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIKhjKhLsqJdLl-1HgLxWzbFeCoNp-La3ArpT3rcqsh7oGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'.
Mar 23 10:25:30.340926 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Mar 23 10:25:30.407458 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'.
Mar 23 10:25:30.507760 osdx ubnt-cfgd[296275]: inactive
Mar 23 10:25:30.528058 osdx INFO[296283]: FRR daemons did not change
Mar 23 10:25:30.541948 osdx ca-certificates[296299]: Updating certificates in /etc/ssl/certs...
Mar 23 10:25:31.068697 osdx ubnt-cfgd[297311]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Mar 23 10:25:31.076973 osdx ca-certificates[297318]: 1 added, 0 removed; done.
Mar 23 10:25:31.080719 osdx ca-certificates[297323]: Running hooks in /etc/ca-certificates/update.d...
Mar 23 10:25:31.084328 osdx ca-certificates[297325]: done.
Mar 23 10:25:31.182523 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Mar 23 10:25:31.183729 osdx cfgd[1828]: [140369]Completed change to active configuration
Mar 23 10:25:31.186187 osdx OSDxCLI[140369]: User 'admin' committed the configuration.
Mar 23 10:25:31.202517 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] dnscrypt-proxy 2.0.45
Mar 23 10:25:31.202766 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] Network connectivity detected
Mar 23 10:25:31.202839 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] Dropping privileges
Mar 23 10:25:31.203029 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Mar 23 10:25:31.205191 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] Network connectivity detected
Mar 23 10:25:31.205244 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Mar 23 10:25:31.205244 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Mar 23 10:25:31.205244 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] Firefox workaround initialized
Mar 23 10:25:31.205244 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpqhuvipsk]
Mar 23 10:25:31.205918 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Mar 23 10:25:31.205918 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Mar 23 10:25:31.205994 osdx dnscrypt-proxy[297381]: [2026-03-23 10:25:31] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:

teldat.com has address 19.18.17.16