Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash be1776c8fd054dc1035f9bd9cce747bd437a0829719601a16e96bc6bbfcd87b0 set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 23 10:25:48.299752 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free. Mar 23 10:25:48.300921 osdx systemd-journald[2086]: Received client request to rotate journal, rotating. Mar 23 10:25:48.300973 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904. Mar 23 10:25:48.309159 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'. Mar 23 10:25:48.527865 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'. Mar 23 10:25:48.799688 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu. Mar 23 10:25:48.891232 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 23 10:25:48.964727 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 23 10:25:49.069538 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:25:49.131419 osdx ubnt-cfgd[299514]: inactive Mar 23 10:25:49.151421 osdx INFO[299520]: FRR daemons did not change Mar 23 10:25:49.180937 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 23 10:25:49.234386 osdx WARNING[299589]: No supported link modes on interface eth0 Mar 23 10:25:49.235816 osdx modulelauncher[299589]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 23 10:25:49.235830 osdx modulelauncher[299589]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 23 10:25:49.237343 osdx modulelauncher[299589]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 23 10:25:49.237351 osdx modulelauncher[299589]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 23 10:25:49.275736 osdx cfgd[1828]: [140369]Completed change to active configuration Mar 23 10:25:49.287730 osdx OSDxCLI[140369]: User 'admin' committed the configuration. Mar 23 10:25:49.307685 osdx OSDxCLI[140369]: User 'admin' left the configuration menu. Mar 23 10:25:49.455161 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 23 10:25:49.537189 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'. Mar 23 10:25:50.661512 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu. Mar 23 10:25:50.732403 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 23 10:25:50.823607 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 23 10:25:50.887847 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Mar 23 10:25:50.979472 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Mar 23 10:25:51.060386 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash be1776c8fd054dc1035f9bd9cce747bd437a0829719601a16e96bc6bbfcd87b0'. Mar 23 10:25:51.171729 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 23 10:25:51.251656 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 23 10:25:51.358631 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 23 10:25:51.419113 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 23 10:25:51.530228 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:25:51.613178 osdx ubnt-cfgd[299688]: inactive Mar 23 10:25:51.633388 osdx INFO[299696]: FRR daemons did not change Mar 23 10:25:51.646025 osdx ca-certificates[299712]: Updating certificates in /etc/ssl/certs... Mar 23 10:25:52.208019 osdx ubnt-cfgd[300724]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 23 10:25:52.215802 osdx ca-certificates[300730]: 1 added, 0 removed; done. Mar 23 10:25:52.218919 osdx ca-certificates[300736]: Running hooks in /etc/ca-certificates/update.d... Mar 23 10:25:52.222449 osdx ca-certificates[300738]: done. Mar 23 10:25:52.333229 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 23 10:25:52.334515 osdx cfgd[1828]: [140369]Completed change to active configuration Mar 23 10:25:52.336612 osdx OSDxCLI[140369]: User 'admin' committed the configuration. Mar 23 10:25:52.358586 osdx OSDxCLI[140369]: User 'admin' left the configuration menu. Mar 23 10:25:52.360114 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] dnscrypt-proxy 2.0.45 Mar 23 10:25:52.360295 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Network connectivity detected Mar 23 10:25:52.360479 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Dropping privileges Mar 23 10:25:52.362436 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Network connectivity detected Mar 23 10:25:52.362477 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 23 10:25:52.362477 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 23 10:25:52.362477 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 23 10:25:52.362540 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Firefox workaround initialized Mar 23 10:25:52.362540 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpd4_fkrkp] Mar 23 10:25:52.393116 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] [RD] OK (DoH) - rtt: 10ms Mar 23 10:25:52.393116 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] Server with the lowest initial latency: RD (rtt: 10ms) Mar 23 10:25:52.393116 osdx dnscrypt-proxy[300797]: [2026-03-23 10:25:52] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 98a8ac304f9da87b4a7d743dc4860287a6868f84568106ddebd6edd6fb13606e set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 23 10:25:48.278289 osdx systemd-journald[1995]: Runtime Journal (/run/log/journal/3bae93ce7bf04d9e94142a051157df70) is 896.0K, max 6.4M, 5.6M free. Mar 23 10:25:48.283238 osdx systemd-journald[1995]: Received client request to rotate journal, rotating. Mar 23 10:25:48.283307 osdx systemd-journald[1995]: Vacuuming done, freed 0B of archived journals from /run/log/journal/3bae93ce7bf04d9e94142a051157df70. Mar 23 10:25:48.290113 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'system journal clear'. Mar 23 10:25:48.496798 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'system coredump delete all'. Mar 23 10:25:49.590266 osdx OSDxCLI[215885]: User 'admin' entered the configuration menu. Mar 23 10:25:49.676052 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 23 10:25:49.767698 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 23 10:25:49.817034 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service ssh'. Mar 23 10:25:49.924795 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:25:49.987938 osdx ubnt-cfgd[243880]: inactive Mar 23 10:25:50.060398 osdx INFO[243901]: FRR daemons did not change Mar 23 10:25:50.096164 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 23 10:25:50.150391 osdx WARNING[243970]: No supported link modes on interface eth0 Mar 23 10:25:50.151824 osdx modulelauncher[243970]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 23 10:25:50.151842 osdx modulelauncher[243970]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 23 10:25:50.153089 osdx modulelauncher[243970]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 23 10:25:50.153100 osdx modulelauncher[243970]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 23 10:25:50.240523 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 23 10:25:50.251345 osdx sshd[244036]: Server listening on 0.0.0.0 port 22. Mar 23 10:25:50.251368 osdx sshd[244036]: Server listening on :: port 22. Mar 23 10:25:50.251453 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 23 10:25:50.252640 osdx cfgd[1631]: [215885]Completed change to active configuration Mar 23 10:25:50.266280 osdx OSDxCLI[215885]: User 'admin' committed the configuration. Mar 23 10:25:50.304626 osdx OSDxCLI[215885]: User 'admin' left the configuration menu. Mar 23 10:25:50.462900 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 23 10:25:52.564280 osdx OSDxCLI[215885]: User 'admin' entered the configuration menu. Mar 23 10:25:52.622395 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 23 10:25:52.715669 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 23 10:25:52.765568 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 23 10:25:52.886018 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Mar 23 10:25:52.945630 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Mar 23 10:25:53.042203 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Mar 23 10:25:53.114576 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 98a8ac304f9da87b4a7d743dc4860287a6868f84568106ddebd6edd6fb13606e'. Mar 23 10:25:53.230614 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:25:53.307595 osdx ubnt-cfgd[244083]: inactive Mar 23 10:25:53.334107 osdx INFO[244091]: FRR daemons did not change Mar 23 10:25:53.350147 osdx ca-certificates[244106]: Updating certificates in /etc/ssl/certs... Mar 23 10:25:53.926089 osdx ubnt-cfgd[245119]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 23 10:25:53.936509 osdx ca-certificates[245125]: 1 added, 0 removed; done. Mar 23 10:25:53.939738 osdx ca-certificates[245131]: Running hooks in /etc/ca-certificates/update.d... Mar 23 10:25:53.942725 osdx ca-certificates[245133]: done. Mar 23 10:25:54.020635 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 23 10:25:54.023132 osdx cfgd[1631]: [215885]Completed change to active configuration Mar 23 10:25:54.026876 osdx OSDxCLI[215885]: User 'admin' committed the configuration. Mar 23 10:25:54.046738 osdx OSDxCLI[215885]: User 'admin' left the configuration menu. Mar 23 10:25:54.065920 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] dnscrypt-proxy 2.0.45 Mar 23 10:25:54.066167 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] Network connectivity detected Mar 23 10:25:54.066274 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] Dropping privileges Mar 23 10:25:54.068042 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] Network connectivity detected Mar 23 10:25:54.068126 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 23 10:25:54.068126 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 23 10:25:54.068126 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] Firefox workaround initialized Mar 23 10:25:54.068126 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpf9sartsj] Mar 23 10:25:54.150731 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] [DUT0] OK (DoH) - rtt: 11ms Mar 23 10:25:54.150841 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 11ms) Mar 23 10:25:54.150841 osdx dnscrypt-proxy[245140]: [2026-03-23 10:25:54] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash be1776c8fd054dc1035f9bd9cce747bd437a0829719601a16e96bc6bbfcd87b0 at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSC-F3bI_QVNwQNfm9nM50e9Q3oIKXGWAaFulrxrv82HsApyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSC-F3bI_QVNwQNfm9nM50e9Q3oIKXGWAaFulrxrv82HsApyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 23 10:26:01.317833 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free. Mar 23 10:26:01.320462 osdx systemd-journald[2086]: Received client request to rotate journal, rotating. Mar 23 10:26:01.320520 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904. Mar 23 10:26:01.327026 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'. Mar 23 10:26:01.561682 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'. Mar 23 10:26:01.819813 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu. Mar 23 10:26:01.931526 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 23 10:26:02.001619 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 23 10:26:02.110547 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:02.167426 osdx ubnt-cfgd[302532]: inactive Mar 23 10:26:02.188570 osdx INFO[302538]: FRR daemons did not change Mar 23 10:26:02.216461 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 23 10:26:02.262533 osdx WARNING[302607]: No supported link modes on interface eth0 Mar 23 10:26:02.264044 osdx modulelauncher[302607]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 23 10:26:02.264060 osdx modulelauncher[302607]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 23 10:26:02.265317 osdx modulelauncher[302607]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 23 10:26:02.265332 osdx modulelauncher[302607]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 23 10:26:02.304287 osdx cfgd[1828]: [140369]Completed change to active configuration Mar 23 10:26:02.316401 osdx OSDxCLI[140369]: User 'admin' committed the configuration. Mar 23 10:26:02.344471 osdx OSDxCLI[140369]: User 'admin' left the configuration menu. Mar 23 10:26:02.501829 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 23 10:26:02.576645 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'. Mar 23 10:26:03.663769 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash be1776c8fd054dc1035f9bd9cce747bd437a0829719601a16e96bc6bbfcd87b0'. Mar 23 10:26:03.795833 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu. Mar 23 10:26:03.852708 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 23 10:26:03.938659 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 23 10:26:03.997821 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSC-F3bI_QVNwQNfm9nM50e9Q3oIKXGWAaFulrxrv82HsApyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Mar 23 10:26:04.083460 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 23 10:26:04.136053 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 23 10:26:04.229198 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 23 10:26:04.295741 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 23 10:26:04.393153 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 23 10:26:04.479825 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:04.536815 osdx ubnt-cfgd[302708]: inactive Mar 23 10:26:04.558350 osdx INFO[302716]: FRR daemons did not change Mar 23 10:26:04.569789 osdx ca-certificates[302732]: Updating certificates in /etc/ssl/certs... Mar 23 10:26:05.103549 osdx ubnt-cfgd[303744]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 23 10:26:05.112161 osdx ca-certificates[303750]: 1 added, 0 removed; done. Mar 23 10:26:05.115112 osdx ca-certificates[303756]: Running hooks in /etc/ca-certificates/update.d... Mar 23 10:26:05.117908 osdx ca-certificates[303758]: done. Mar 23 10:26:05.224867 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 23 10:26:05.227872 osdx cfgd[1828]: [140369]Completed change to active configuration Mar 23 10:26:05.230244 osdx OSDxCLI[140369]: User 'admin' committed the configuration. Mar 23 10:26:05.246624 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] dnscrypt-proxy 2.0.45 Mar 23 10:26:05.246869 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Network connectivity detected Mar 23 10:26:05.246914 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Dropping privileges Mar 23 10:26:05.248998 osdx OSDxCLI[140369]: User 'admin' left the configuration menu. Mar 23 10:26:05.249258 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Network connectivity detected Mar 23 10:26:05.249283 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 23 10:26:05.249283 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 23 10:26:05.249318 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 23 10:26:05.249318 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Firefox workaround initialized Mar 23 10:26:05.249318 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpxndhswb0] Mar 23 10:26:05.279292 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] [RD] OK (DoH) - rtt: 11ms Mar 23 10:26:05.279292 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] Server with the lowest initial latency: RD (rtt: 11ms) Mar 23 10:26:05.279292 osdx dnscrypt-proxy[303817]: [2026-03-23 10:26:05] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 98a8ac304f9da87b4a7d743dc4860287a6868f84568106ddebd6edd6fb13606e at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgmKisME-dqHtKfXQ9xIYCh6aGj4RWgQbd69bt1vsTYG4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgmKisME-dqHtKfXQ9xIYCh6aGj4RWgQbd69bt1vsTYG4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 23 10:26:01.276825 osdx systemd-journald[1995]: Runtime Journal (/run/log/journal/3bae93ce7bf04d9e94142a051157df70) is 928.0K, max 6.4M, 5.5M free. Mar 23 10:26:01.279598 osdx systemd-journald[1995]: Received client request to rotate journal, rotating. Mar 23 10:26:01.279654 osdx systemd-journald[1995]: Vacuuming done, freed 0B of archived journals from /run/log/journal/3bae93ce7bf04d9e94142a051157df70. Mar 23 10:26:01.290099 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'system journal clear'. Mar 23 10:26:01.509287 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'system coredump delete all'. Mar 23 10:26:02.584923 osdx OSDxCLI[215885]: User 'admin' entered the configuration menu. Mar 23 10:26:02.678686 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 23 10:26:02.743316 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 23 10:26:02.838486 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service ssh'. Mar 23 10:26:02.911126 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:02.999230 osdx ubnt-cfgd[246862]: inactive Mar 23 10:26:03.081459 osdx INFO[246883]: FRR daemons did not change Mar 23 10:26:03.111678 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 23 10:26:03.151771 osdx WARNING[246952]: No supported link modes on interface eth0 Mar 23 10:26:03.153104 osdx modulelauncher[246952]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 23 10:26:03.153196 osdx modulelauncher[246952]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 23 10:26:03.154305 osdx modulelauncher[246952]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 23 10:26:03.154311 osdx modulelauncher[246952]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 23 10:26:03.240039 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 23 10:26:03.251289 osdx sshd[247018]: Server listening on 0.0.0.0 port 22. Mar 23 10:26:03.251315 osdx sshd[247018]: Server listening on :: port 22. Mar 23 10:26:03.251408 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 23 10:26:03.253080 osdx cfgd[1631]: [215885]Completed change to active configuration Mar 23 10:26:03.267283 osdx OSDxCLI[215885]: User 'admin' committed the configuration. Mar 23 10:26:03.281807 osdx OSDxCLI[215885]: User 'admin' left the configuration menu. Mar 23 10:26:03.452346 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 23 10:26:05.441842 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 98a8ac304f9da87b4a7d743dc4860287a6868f84568106ddebd6edd6fb13606e'. Mar 23 10:26:05.582118 osdx OSDxCLI[215885]: User 'admin' entered the configuration menu. Mar 23 10:26:05.638579 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 23 10:26:05.732464 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 23 10:26:05.793777 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 23 10:26:05.918392 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgmKisME-dqHtKfXQ9xIYCh6aGj4RWgQbd69bt1vsTYG4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Mar 23 10:26:06.007524 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:06.092510 osdx ubnt-cfgd[247065]: inactive Mar 23 10:26:06.112675 osdx INFO[247073]: FRR daemons did not change Mar 23 10:26:06.149696 osdx ca-certificates[247089]: Updating certificates in /etc/ssl/certs... Mar 23 10:26:06.718782 osdx ubnt-cfgd[248101]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 23 10:26:06.726519 osdx ca-certificates[248106]: 1 added, 0 removed; done. Mar 23 10:26:06.730210 osdx ca-certificates[248113]: Running hooks in /etc/ca-certificates/update.d... Mar 23 10:26:06.733173 osdx ca-certificates[248115]: done. Mar 23 10:26:06.804194 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 23 10:26:06.806301 osdx cfgd[1631]: [215885]Completed change to active configuration Mar 23 10:26:06.809541 osdx OSDxCLI[215885]: User 'admin' committed the configuration. Mar 23 10:26:06.824635 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] dnscrypt-proxy 2.0.45 Mar 23 10:26:06.824830 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] Network connectivity detected Mar 23 10:26:06.824906 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] Dropping privileges Mar 23 10:26:06.825030 osdx OSDxCLI[215885]: User 'admin' left the configuration menu. Mar 23 10:26:06.827328 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] Network connectivity detected Mar 23 10:26:06.827368 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 23 10:26:06.827368 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 23 10:26:06.827368 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] Firefox workaround initialized Mar 23 10:26:06.827418 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpkk9r51ea] Mar 23 10:26:06.919751 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] [DUT0] OK (DoH) - rtt: 11ms Mar 23 10:26:06.919751 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 11ms) Mar 23 10:26:06.919751 osdx dnscrypt-proxy[248122]: [2026-03-23 10:26:06] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key 'a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Mar 23 10:26:12.000224 osdx systemd-timedated[282382]: Changed local time to Mon 2026-03-23 10:26:12 UTC Mar 23 10:26:12.001859 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'set date 2026-03-23 10:26:12'. Mar 23 10:26:12.003702 osdx systemd-journald[2086]: Time jumped backwards, rotating. Mar 23 10:26:12.304720 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.8M, max 13.8M, 11.9M free. Mar 23 10:26:12.307712 osdx systemd-journald[2086]: Received client request to rotate journal, rotating. Mar 23 10:26:12.307786 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904. Mar 23 10:26:12.315826 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'. Mar 23 10:26:12.541966 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'. Mar 23 10:26:12.767657 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu. Mar 23 10:26:12.865129 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 23 10:26:12.940278 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 23 10:26:13.048343 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:13.110633 osdx ubnt-cfgd[305551]: inactive Mar 23 10:26:13.131008 osdx INFO[305557]: FRR daemons did not change Mar 23 10:26:13.163705 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 23 10:26:13.205224 osdx WARNING[305626]: No supported link modes on interface eth0 Mar 23 10:26:13.206928 osdx modulelauncher[305626]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 23 10:26:13.206940 osdx modulelauncher[305626]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 23 10:26:13.208365 osdx modulelauncher[305626]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 23 10:26:13.208372 osdx modulelauncher[305626]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 23 10:26:13.252124 osdx cfgd[1828]: [140369]Completed change to active configuration Mar 23 10:26:13.266185 osdx OSDxCLI[140369]: User 'admin' committed the configuration. Mar 23 10:26:13.282533 osdx OSDxCLI[140369]: User 'admin' left the configuration menu. Mar 23 10:26:13.432539 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 23 10:26:13.504448 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'. Mar 23 10:26:14.625011 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Mar 23 10:26:14.764032 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu. Mar 23 10:26:14.840600 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 23 10:26:14.937966 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 23 10:26:15.003280 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Mar 23 10:26:15.101260 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Mar 23 10:26:15.179003 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Mar 23 10:26:15.273775 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8'. Mar 23 10:26:15.323590 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 23 10:26:15.423155 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 23 10:26:15.478565 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 23 10:26:15.575581 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 23 10:26:15.646971 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:15.743723 osdx ubnt-cfgd[305728]: inactive Mar 23 10:26:15.768193 osdx INFO[305736]: FRR daemons did not change Mar 23 10:26:15.782272 osdx ca-certificates[305752]: Updating certificates in /etc/ssl/certs... Mar 23 10:26:16.330146 osdx ubnt-cfgd[306764]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 23 10:26:16.339705 osdx ca-certificates[306770]: 1 added, 0 removed; done. Mar 23 10:26:16.342531 osdx ca-certificates[306776]: Running hooks in /etc/ca-certificates/update.d... Mar 23 10:26:16.345244 osdx ca-certificates[306778]: done. Mar 23 10:26:16.463992 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 23 10:26:16.465414 osdx cfgd[1828]: [140369]Completed change to active configuration Mar 23 10:26:16.469961 osdx OSDxCLI[140369]: User 'admin' committed the configuration. Mar 23 10:26:16.499930 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] dnscrypt-proxy 2.0.45 Mar 23 10:26:16.500220 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Network connectivity detected Mar 23 10:26:16.500279 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Dropping privileges Mar 23 10:26:16.502988 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Network connectivity detected Mar 23 10:26:16.503434 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 23 10:26:16.503434 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 23 10:26:16.503434 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 23 10:26:16.503434 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Firefox workaround initialized Mar 23 10:26:16.503434 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpj639fhx5] Mar 23 10:26:16.504757 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Mar 23 10:26:16.504757 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Mar 23 10:26:16.504822 osdx dnscrypt-proxy[306837]: [2026-03-23 10:26:16] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Mar 23 10:26:16.504880 osdx OSDxCLI[140369]: User 'admin' left the configuration menu.
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 98a8ac304f9da87b4a7d743dc4860287a6868f84568106ddebd6edd6fb13606e set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 23 10:26:13.282306 osdx systemd-journald[1995]: Runtime Journal (/run/log/journal/3bae93ce7bf04d9e94142a051157df70) is 952.0K, max 6.4M, 5.5M free. Mar 23 10:26:13.285795 osdx systemd-journald[1995]: Received client request to rotate journal, rotating. Mar 23 10:26:13.286363 osdx systemd-journald[1995]: Vacuuming done, freed 0B of archived journals from /run/log/journal/3bae93ce7bf04d9e94142a051157df70. Mar 23 10:26:13.292325 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'system journal clear'. Mar 23 10:26:13.494313 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'system coredump delete all'. Mar 23 10:26:14.530946 osdx OSDxCLI[215885]: User 'admin' entered the configuration menu. Mar 23 10:26:14.638520 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 23 10:26:14.713360 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 23 10:26:14.803976 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service ssh'. Mar 23 10:26:14.870109 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:14.968031 osdx ubnt-cfgd[249839]: inactive Mar 23 10:26:15.046238 osdx INFO[249860]: FRR daemons did not change Mar 23 10:26:15.081867 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 23 10:26:15.131609 osdx WARNING[249929]: No supported link modes on interface eth0 Mar 23 10:26:15.133400 osdx modulelauncher[249929]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 23 10:26:15.133414 osdx modulelauncher[249929]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 23 10:26:15.134633 osdx modulelauncher[249929]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 23 10:26:15.134717 osdx modulelauncher[249929]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 23 10:26:15.238225 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 23 10:26:15.251392 osdx sshd[249995]: Server listening on 0.0.0.0 port 22. Mar 23 10:26:15.251415 osdx sshd[249995]: Server listening on :: port 22. Mar 23 10:26:15.251489 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 23 10:26:15.252777 osdx cfgd[1631]: [215885]Completed change to active configuration Mar 23 10:26:15.264913 osdx OSDxCLI[215885]: User 'admin' committed the configuration. Mar 23 10:26:15.283025 osdx OSDxCLI[215885]: User 'admin' left the configuration menu. Mar 23 10:26:15.434106 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 23 10:26:17.702803 osdx OSDxCLI[215885]: User 'admin' entered the configuration menu. Mar 23 10:26:17.772013 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 23 10:26:17.861980 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 23 10:26:17.914811 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 23 10:26:18.019694 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Mar 23 10:26:18.082076 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Mar 23 10:26:18.195810 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Mar 23 10:26:18.259360 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 98a8ac304f9da87b4a7d743dc4860287a6868f84568106ddebd6edd6fb13606e'. Mar 23 10:26:18.355090 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:18.423512 osdx ubnt-cfgd[250044]: inactive Mar 23 10:26:18.442385 osdx INFO[250052]: FRR daemons did not change Mar 23 10:26:18.456050 osdx ca-certificates[250068]: Updating certificates in /etc/ssl/certs... Mar 23 10:26:18.993294 osdx ubnt-cfgd[251080]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 23 10:26:19.000579 osdx ca-certificates[251085]: 1 added, 0 removed; done. Mar 23 10:26:19.003590 osdx ca-certificates[251092]: Running hooks in /etc/ca-certificates/update.d... Mar 23 10:26:19.006497 osdx ca-certificates[251094]: done. Mar 23 10:26:19.078136 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 23 10:26:19.080841 osdx cfgd[1631]: [215885]Completed change to active configuration Mar 23 10:26:19.085734 osdx OSDxCLI[215885]: User 'admin' committed the configuration. Mar 23 10:26:19.129161 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] dnscrypt-proxy 2.0.45 Mar 23 10:26:19.129415 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] Network connectivity detected Mar 23 10:26:19.129415 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] Dropping privileges Mar 23 10:26:19.131126 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] Network connectivity detected Mar 23 10:26:19.131173 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 23 10:26:19.131173 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 23 10:26:19.131173 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] Firefox workaround initialized Mar 23 10:26:19.131173 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpvostohvl] Mar 23 10:26:19.135943 osdx OSDxCLI[215885]: User 'admin' left the configuration menu. Mar 23 10:26:19.222287 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] [DUT0] OK (DoH) - rtt: 14ms Mar 23 10:26:19.222287 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 14ms) Mar 23 10:26:19.222287 osdx dnscrypt-proxy[251101]: [2026-03-23 10:26:19] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8 ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIKhjKhLsqJdLl-1HgLxWzbFeCoNp-La3ArpT3rcqsh7oGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIKhjKhLsqJdLl-1HgLxWzbFeCoNp-La3ArpT3rcqsh7oGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Mar 23 10:26:25.345286 osdx systemd-journald[2086]: Runtime Journal (/run/log/journal/6b3b4e4818aa404284bc644df40f6904) is 1.9M, max 13.8M, 11.9M free. Mar 23 10:26:25.348972 osdx systemd-journald[2086]: Received client request to rotate journal, rotating. Mar 23 10:26:25.349029 osdx systemd-journald[2086]: Vacuuming done, freed 0B of archived journals from /run/log/journal/6b3b4e4818aa404284bc644df40f6904. Mar 23 10:26:25.355702 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal clear'. Mar 23 10:26:25.562947 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system coredump delete all'. Mar 23 10:26:25.777931 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu. Mar 23 10:26:25.873844 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Mar 23 10:26:25.938077 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 23 10:26:26.051338 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:26.125351 osdx ubnt-cfgd[308570]: inactive Mar 23 10:26:26.147904 osdx INFO[308576]: FRR daemons did not change Mar 23 10:26:26.176980 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 23 10:26:26.221081 osdx WARNING[308645]: No supported link modes on interface eth0 Mar 23 10:26:26.222692 osdx modulelauncher[308645]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 23 10:26:26.222708 osdx modulelauncher[308645]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 23 10:26:26.224178 osdx modulelauncher[308645]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Mar 23 10:26:26.224185 osdx modulelauncher[308645]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Mar 23 10:26:26.261122 osdx cfgd[1828]: [140369]Completed change to active configuration Mar 23 10:26:26.275049 osdx OSDxCLI[140369]: User 'admin' committed the configuration. Mar 23 10:26:26.290512 osdx OSDxCLI[140369]: User 'admin' left the configuration menu. Mar 23 10:26:26.427473 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Mar 23 10:26:26.496350 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'system journal show | cat'. Mar 23 10:26:27.593846 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Mar 23 10:26:27.686829 osdx OSDxCLI[140369]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key a8:63:2a:12:ec:a8:97:4b:97:ed:47:80:bc:56:cd:b1:5e:0a:83:69:f8:b6:b7:02:ba:53:de:b7:2a:b2:1e:e8 ip 10.215.168.1 port 8443'. Mar 23 10:26:27.836991 osdx OSDxCLI[140369]: User 'admin' entered the configuration menu. Mar 23 10:26:27.897760 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Mar 23 10:26:27.994881 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Mar 23 10:26:28.054969 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIKhjKhLsqJdLl-1HgLxWzbFeCoNp-La3ArpT3rcqsh7oGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Mar 23 10:26:28.143730 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns resolver local'. Mar 23 10:26:28.199928 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Mar 23 10:26:28.295004 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Mar 23 10:26:28.348765 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Mar 23 10:26:28.476577 osdx OSDxCLI[140369]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:28.544380 osdx ubnt-cfgd[308747]: inactive Mar 23 10:26:28.568126 osdx INFO[308755]: FRR daemons did not change Mar 23 10:26:28.582249 osdx ca-certificates[308771]: Updating certificates in /etc/ssl/certs... Mar 23 10:26:29.133758 osdx ubnt-cfgd[309783]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 23 10:26:29.142039 osdx ca-certificates[309789]: 1 added, 0 removed; done. Mar 23 10:26:29.145410 osdx ca-certificates[309795]: Running hooks in /etc/ca-certificates/update.d... Mar 23 10:26:29.148844 osdx ca-certificates[309797]: done. Mar 23 10:26:29.281368 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 23 10:26:29.282619 osdx cfgd[1828]: [140369]Completed change to active configuration Mar 23 10:26:29.284999 osdx OSDxCLI[140369]: User 'admin' committed the configuration. Mar 23 10:26:29.300091 osdx OSDxCLI[140369]: User 'admin' left the configuration menu. Mar 23 10:26:29.300707 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] dnscrypt-proxy 2.0.45 Mar 23 10:26:29.300883 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Network connectivity detected Mar 23 10:26:29.301063 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Dropping privileges Mar 23 10:26:29.303206 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Network connectivity detected Mar 23 10:26:29.303256 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 23 10:26:29.303256 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 23 10:26:29.303256 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Mar 23 10:26:29.303303 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Firefox workaround initialized Mar 23 10:26:29.303303 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpum3i553v] Mar 23 10:26:29.304063 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Mar 23 10:26:29.304063 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Mar 23 10:26:29.304139 osdx dnscrypt-proxy[309856]: [2026-03-23 10:26:29] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 98a8ac304f9da87b4a7d743dc4860287a6868f84568106ddebd6edd6fb13606e at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgmKisME-dqHtKfXQ9xIYCh6aGj4RWgQbd69bt1vsTYG4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgmKisME-dqHtKfXQ9xIYCh6aGj4RWgQbd69bt1vsTYG4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Mar 23 10:26:25.284762 osdx systemd-journald[1995]: Runtime Journal (/run/log/journal/3bae93ce7bf04d9e94142a051157df70) is 952.0K, max 6.4M, 5.5M free. Mar 23 10:26:25.288962 osdx systemd-journald[1995]: Received client request to rotate journal, rotating. Mar 23 10:26:25.289015 osdx systemd-journald[1995]: Vacuuming done, freed 0B of archived journals from /run/log/journal/3bae93ce7bf04d9e94142a051157df70. Mar 23 10:26:25.294438 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'system journal clear'. Mar 23 10:26:25.493122 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'system coredump delete all'. Mar 23 10:26:26.511039 osdx OSDxCLI[215885]: User 'admin' entered the configuration menu. Mar 23 10:26:26.599520 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Mar 23 10:26:26.660420 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Mar 23 10:26:26.758646 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service ssh'. Mar 23 10:26:26.837096 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:26.932292 osdx ubnt-cfgd[252819]: inactive Mar 23 10:26:27.002749 osdx INFO[252840]: FRR daemons did not change Mar 23 10:26:27.034521 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Mar 23 10:26:27.085420 osdx WARNING[252909]: No supported link modes on interface eth0 Mar 23 10:26:27.086893 osdx modulelauncher[252909]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Mar 23 10:26:27.086905 osdx modulelauncher[252909]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Mar 23 10:26:27.088110 osdx modulelauncher[252909]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Mar 23 10:26:27.088119 osdx modulelauncher[252909]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Mar 23 10:26:27.182988 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 23 10:26:27.197219 osdx sshd[252975]: Server listening on 0.0.0.0 port 22. Mar 23 10:26:27.197485 osdx sshd[252975]: Server listening on :: port 22. Mar 23 10:26:27.197622 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 23 10:26:27.199502 osdx cfgd[1631]: [215885]Completed change to active configuration Mar 23 10:26:27.215009 osdx OSDxCLI[215885]: User 'admin' committed the configuration. Mar 23 10:26:27.230304 osdx OSDxCLI[215885]: User 'admin' left the configuration menu. Mar 23 10:26:27.372968 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Mar 23 10:26:29.463601 osdx OSDxCLI[215885]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 98a8ac304f9da87b4a7d743dc4860287a6868f84568106ddebd6edd6fb13606e'. Mar 23 10:26:29.620374 osdx OSDxCLI[215885]: User 'admin' entered the configuration menu. Mar 23 10:26:29.686915 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Mar 23 10:26:29.781573 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Mar 23 10:26:29.838456 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Mar 23 10:26:29.935804 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgmKisME-dqHtKfXQ9xIYCh6aGj4RWgQbd69bt1vsTYG4NZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Mar 23 10:26:30.002292 osdx OSDxCLI[215885]: User 'admin' added a new cfg line: 'show working'. Mar 23 10:26:30.090367 osdx ubnt-cfgd[253022]: inactive Mar 23 10:26:30.110033 osdx INFO[253030]: FRR daemons did not change Mar 23 10:26:30.127083 osdx ca-certificates[253046]: Updating certificates in /etc/ssl/certs... Mar 23 10:26:30.623769 osdx ubnt-cfgd[254058]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Mar 23 10:26:30.631214 osdx ca-certificates[254063]: 1 added, 0 removed; done. Mar 23 10:26:30.634043 osdx ca-certificates[254070]: Running hooks in /etc/ca-certificates/update.d... Mar 23 10:26:30.637706 osdx ca-certificates[254072]: done. Mar 23 10:26:30.702754 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Mar 23 10:26:30.704882 osdx cfgd[1631]: [215885]Completed change to active configuration Mar 23 10:26:30.707948 osdx OSDxCLI[215885]: User 'admin' committed the configuration. Mar 23 10:26:30.727188 osdx OSDxCLI[215885]: User 'admin' left the configuration menu. Mar 23 10:26:30.728757 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] dnscrypt-proxy 2.0.45 Mar 23 10:26:30.728953 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] Network connectivity detected Mar 23 10:26:30.728978 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] Dropping privileges Mar 23 10:26:30.731016 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] Network connectivity detected Mar 23 10:26:30.731067 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Mar 23 10:26:30.731067 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Mar 23 10:26:30.731124 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] Firefox workaround initialized Mar 23 10:26:30.731124 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpz81ty7c8] Mar 23 10:26:30.816862 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] [DUT0] OK (DoH) - rtt: 11ms Mar 23 10:26:30.816862 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 11ms) Mar 23 10:26:30.816862 osdx dnscrypt-proxy[254079]: [2026-03-23 10:26:30] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13