Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 2a6755e80e5a7dfe3ab6d39f6dcd5b2d794b6bb929280948ea0ff2d21715f66e set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 16 20:10:30.303637 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.9M, max 13.8M, 11.8M free. Apr 16 20:10:30.306868 osdx systemd-journald[126917]: Received client request to rotate journal, rotating. Apr 16 20:10:30.306953 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21. Apr 16 20:10:30.316557 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'. Apr 16 20:10:30.518134 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'. Apr 16 20:10:30.739217 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:10:30.845082 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 16 20:10:30.915636 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 16 20:10:31.027721 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:10:31.096579 osdx ubnt-cfgd[677663]: inactive Apr 16 20:10:31.116351 osdx INFO[677669]: FRR daemons did not change Apr 16 20:10:31.146891 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 16 20:10:31.194309 osdx WARNING[677738]: No supported link modes on interface eth0 Apr 16 20:10:31.195748 osdx modulelauncher[677738]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 16 20:10:31.195760 osdx modulelauncher[677738]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 16 20:10:31.196879 osdx modulelauncher[677738]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Apr 16 20:10:31.196886 osdx modulelauncher[677738]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Apr 16 20:10:31.236041 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:10:31.247407 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:10:31.263677 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:10:31.437026 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 16 20:10:31.511741 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'. Apr 16 20:10:31.678393 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:10:31.748849 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 16 20:10:31.816284 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 16 20:10:31.934686 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Apr 16 20:10:32.039999 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Apr 16 20:10:32.142300 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 2a6755e80e5a7dfe3ab6d39f6dcd5b2d794b6bb929280948ea0ff2d21715f66e'. Apr 16 20:10:32.228919 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 16 20:10:32.301610 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:10:32.407632 osdx ubnt-cfgd[677835]: inactive Apr 16 20:10:32.432451 osdx INFO[677843]: FRR daemons did not change Apr 16 20:10:32.445454 osdx ca-certificates[677858]: Updating certificates in /etc/ssl/certs... Apr 16 20:10:32.994408 osdx ubnt-cfgd[678871]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 16 20:10:33.003045 osdx ca-certificates[678877]: 1 added, 0 removed; done. Apr 16 20:10:33.006666 osdx ca-certificates[678883]: Running hooks in /etc/ca-certificates/update.d... Apr 16 20:10:33.009403 osdx ca-certificates[678885]: done. Apr 16 20:10:33.111356 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 16 20:10:33.112759 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:10:33.115450 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:10:33.132634 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:10:33.134158 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] dnscrypt-proxy 2.0.45 Apr 16 20:10:33.134409 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] Network connectivity detected Apr 16 20:10:33.134452 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] Dropping privileges Apr 16 20:10:33.136855 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] Network connectivity detected Apr 16 20:10:33.136921 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 16 20:10:33.136921 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 16 20:10:33.136921 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] Firefox workaround initialized Apr 16 20:10:33.136921 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpgqoov5hc] Apr 16 20:10:33.166191 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] [RD] OK (DoH) - rtt: 11ms Apr 16 20:10:33.166191 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] Server with the lowest initial latency: RD (rtt: 11ms) Apr 16 20:10:33.166191 osdx dnscrypt-proxy[678941]: [2026-04-16 20:10:33] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Apr 16 20:10:38.399320 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.8M, max 13.8M, 11.9M free. Apr 16 20:10:38.401533 osdx systemd-journald[126917]: Received client request to rotate journal, rotating. Apr 16 20:10:38.401597 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21. Apr 16 20:10:38.409467 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'. Apr 16 20:10:38.634096 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'. Apr 16 20:10:38.912988 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:10:39.015408 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 16 20:10:39.101578 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 16 20:10:39.229434 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:10:39.316059 osdx ubnt-cfgd[680674]: inactive Apr 16 20:10:39.335320 osdx INFO[680680]: FRR daemons did not change Apr 16 20:10:39.369558 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 16 20:10:39.424883 osdx WARNING[680750]: No supported link modes on interface eth0 Apr 16 20:10:39.426973 osdx modulelauncher[680750]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 16 20:10:39.426989 osdx modulelauncher[680750]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 16 20:10:39.429192 osdx modulelauncher[680750]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Apr 16 20:10:39.429209 osdx modulelauncher[680750]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Apr 16 20:10:39.479566 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:10:39.496512 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:10:39.540371 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:10:39.706782 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 16 20:10:39.796303 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'. Apr 16 20:10:39.952602 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:10:40.025665 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 16 20:10:40.138697 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:10:40.197644 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:10:40.314034 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:10:40.482038 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:10:40.561432 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 16 20:10:40.655997 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Apr 16 20:10:40.723161 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Apr 16 20:10:40.810362 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 16 20:10:40.881233 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show changes'. Apr 16 20:10:40.978861 osdx ubnt-cfgd[680854]: inactive Apr 16 20:10:40.996656 osdx INFO[680860]: FRR daemons did not change Apr 16 20:10:41.109927 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 16 20:10:41.111215 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:10:41.113588 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:10:41.134686 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:10:41.137058 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] dnscrypt-proxy 2.0.45 Apr 16 20:10:41.137247 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] Network connectivity detected Apr 16 20:10:41.137341 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] Dropping privileges Apr 16 20:10:41.139380 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] Network connectivity detected Apr 16 20:10:41.139426 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 16 20:10:41.139426 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 16 20:10:41.139426 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] Firefox workaround initialized Apr 16 20:10:41.139426 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpqjqux42l] Apr 16 20:10:41.158644 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABDPdJ19Y5CswyMBW2RyweUg": x509: certificate signed by unknown authority Apr 16 20:10:41.158644 osdx dnscrypt-proxy[680918]: [2026-04-16 20:10:41] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 16 20:10:51.330661 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.8M, max 13.8M, 11.9M free. Apr 16 20:10:51.333443 osdx systemd-journald[126917]: Received client request to rotate journal, rotating. Apr 16 20:10:51.333515 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21. Apr 16 20:10:51.341989 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'. Apr 16 20:10:51.603825 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'. Apr 16 20:10:51.884030 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:10:52.014645 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 16 20:10:52.096126 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 16 20:10:52.235859 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:10:52.315188 osdx ubnt-cfgd[681181]: inactive Apr 16 20:10:52.336254 osdx INFO[681187]: FRR daemons did not change Apr 16 20:10:52.365453 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 16 20:10:52.419957 osdx WARNING[681256]: No supported link modes on interface eth0 Apr 16 20:10:52.421711 osdx modulelauncher[681256]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 16 20:10:52.421725 osdx modulelauncher[681256]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 16 20:10:52.423276 osdx modulelauncher[681256]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Apr 16 20:10:52.423285 osdx modulelauncher[681256]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Apr 16 20:10:52.464594 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:10:52.475767 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:10:52.492064 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:10:52.710100 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 16 20:10:52.782832 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'. Apr 16 20:10:52.994454 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:10:53.103244 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 16 20:10:53.351352 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:10:53.413951 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:10:53.475199 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:10:53.612433 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:10:53.673400 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 16 20:10:53.787337 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Apr 16 20:10:53.879114 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Apr 16 20:10:53.945724 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Apr 16 20:10:54.046440 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 16 20:10:54.113593 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show changes'. Apr 16 20:10:54.237745 osdx ubnt-cfgd[681361]: inactive Apr 16 20:10:54.273273 osdx INFO[681367]: FRR daemons did not change Apr 16 20:10:54.429857 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 16 20:10:54.432325 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:10:54.435824 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:10:54.468293 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] dnscrypt-proxy 2.0.45 Apr 16 20:10:54.468594 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] Network connectivity detected Apr 16 20:10:54.468725 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] Dropping privileges Apr 16 20:10:54.479372 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] Network connectivity detected Apr 16 20:10:54.479372 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 16 20:10:54.479372 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 16 20:10:54.479488 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] Firefox workaround initialized Apr 16 20:10:54.479488 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpevvr_wtd] Apr 16 20:10:54.504114 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] [RD] OK (DoH) - rtt: 14ms Apr 16 20:10:54.504114 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] Server with the lowest initial latency: RD (rtt: 14ms) Apr 16 20:10:54.504114 osdx dnscrypt-proxy[681425]: [2026-04-16 20:10:54] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Apr 16 20:10:54.519970 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 2a6755e80e5a7dfe3ab6d39f6dcd5b2d794b6bb929280948ea0ff2d21715f66e at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAqZ1XoDlp9_jq2059tzVsteUtruSkoCUjqD_LSFxX2bgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAqZ1XoDlp9_jq2059tzVsteUtruSkoCUjqD_LSFxX2bgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Apr 16 20:10:59.362967 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.8M, max 13.8M, 11.9M free. Apr 16 20:10:59.363572 osdx systemd-journald[126917]: Received client request to rotate journal, rotating. Apr 16 20:10:59.363623 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21. Apr 16 20:10:59.375625 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'. Apr 16 20:10:59.660484 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'. Apr 16 20:10:59.958414 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:11:00.069659 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 16 20:11:00.144122 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 16 20:11:00.270149 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:11:00.363446 osdx ubnt-cfgd[681682]: inactive Apr 16 20:11:00.388768 osdx INFO[681688]: FRR daemons did not change Apr 16 20:11:00.419532 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 16 20:11:00.464451 osdx WARNING[681758]: No supported link modes on interface eth0 Apr 16 20:11:00.465843 osdx modulelauncher[681758]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 16 20:11:00.465854 osdx modulelauncher[681758]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 16 20:11:00.467001 osdx modulelauncher[681758]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Apr 16 20:11:00.467008 osdx modulelauncher[681758]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Apr 16 20:11:00.505224 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:11:00.516940 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:11:00.534284 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:11:00.707392 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 16 20:11:00.845896 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'. Apr 16 20:11:00.979830 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 2a6755e80e5a7dfe3ab6d39f6dcd5b2d794b6bb929280948ea0ff2d21715f66e'. Apr 16 20:11:01.142982 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:11:01.226727 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 16 20:11:01.294120 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 16 20:11:01.409645 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAqZ1XoDlp9_jq2059tzVsteUtruSkoCUjqD_LSFxX2bgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Apr 16 20:11:01.464402 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 16 20:11:01.597894 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:11:01.689537 osdx ubnt-cfgd[681856]: inactive Apr 16 20:11:01.715585 osdx INFO[681864]: FRR daemons did not change Apr 16 20:11:01.728169 osdx ca-certificates[681880]: Updating certificates in /etc/ssl/certs... Apr 16 20:11:02.292774 osdx ubnt-cfgd[682892]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 16 20:11:02.300695 osdx ca-certificates[682898]: 1 added, 0 removed; done. Apr 16 20:11:02.304155 osdx ca-certificates[682904]: Running hooks in /etc/ca-certificates/update.d... Apr 16 20:11:02.307742 osdx ca-certificates[682906]: done. Apr 16 20:11:02.411890 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 16 20:11:02.413217 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:11:02.415491 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:11:02.431059 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:11:02.435530 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] dnscrypt-proxy 2.0.45 Apr 16 20:11:02.435707 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] Network connectivity detected Apr 16 20:11:02.435794 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] Dropping privileges Apr 16 20:11:02.437929 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] Network connectivity detected Apr 16 20:11:02.437987 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 16 20:11:02.437987 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 16 20:11:02.437987 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] Firefox workaround initialized Apr 16 20:11:02.438045 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] Loading the set of cloaking rules from [/tmp/tmplf_dhw3k] Apr 16 20:11:02.468031 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] [RD] OK (DoH) - rtt: 12ms Apr 16 20:11:02.468031 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] Server with the lowest initial latency: RD (rtt: 12ms) Apr 16 20:11:02.468031 osdx dnscrypt-proxy[682962]: [2026-04-16 20:11:02] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Apr 16 20:11:08.327515 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.8M, max 13.8M, 11.9M free. Apr 16 20:11:08.329333 osdx systemd-journald[126917]: Received client request to rotate journal, rotating. Apr 16 20:11:08.329384 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21. Apr 16 20:11:08.337481 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'. Apr 16 20:11:08.560666 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'. Apr 16 20:11:08.794025 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:11:08.889393 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 16 20:11:08.961916 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 16 20:11:09.086769 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:11:09.149343 osdx ubnt-cfgd[684695]: inactive Apr 16 20:11:09.169517 osdx INFO[684701]: FRR daemons did not change Apr 16 20:11:09.197335 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 16 20:11:09.247486 osdx WARNING[684770]: No supported link modes on interface eth0 Apr 16 20:11:09.249273 osdx modulelauncher[684770]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 16 20:11:09.249285 osdx modulelauncher[684770]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 16 20:11:09.250569 osdx modulelauncher[684770]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Apr 16 20:11:09.250580 osdx modulelauncher[684770]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Apr 16 20:11:09.297026 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:11:09.312161 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:11:09.341565 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:11:09.503849 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 16 20:11:09.607088 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'. Apr 16 20:11:09.736770 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Apr 16 20:11:09.933828 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:11:09.999697 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 16 20:11:10.102532 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 16 20:11:10.169980 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Apr 16 20:11:10.279505 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Apr 16 20:11:10.363809 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Apr 16 20:11:10.437029 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b'. Apr 16 20:11:10.541044 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 16 20:11:10.619889 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:11:10.788509 osdx ubnt-cfgd[684870]: inactive Apr 16 20:11:10.818045 osdx INFO[684878]: FRR daemons did not change Apr 16 20:11:10.833519 osdx ca-certificates[684893]: Updating certificates in /etc/ssl/certs... Apr 16 20:11:11.453362 osdx ubnt-cfgd[685906]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 16 20:11:11.462706 osdx ca-certificates[685912]: 1 added, 0 removed; done. Apr 16 20:11:11.466662 osdx ca-certificates[685918]: Running hooks in /etc/ca-certificates/update.d... Apr 16 20:11:11.470189 osdx ca-certificates[685920]: done. Apr 16 20:11:11.589691 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 16 20:11:11.592490 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:11:11.594890 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:11:11.613413 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] dnscrypt-proxy 2.0.45 Apr 16 20:11:11.613685 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] Network connectivity detected Apr 16 20:11:11.613880 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] Dropping privileges Apr 16 20:11:11.614512 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:11:11.616673 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] Network connectivity detected Apr 16 20:11:11.616733 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 16 20:11:11.616733 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 16 20:11:11.616733 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] Firefox workaround initialized Apr 16 20:11:11.616733 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] Loading the set of cloaking rules from [/tmp/tmps7s11lxo] Apr 16 20:11:11.617824 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Apr 16 20:11:11.617824 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Apr 16 20:11:11.617824 osdx dnscrypt-proxy[685976]: [2026-04-16 20:11:11] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzICy8GhKtTI3hPbTGg6ufFdHbHEzK5DnKBWvJwonCr0CbGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzICy8GhKtTI3hPbTGg6ufFdHbHEzK5DnKBWvJwonCr0CbGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Apr 16 20:11:17.347564 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.8M, max 13.8M, 11.9M free. Apr 16 20:11:17.349944 osdx systemd-journald[126917]: Received client request to rotate journal, rotating. Apr 16 20:11:17.350005 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21. Apr 16 20:11:17.358541 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'. Apr 16 20:11:17.571819 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'. Apr 16 20:11:17.868949 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:11:17.956231 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Apr 16 20:11:18.050606 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Apr 16 20:11:18.129652 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:11:18.219933 osdx ubnt-cfgd[687707]: inactive Apr 16 20:11:18.240337 osdx INFO[687713]: FRR daemons did not change Apr 16 20:11:18.269933 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Apr 16 20:11:18.314227 osdx WARNING[687782]: No supported link modes on interface eth0 Apr 16 20:11:18.315674 osdx modulelauncher[687782]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Apr 16 20:11:18.315688 osdx modulelauncher[687782]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Apr 16 20:11:18.316834 osdx modulelauncher[687782]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Apr 16 20:11:18.316843 osdx modulelauncher[687782]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Apr 16 20:11:18.351478 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:11:18.365315 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:11:18.381017 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:11:18.525506 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Apr 16 20:11:18.595983 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'. Apr 16 20:11:18.708377 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Apr 16 20:11:18.812220 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b ip 10.215.168.1 port 8443'. Apr 16 20:11:18.961126 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu. Apr 16 20:11:19.021036 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Apr 16 20:11:19.128698 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Apr 16 20:11:19.198368 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzICy8GhKtTI3hPbTGg6ufFdHbHEzK5DnKBWvJwonCr0CbGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Apr 16 20:11:19.288423 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'. Apr 16 20:11:19.414000 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'. Apr 16 20:11:19.481019 osdx ubnt-cfgd[687882]: inactive Apr 16 20:11:19.504502 osdx INFO[687890]: FRR daemons did not change Apr 16 20:11:19.519297 osdx ca-certificates[687906]: Updating certificates in /etc/ssl/certs... Apr 16 20:11:20.043140 osdx ubnt-cfgd[688918]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Apr 16 20:11:20.053471 osdx ca-certificates[688924]: 1 added, 0 removed; done. Apr 16 20:11:20.057761 osdx ca-certificates[688928]: Running hooks in /etc/ca-certificates/update.d... Apr 16 20:11:20.061453 osdx ca-certificates[688932]: done. Apr 16 20:11:20.162440 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Apr 16 20:11:20.163687 osdx cfgd[1833]: [514199]Completed change to active configuration Apr 16 20:11:20.166007 osdx OSDxCLI[514199]: User 'admin' committed the configuration. Apr 16 20:11:20.184918 osdx OSDxCLI[514199]: User 'admin' left the configuration menu. Apr 16 20:11:20.189843 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] dnscrypt-proxy 2.0.45 Apr 16 20:11:20.190048 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] Network connectivity detected Apr 16 20:11:20.190180 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] Dropping privileges Apr 16 20:11:20.192304 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] Network connectivity detected Apr 16 20:11:20.192370 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Apr 16 20:11:20.192370 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Apr 16 20:11:20.192370 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] Firefox workaround initialized Apr 16 20:11:20.192370 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp2u3_dsam] Apr 16 20:11:20.193113 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Apr 16 20:11:20.193113 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Apr 16 20:11:20.193113 osdx dnscrypt-proxy[688988]: [2026-04-16 20:11:20] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16