Static Server

Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.

Server With Upstream DoH

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server cert file 'running://dns.dut0.crt'
set service dns proxy server cert key 'running://dns.dut0.key'
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-over-https hash 2a6755e80e5a7dfe3ab6d39f6dcd5b2d794b6bb929280948ea0ff2d21715f66e
set service dns proxy static RD protocol dns-over-https host name remote.dns
set service dns proxy static RD protocol dns-over-https ip 10.215.168.1
set service dns resolver local
set service dns static host-name teldat.com inet 10.11.12.13
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Apr 16 20:09:25.340861 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.9M, max 13.8M, 11.8M free.
Apr 16 20:09:25.341535 osdx systemd-journald[126917]: Received client request to rotate journal, rotating.
Apr 16 20:09:25.341582 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21.
Apr 16 20:09:25.353859 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'.
Apr 16 20:09:25.625888 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'.
Apr 16 20:09:25.934150 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu.
Apr 16 20:09:26.032209 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Apr 16 20:09:26.197490 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 16 20:09:26.305682 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:26.415122 osdx ubnt-cfgd[665229]: inactive
Apr 16 20:09:26.440475 osdx INFO[665235]: FRR daemons did not change
Apr 16 20:09:26.481583 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 16 20:09:26.537103 osdx WARNING[665304]: No supported link modes on interface eth0
Apr 16 20:09:26.539856 osdx modulelauncher[665304]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Apr 16 20:09:26.539872 osdx modulelauncher[665304]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Apr 16 20:09:26.541671 osdx modulelauncher[665304]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Apr 16 20:09:26.541705 osdx modulelauncher[665304]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Apr 16 20:09:26.581052 osdx cfgd[1833]: [514199]Completed change to active configuration
Apr 16 20:09:26.595905 osdx OSDxCLI[514199]: User 'admin' committed the configuration.
Apr 16 20:09:26.613422 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.
Apr 16 20:09:26.810069 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Apr 16 20:09:26.895985 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'.
Apr 16 20:09:28.233503 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu.
Apr 16 20:09:28.319380 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Apr 16 20:09:28.516085 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Apr 16 20:09:28.643705 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'.
Apr 16 20:09:28.741425 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'.
Apr 16 20:09:28.878603 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 2a6755e80e5a7dfe3ab6d39f6dcd5b2d794b6bb929280948ea0ff2d21715f66e'.
Apr 16 20:09:28.945692 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'.
Apr 16 20:09:29.043692 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'.
Apr 16 20:09:29.113958 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Apr 16 20:09:29.224078 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Apr 16 20:09:29.295956 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:29.392055 osdx ubnt-cfgd[665404]: inactive
Apr 16 20:09:29.414037 osdx INFO[665412]: FRR daemons did not change
Apr 16 20:09:29.426588 osdx ca-certificates[665428]: Updating certificates in /etc/ssl/certs...
Apr 16 20:09:29.970571 osdx ubnt-cfgd[666440]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Apr 16 20:09:29.979559 osdx ca-certificates[666446]: 1 added, 0 removed; done.
Apr 16 20:09:29.983298 osdx ca-certificates[666452]: Running hooks in /etc/ca-certificates/update.d...
Apr 16 20:09:29.986621 osdx ca-certificates[666454]: done.
Apr 16 20:09:30.106015 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Apr 16 20:09:30.107610 osdx cfgd[1833]: [514199]Completed change to active configuration
Apr 16 20:09:30.109887 osdx OSDxCLI[514199]: User 'admin' committed the configuration.
Apr 16 20:09:30.130398 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] dnscrypt-proxy 2.0.45
Apr 16 20:09:30.130649 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Network connectivity detected
Apr 16 20:09:30.130741 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Dropping privileges
Apr 16 20:09:30.132907 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Network connectivity detected
Apr 16 20:09:30.132985 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 16 20:09:30.132985 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 16 20:09:30.132985 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH]
Apr 16 20:09:30.132985 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Firefox workaround initialized
Apr 16 20:09:30.132985 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpbxu9ouuq]
Apr 16 20:09:30.136211 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.
Apr 16 20:09:30.165835 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] [RD] OK (DoH) - rtt: 11ms
Apr 16 20:09:30.165835 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] Server with the lowest initial latency: RD (rtt: 11ms)
Apr 16 20:09:30.165835 osdx dnscrypt-proxy[666513]: [2026-04-16 20:09:30] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.215.168.65/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name DUT0
set service dns proxy static DUT0 protocol dns-over-https hash 28a76dcc9dedd34bd2d97ba423cb2dd1a349e5c588d301fc7b5b9e9540f6a982
set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0
set service dns proxy static DUT0 protocol dns-over-https host port 3000
set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64
set service dns static host-name dns.dut0 inet 10.215.168.64
set service ssh
set system certificate trust 'running://CA.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:

(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$

Show output

Apr 16 20:09:25.338558 osdx systemd-journald[1990]: Runtime Journal (/run/log/journal/17bae56bc8a84fa2b76db35ef5e507be) is 948.0K, max 6.4M, 5.5M free.
Apr 16 20:09:25.339060 osdx systemd-journald[1990]: Received client request to rotate journal, rotating.
Apr 16 20:09:25.339103 osdx systemd-journald[1990]: Vacuuming done, freed 0B of archived journals from /run/log/journal/17bae56bc8a84fa2b76db35ef5e507be.
Apr 16 20:09:25.349447 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system journal clear'.
Apr 16 20:09:25.635306 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system coredump delete all'.
Apr 16 20:09:26.970112 osdx OSDxCLI[110216]: User 'admin' entered the configuration menu.
Apr 16 20:09:27.096517 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'.
Apr 16 20:09:27.153315 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 16 20:09:27.246448 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service ssh'.
Apr 16 20:09:27.318366 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:27.410982 osdx ubnt-cfgd[429239]: inactive
Apr 16 20:09:27.485225 osdx INFO[429260]: FRR daemons did not change
Apr 16 20:09:27.566982 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 16 20:09:27.632243 osdx WARNING[429329]: No supported link modes on interface eth0
Apr 16 20:09:27.633701 osdx modulelauncher[429329]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Apr 16 20:09:27.633803 osdx modulelauncher[429329]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Apr 16 20:09:27.635075 osdx modulelauncher[429329]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Apr 16 20:09:27.635161 osdx modulelauncher[429329]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Apr 16 20:09:27.731314 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Apr 16 20:09:27.743428 osdx sshd[429395]: Server listening on 0.0.0.0 port 22.
Apr 16 20:09:27.743458 osdx sshd[429395]: Server listening on :: port 22.
Apr 16 20:09:27.743567 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Apr 16 20:09:27.745899 osdx cfgd[1626]: [110216]Completed change to active configuration
Apr 16 20:09:27.758715 osdx OSDxCLI[110216]: User 'admin' committed the configuration.
Apr 16 20:09:27.788115 osdx OSDxCLI[110216]: User 'admin' left the configuration menu.
Apr 16 20:09:27.968187 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'.
Apr 16 20:09:30.379629 osdx OSDxCLI[110216]: User 'admin' entered the configuration menu.
Apr 16 20:09:30.528483 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'.
Apr 16 20:09:30.612415 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'.
Apr 16 20:09:30.778691 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'.
Apr 16 20:09:30.858822 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'.
Apr 16 20:09:30.986602 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'.
Apr 16 20:09:31.100257 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'.
Apr 16 20:09:31.222481 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 28a76dcc9dedd34bd2d97ba423cb2dd1a349e5c588d301fc7b5b9e9540f6a982'.
Apr 16 20:09:31.342247 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:31.460489 osdx ubnt-cfgd[429443]: inactive
Apr 16 20:09:31.482525 osdx INFO[429451]: FRR daemons did not change
Apr 16 20:09:31.496626 osdx ca-certificates[429467]: Updating certificates in /etc/ssl/certs...
Apr 16 20:09:32.099495 osdx ubnt-cfgd[430479]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Apr 16 20:09:32.109809 osdx ca-certificates[430484]: 1 added, 0 removed; done.
Apr 16 20:09:32.112922 osdx ca-certificates[430491]: Running hooks in /etc/ca-certificates/update.d...
Apr 16 20:09:32.115852 osdx ca-certificates[430493]: done.
Apr 16 20:09:32.191444 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Apr 16 20:09:32.193357 osdx cfgd[1626]: [110216]Completed change to active configuration
Apr 16 20:09:32.195804 osdx OSDxCLI[110216]: User 'admin' committed the configuration.
Apr 16 20:09:32.217200 osdx OSDxCLI[110216]: User 'admin' left the configuration menu.
Apr 16 20:09:32.244957 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] dnscrypt-proxy 2.0.45
Apr 16 20:09:32.245326 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] Network connectivity detected
Apr 16 20:09:32.245326 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] Dropping privileges
Apr 16 20:09:32.247213 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] Network connectivity detected
Apr 16 20:09:32.247265 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 16 20:09:32.247265 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 16 20:09:32.247265 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] Firefox workaround initialized
Apr 16 20:09:32.247265 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpfgpbe2f9]
Apr 16 20:09:32.354956 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] [DUT0] OK (DoH) - rtt: 20ms
Apr 16 20:09:32.354956 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 20ms)
Apr 16 20:09:32.354956 osdx dnscrypt-proxy[430500]: [2026-04-16 20:09:32] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:

teldat.com has address 10.11.12.13

Server With Upstream DoH With Stamp

Description

Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 2a6755e80e5a7dfe3ab6d39f6dcd5b2d794b6bb929280948ea0ff2d21715f66e at DUT0 and expect this output:

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server cert file 'running://dns.dut0.crt'
set service dns proxy server cert key 'running://dns.dut0.key'
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAqZ1XoDlp9_jq2059tzVsteUtruSkoCUjqD_LSFxX2bgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'
set service dns resolver local
set service dns static host-name teldat.com inet 10.11.12.13
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$

Show output

Apr 16 20:09:40.353661 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 3.2M, max 13.8M, 10.6M free.
Apr 16 20:09:40.355597 osdx systemd-journald[126917]: Received client request to rotate journal, rotating.
Apr 16 20:09:40.355650 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21.
Apr 16 20:09:40.365608 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'.
Apr 16 20:09:40.634017 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'.
Apr 16 20:09:40.923609 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu.
Apr 16 20:09:41.031251 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Apr 16 20:09:41.127935 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 16 20:09:41.223717 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:41.308548 osdx ubnt-cfgd[668243]: inactive
Apr 16 20:09:41.336368 osdx INFO[668249]: FRR daemons did not change
Apr 16 20:09:41.379615 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 16 20:09:41.438563 osdx WARNING[668318]: No supported link modes on interface eth0
Apr 16 20:09:41.440707 osdx modulelauncher[668318]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Apr 16 20:09:41.440723 osdx modulelauncher[668318]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Apr 16 20:09:41.444577 osdx modulelauncher[668318]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Apr 16 20:09:41.444590 osdx modulelauncher[668318]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Apr 16 20:09:41.500279 osdx cfgd[1833]: [514199]Completed change to active configuration
Apr 16 20:09:41.516574 osdx OSDxCLI[514199]: User 'admin' committed the configuration.
Apr 16 20:09:41.592324 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.
Apr 16 20:09:41.703643 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Apr 16 20:09:41.773956 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'.
Apr 16 20:09:43.185823 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 2a6755e80e5a7dfe3ab6d39f6dcd5b2d794b6bb929280948ea0ff2d21715f66e'.
Apr 16 20:09:43.362852 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu.
Apr 16 20:09:43.466457 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Apr 16 20:09:43.614963 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Apr 16 20:09:43.700029 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAqZ1XoDlp9_jq2059tzVsteUtruSkoCUjqD_LSFxX2bgpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'.
Apr 16 20:09:43.774699 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'.
Apr 16 20:09:43.898437 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'.
Apr 16 20:09:43.992077 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Apr 16 20:09:44.107489 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Apr 16 20:09:44.191712 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Apr 16 20:09:44.327037 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:44.423047 osdx ubnt-cfgd[668420]: inactive
Apr 16 20:09:44.449230 osdx INFO[668428]: FRR daemons did not change
Apr 16 20:09:44.464600 osdx ca-certificates[668444]: Updating certificates in /etc/ssl/certs...
Apr 16 20:09:45.067783 osdx ubnt-cfgd[669456]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Apr 16 20:09:45.076084 osdx ca-certificates[669462]: 1 added, 0 removed; done.
Apr 16 20:09:45.079186 osdx ca-certificates[669468]: Running hooks in /etc/ca-certificates/update.d...
Apr 16 20:09:45.082180 osdx ca-certificates[669470]: done.
Apr 16 20:09:45.199982 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Apr 16 20:09:45.201482 osdx cfgd[1833]: [514199]Completed change to active configuration
Apr 16 20:09:45.203595 osdx OSDxCLI[514199]: User 'admin' committed the configuration.
Apr 16 20:09:45.227228 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] dnscrypt-proxy 2.0.45
Apr 16 20:09:45.227643 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Network connectivity detected
Apr 16 20:09:45.227643 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Dropping privileges
Apr 16 20:09:45.230409 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Network connectivity detected
Apr 16 20:09:45.230551 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 16 20:09:45.230551 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 16 20:09:45.230551 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH]
Apr 16 20:09:45.230551 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Firefox workaround initialized
Apr 16 20:09:45.230551 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp0dl9rbxl]
Apr 16 20:09:45.233616 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.
Apr 16 20:09:45.259398 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] [RD] OK (DoH) - rtt: 10ms
Apr 16 20:09:45.259398 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] Server with the lowest initial latency: RD (rtt: 10ms)
Apr 16 20:09:45.259398 osdx dnscrypt-proxy[669529]: [2026-04-16 20:09:45] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 28a76dcc9dedd34bd2d97ba423cb2dd1a349e5c588d301fc7b5b9e9540f6a982 at DUT1 and expect this output:

Step 5: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.215.168.65/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name DUT0
set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKKdtzJ3t00vS2XukI8st0aNJ5cWI0wH8e1uelUD2qYINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'
set service dns static host-name dns.dut0 inet 10.215.168.64
set service ssh
set system certificate trust 'running://CA.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:

(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$

Show output

Apr 16 20:09:40.277111 osdx systemd-journald[1990]: Runtime Journal (/run/log/journal/17bae56bc8a84fa2b76db35ef5e507be) is 928.0K, max 6.4M, 5.5M free.
Apr 16 20:09:40.281044 osdx systemd-journald[1990]: Received client request to rotate journal, rotating.
Apr 16 20:09:40.281121 osdx systemd-journald[1990]: Vacuuming done, freed 0B of archived journals from /run/log/journal/17bae56bc8a84fa2b76db35ef5e507be.
Apr 16 20:09:40.287026 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system journal clear'.
Apr 16 20:09:40.549045 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system coredump delete all'.
Apr 16 20:09:41.787703 osdx OSDxCLI[110216]: User 'admin' entered the configuration menu.
Apr 16 20:09:41.926341 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'.
Apr 16 20:09:41.994227 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 16 20:09:42.107880 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service ssh'.
Apr 16 20:09:42.207588 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:42.306041 osdx ubnt-cfgd[432218]: inactive
Apr 16 20:09:42.406428 osdx INFO[432239]: FRR daemons did not change
Apr 16 20:09:42.441007 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 16 20:09:42.502449 osdx WARNING[432308]: No supported link modes on interface eth0
Apr 16 20:09:42.504658 osdx modulelauncher[432308]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Apr 16 20:09:42.504752 osdx modulelauncher[432308]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Apr 16 20:09:42.506545 osdx modulelauncher[432308]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Apr 16 20:09:42.506555 osdx modulelauncher[432308]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Apr 16 20:09:42.625904 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Apr 16 20:09:42.641046 osdx sshd[432374]: Server listening on 0.0.0.0 port 22.
Apr 16 20:09:42.641117 osdx sshd[432374]: Server listening on :: port 22.
Apr 16 20:09:42.641222 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Apr 16 20:09:42.642660 osdx cfgd[1626]: [110216]Completed change to active configuration
Apr 16 20:09:42.654958 osdx OSDxCLI[110216]: User 'admin' committed the configuration.
Apr 16 20:09:42.691875 osdx OSDxCLI[110216]: User 'admin' left the configuration menu.
Apr 16 20:09:42.890027 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'.
Apr 16 20:09:45.387418 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 28a76dcc9dedd34bd2d97ba423cb2dd1a349e5c588d301fc7b5b9e9540f6a982'.
Apr 16 20:09:45.558020 osdx OSDxCLI[110216]: User 'admin' entered the configuration menu.
Apr 16 20:09:45.664555 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'.
Apr 16 20:09:45.787638 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'.
Apr 16 20:09:45.855683 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'.
Apr 16 20:09:45.931092 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKKdtzJ3t00vS2XukI8st0aNJ5cWI0wH8e1uelUD2qYINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'.
Apr 16 20:09:46.041084 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:46.121036 osdx ubnt-cfgd[432423]: inactive
Apr 16 20:09:46.144969 osdx INFO[432431]: FRR daemons did not change
Apr 16 20:09:46.158345 osdx ca-certificates[432446]: Updating certificates in /etc/ssl/certs...
Apr 16 20:09:46.727818 osdx ubnt-cfgd[433459]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Apr 16 20:09:46.738339 osdx ca-certificates[433465]: 1 added, 0 removed; done.
Apr 16 20:09:46.742083 osdx ca-certificates[433471]: Running hooks in /etc/ca-certificates/update.d...
Apr 16 20:09:46.746208 osdx ca-certificates[433473]: done.
Apr 16 20:09:46.829652 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Apr 16 20:09:46.832066 osdx cfgd[1626]: [110216]Completed change to active configuration
Apr 16 20:09:46.834919 osdx OSDxCLI[110216]: User 'admin' committed the configuration.
Apr 16 20:09:46.851268 osdx OSDxCLI[110216]: User 'admin' left the configuration menu.
Apr 16 20:09:46.852601 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:46] [NOTICE] dnscrypt-proxy 2.0.45
Apr 16 20:09:46.852831 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:46] [NOTICE] Network connectivity detected
Apr 16 20:09:46.852930 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:46] [NOTICE] Dropping privileges
Apr 16 20:09:46.855002 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:46] [NOTICE] Network connectivity detected
Apr 16 20:09:46.855322 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:46] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 16 20:09:46.855322 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:46] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 16 20:09:46.855322 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:46] [NOTICE] Firefox workaround initialized
Apr 16 20:09:46.855322 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:46] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpkafahmsn]
Apr 16 20:09:47.020418 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system journal show | cat'.
Apr 16 20:09:47.741731 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:47] [NOTICE] [DUT0] OK (DoH) - rtt: 15ms
Apr 16 20:09:47.741731 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:47] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 15ms)
Apr 16 20:09:47.741731 osdx dnscrypt-proxy[433480]: [2026-04-16 20:09:47] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:

teldat.com has address 10.11.12.13

Server With Upstream DNSCrypt

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server.

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server cert file 'running://dns.dut0.crt'
set service dns proxy server cert key 'running://dns.dut0.key'
set service dns proxy server-name RD
set service dns proxy static RD protocol dns-crypt ip 10.215.168.1
set service dns proxy static RD protocol dns-crypt port 8443
set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns
set service dns proxy static RD protocol dns-crypt provider public-key '2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b'
set service dns resolver local
set service dns static host-name teldat.com inet 10.11.12.13
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$

Show output

Apr 16 20:09:56.385215 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.8M, max 13.8M, 11.9M free.
Apr 16 20:09:56.387821 osdx systemd-journald[126917]: Received client request to rotate journal, rotating.
Apr 16 20:09:56.387892 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21.
Apr 16 20:09:56.403659 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'.
Apr 16 20:09:56.656726 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'.
Apr 16 20:09:56.982523 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu.
Apr 16 20:09:57.128227 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Apr 16 20:09:57.181265 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 16 20:09:57.302183 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:57.359710 osdx ubnt-cfgd[671260]: inactive
Apr 16 20:09:57.382672 osdx INFO[671266]: FRR daemons did not change
Apr 16 20:09:57.415259 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 16 20:09:57.465953 osdx WARNING[671335]: No supported link modes on interface eth0
Apr 16 20:09:57.467724 osdx modulelauncher[671335]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Apr 16 20:09:57.467736 osdx modulelauncher[671335]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Apr 16 20:09:57.468913 osdx modulelauncher[671335]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Apr 16 20:09:57.468925 osdx modulelauncher[671335]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Apr 16 20:09:57.515728 osdx cfgd[1833]: [514199]Completed change to active configuration
Apr 16 20:09:57.530403 osdx OSDxCLI[514199]: User 'admin' committed the configuration.
Apr 16 20:09:57.559977 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.
Apr 16 20:09:57.737060 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Apr 16 20:09:57.808977 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'.
Apr 16 20:09:59.201589 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Apr 16 20:09:59.345213 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu.
Apr 16 20:09:59.409283 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Apr 16 20:09:59.507818 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Apr 16 20:09:59.575592 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'.
Apr 16 20:09:59.712114 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'.
Apr 16 20:09:59.776000 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'.
Apr 16 20:09:59.872592 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b'.
Apr 16 20:09:59.935751 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Apr 16 20:10:00.043552 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'.
Apr 16 20:10:00.148586 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'.
Apr 16 20:10:00.224522 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Apr 16 20:10:00.349386 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:10:00.420385 osdx ubnt-cfgd[671438]: inactive
Apr 16 20:10:00.441776 osdx INFO[671446]: FRR daemons did not change
Apr 16 20:10:00.457539 osdx ca-certificates[671462]: Updating certificates in /etc/ssl/certs...
Apr 16 20:10:01.027491 osdx ubnt-cfgd[672474]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Apr 16 20:10:01.035247 osdx ca-certificates[672479]: 1 added, 0 removed; done.
Apr 16 20:10:01.038083 osdx ca-certificates[672486]: Running hooks in /etc/ca-certificates/update.d...
Apr 16 20:10:01.040811 osdx ca-certificates[672488]: done.
Apr 16 20:10:01.167604 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Apr 16 20:10:01.169018 osdx cfgd[1833]: [514199]Completed change to active configuration
Apr 16 20:10:01.171255 osdx OSDxCLI[514199]: User 'admin' committed the configuration.
Apr 16 20:10:01.186620 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.
Apr 16 20:10:01.187019 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] dnscrypt-proxy 2.0.45
Apr 16 20:10:01.187156 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Network connectivity detected
Apr 16 20:10:01.187310 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Dropping privileges
Apr 16 20:10:01.189184 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Network connectivity detected
Apr 16 20:10:01.189225 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 16 20:10:01.189225 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 16 20:10:01.189225 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH]
Apr 16 20:10:01.189276 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Firefox workaround initialized
Apr 16 20:10:01.189276 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpwgu91bu7]
Apr 16 20:10:01.189832 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Apr 16 20:10:01.189869 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Apr 16 20:10:01.189869 osdx dnscrypt-proxy[672547]: [2026-04-16 20:10:01] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 4: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.215.168.65/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name DUT0
set service dns proxy static DUT0 protocol dns-over-https hash 28a76dcc9dedd34bd2d97ba423cb2dd1a349e5c588d301fc7b5b9e9540f6a982
set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0
set service dns proxy static DUT0 protocol dns-over-https host port 3000
set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64
set service dns static host-name dns.dut0 inet 10.215.168.64
set service ssh
set system certificate trust 'running://CA.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:

(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$

Show output

Apr 16 20:09:56.391621 osdx systemd-journald[1990]: Runtime Journal (/run/log/journal/17bae56bc8a84fa2b76db35ef5e507be) is 952.0K, max 6.4M, 5.5M free.
Apr 16 20:09:56.394831 osdx systemd-journald[1990]: Received client request to rotate journal, rotating.
Apr 16 20:09:56.394899 osdx systemd-journald[1990]: Vacuuming done, freed 0B of archived journals from /run/log/journal/17bae56bc8a84fa2b76db35ef5e507be.
Apr 16 20:09:56.402688 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system journal clear'.
Apr 16 20:09:56.628722 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system coredump delete all'.
Apr 16 20:09:57.858007 osdx OSDxCLI[110216]: User 'admin' entered the configuration menu.
Apr 16 20:09:57.956421 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'.
Apr 16 20:09:58.033028 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 16 20:09:58.158529 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service ssh'.
Apr 16 20:09:58.247499 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:09:58.389901 osdx ubnt-cfgd[435204]: inactive
Apr 16 20:09:58.482692 osdx INFO[435225]: FRR daemons did not change
Apr 16 20:09:58.518962 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 16 20:09:58.570362 osdx WARNING[435294]: No supported link modes on interface eth0
Apr 16 20:09:58.571957 osdx modulelauncher[435294]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Apr 16 20:09:58.571973 osdx modulelauncher[435294]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Apr 16 20:09:58.573259 osdx modulelauncher[435294]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Apr 16 20:09:58.573269 osdx modulelauncher[435294]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Apr 16 20:09:58.743300 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Apr 16 20:09:58.760825 osdx sshd[435360]: Server listening on 0.0.0.0 port 22.
Apr 16 20:09:58.760859 osdx sshd[435360]: Server listening on :: port 22.
Apr 16 20:09:58.761000 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Apr 16 20:09:58.762279 osdx cfgd[1626]: [110216]Completed change to active configuration
Apr 16 20:09:58.778684 osdx OSDxCLI[110216]: User 'admin' committed the configuration.
Apr 16 20:09:58.809779 osdx OSDxCLI[110216]: User 'admin' left the configuration menu.
Apr 16 20:09:58.968346 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'.
Apr 16 20:10:01.459304 osdx OSDxCLI[110216]: User 'admin' entered the configuration menu.
Apr 16 20:10:01.578226 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'.
Apr 16 20:10:01.717801 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'.
Apr 16 20:10:01.823834 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'.
Apr 16 20:10:01.931156 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'.
Apr 16 20:10:01.991156 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'.
Apr 16 20:10:02.105992 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'.
Apr 16 20:10:02.202736 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 28a76dcc9dedd34bd2d97ba423cb2dd1a349e5c588d301fc7b5b9e9540f6a982'.
Apr 16 20:10:02.323405 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:10:02.422072 osdx ubnt-cfgd[435411]: inactive
Apr 16 20:10:02.451022 osdx INFO[435419]: FRR daemons did not change
Apr 16 20:10:02.471164 osdx ca-certificates[435435]: Updating certificates in /etc/ssl/certs...
Apr 16 20:10:03.077554 osdx ubnt-cfgd[436447]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Apr 16 20:10:03.087325 osdx ca-certificates[436452]: 1 added, 0 removed; done.
Apr 16 20:10:03.090457 osdx ca-certificates[436459]: Running hooks in /etc/ca-certificates/update.d...
Apr 16 20:10:03.094195 osdx ca-certificates[436461]: done.
Apr 16 20:10:03.179414 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Apr 16 20:10:03.183355 osdx cfgd[1626]: [110216]Completed change to active configuration
Apr 16 20:10:03.186396 osdx OSDxCLI[110216]: User 'admin' committed the configuration.
Apr 16 20:10:03.202902 osdx OSDxCLI[110216]: User 'admin' left the configuration menu.
Apr 16 20:10:03.210211 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] dnscrypt-proxy 2.0.45
Apr 16 20:10:03.210410 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] Network connectivity detected
Apr 16 20:10:03.210522 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] Dropping privileges
Apr 16 20:10:03.212534 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] Network connectivity detected
Apr 16 20:10:03.212648 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 16 20:10:03.212648 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 16 20:10:03.212648 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] Firefox workaround initialized
Apr 16 20:10:03.212648 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp9hzbvfh2]
Apr 16 20:10:03.331942 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] [DUT0] OK (DoH) - rtt: 27ms
Apr 16 20:10:03.332134 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 27ms)
Apr 16 20:10:03.332134 osdx dnscrypt-proxy[436468]: [2026-04-16 20:10:03] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:

teldat.com has address 10.11.12.13

Server With Upstream DNSCrypt With Stamp

Description

Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).

Scenario

Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:

Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b ip 10.215.168.1 port 8443 at DUT0 and expect this output:

Step 3: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server cert file 'running://dns.dut0.crt'
set service dns proxy server cert key 'running://dns.dut0.key'
set service dns proxy server-name RD
set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzICy8GhKtTI3hPbTGg6ufFdHbHEzK5DnKBWvJwonCr0CbGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'
set service dns resolver local
set service dns static host-name teldat.com inet 10.11.12.13
set system certificate trust 'running://remote.dns-server.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:

(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$

Show output

Apr 16 20:10:09.000195 osdx systemd-timedated[664824]: Changed local time to Thu 2026-04-16 20:10:09 UTC
Apr 16 20:10:09.001864 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'set date 2026-04-16 20:10:09'.
Apr 16 20:10:09.002300 osdx systemd-journald[126917]: Time jumped backwards, rotating.
Apr 16 20:10:09.358453 osdx systemd-journald[126917]: Runtime Journal (/run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21) is 1.8M, max 13.8M, 11.9M free.
Apr 16 20:10:09.362310 osdx systemd-journald[126917]: Received client request to rotate journal, rotating.
Apr 16 20:10:09.362392 osdx systemd-journald[126917]: Vacuuming done, freed 0B of archived journals from /run/log/journal/a3fecc5be5e949c7a083b0adeea4bb21.
Apr 16 20:10:09.369350 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal clear'.
Apr 16 20:10:09.582366 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system coredump delete all'.
Apr 16 20:10:09.807132 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu.
Apr 16 20:10:09.896727 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'.
Apr 16 20:10:09.980899 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 16 20:10:10.101921 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:10:10.171158 osdx ubnt-cfgd[674283]: inactive
Apr 16 20:10:10.197580 osdx INFO[674289]: FRR daemons did not change
Apr 16 20:10:10.226304 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 16 20:10:10.275222 osdx WARNING[674359]: No supported link modes on interface eth0
Apr 16 20:10:10.276871 osdx modulelauncher[674359]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Apr 16 20:10:10.276884 osdx modulelauncher[674359]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Apr 16 20:10:10.278140 osdx modulelauncher[674359]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Apr 16 20:10:10.278150 osdx modulelauncher[674359]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Apr 16 20:10:10.318470 osdx cfgd[1833]: [514199]Completed change to active configuration
Apr 16 20:10:10.333521 osdx OSDxCLI[514199]: User 'admin' committed the configuration.
Apr 16 20:10:10.359175 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.
Apr 16 20:10:10.523684 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
Apr 16 20:10:10.600301 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'system journal show | cat'.
Apr 16 20:10:11.876340 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'.
Apr 16 20:10:11.980339 osdx OSDxCLI[514199]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 2c:bc:1a:12:ad:4c:8d:e1:3d:b4:c6:83:ab:9f:15:d1:db:1c:4c:ca:e4:39:ca:05:6b:c9:c2:89:c2:af:40:9b ip 10.215.168.1 port 8443'.
Apr 16 20:10:12.138679 osdx OSDxCLI[514199]: User 'admin' entered the configuration menu.
Apr 16 20:10:12.198798 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'.
Apr 16 20:10:12.288687 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'.
Apr 16 20:10:12.365870 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzICy8GhKtTI3hPbTGg6ufFdHbHEzK5DnKBWvJwonCr0CbGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'.
Apr 16 20:10:12.467277 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns resolver local'.
Apr 16 20:10:12.530319 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'.
Apr 16 20:10:12.647468 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'.
Apr 16 20:10:12.729475 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'.
Apr 16 20:10:12.840502 osdx OSDxCLI[514199]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:10:12.905193 osdx ubnt-cfgd[674462]: inactive
Apr 16 20:10:12.925733 osdx INFO[674470]: FRR daemons did not change
Apr 16 20:10:12.939177 osdx ca-certificates[674486]: Updating certificates in /etc/ssl/certs...
Apr 16 20:10:13.581771 osdx ubnt-cfgd[675498]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Apr 16 20:10:13.591725 osdx ca-certificates[675503]: 1 added, 0 removed; done.
Apr 16 20:10:13.595122 osdx ca-certificates[675510]: Running hooks in /etc/ca-certificates/update.d...
Apr 16 20:10:13.598934 osdx ca-certificates[675512]: done.
Apr 16 20:10:13.727069 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Apr 16 20:10:13.729127 osdx cfgd[1833]: [514199]Completed change to active configuration
Apr 16 20:10:13.732594 osdx OSDxCLI[514199]: User 'admin' committed the configuration.
Apr 16 20:10:13.751701 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] dnscrypt-proxy 2.0.45
Apr 16 20:10:13.751947 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Network connectivity detected
Apr 16 20:10:13.752070 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Dropping privileges
Apr 16 20:10:13.754374 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Network connectivity detected
Apr 16 20:10:13.754477 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 16 20:10:13.754477 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 16 20:10:13.754477 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH]
Apr 16 20:10:13.754477 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Firefox workaround initialized
Apr 16 20:10:13.754477 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp7putqaa2]
Apr 16 20:10:13.755655 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms
Apr 16 20:10:13.755655 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms)
Apr 16 20:10:13.755655 osdx dnscrypt-proxy[675571]: [2026-04-16 20:10:13] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Apr 16 20:10:13.759624 osdx OSDxCLI[514199]: User 'admin' left the configuration menu.

Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 28a76dcc9dedd34bd2d97ba423cb2dd1a349e5c588d301fc7b5b9e9540f6a982 at DUT1 and expect this output:

Step 6: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.215.168.65/24
set protocols static route 0.0.0.0/0 next-hop 10.215.168.1
set service dns proxy server-name DUT0
set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKKdtzJ3t00vS2XukI8st0aNJ5cWI0wH8e1uelUD2qYINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'
set service dns static host-name dns.dut0 inet 10.215.168.64
set service ssh
set system certificate trust 'running://CA.crt'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:

(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$

Show output

Apr 16 20:10:10.302247 osdx systemd-journald[1990]: Runtime Journal (/run/log/journal/17bae56bc8a84fa2b76db35ef5e507be) is 952.0K, max 6.4M, 5.5M free.
Apr 16 20:10:10.303216 osdx systemd-journald[1990]: Received client request to rotate journal, rotating.
Apr 16 20:10:10.303260 osdx systemd-journald[1990]: Vacuuming done, freed 0B of archived journals from /run/log/journal/17bae56bc8a84fa2b76db35ef5e507be.
Apr 16 20:10:10.312092 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system journal clear'.
Apr 16 20:10:10.519636 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'system coredump delete all'.
Apr 16 20:10:11.667454 osdx OSDxCLI[110216]: User 'admin' entered the configuration menu.
Apr 16 20:10:11.797669 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'.
Apr 16 20:10:11.870475 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'.
Apr 16 20:10:11.951246 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service ssh'.
Apr 16 20:10:12.085649 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:10:12.170334 osdx ubnt-cfgd[438186]: inactive
Apr 16 20:10:12.254189 osdx INFO[438207]: FRR daemons did not change
Apr 16 20:10:12.287216 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0
Apr 16 20:10:12.357950 osdx WARNING[438276]: No supported link modes on interface eth0
Apr 16 20:10:12.359485 osdx modulelauncher[438276]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on
Apr 16 20:10:12.359499 osdx modulelauncher[438276]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76.
Apr 16 20:10:12.360804 osdx modulelauncher[438276]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --
Apr 16 20:10:12.360814 osdx modulelauncher[438276]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75.
Apr 16 20:10:12.455631 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Apr 16 20:10:12.470206 osdx sshd[438342]: Server listening on 0.0.0.0 port 22.
Apr 16 20:10:12.470230 osdx sshd[438342]: Server listening on :: port 22.
Apr 16 20:10:12.470344 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Apr 16 20:10:12.472611 osdx cfgd[1626]: [110216]Completed change to active configuration
Apr 16 20:10:12.488220 osdx OSDxCLI[110216]: User 'admin' committed the configuration.
Apr 16 20:10:12.510159 osdx OSDxCLI[110216]: User 'admin' left the configuration menu.
Apr 16 20:10:12.659302 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'.
Apr 16 20:10:15.051512 osdx OSDxCLI[110216]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 28a76dcc9dedd34bd2d97ba423cb2dd1a349e5c588d301fc7b5b9e9540f6a982'.
Apr 16 20:10:15.225485 osdx OSDxCLI[110216]: User 'admin' entered the configuration menu.
Apr 16 20:10:15.336646 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'.
Apr 16 20:10:15.406340 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'.
Apr 16 20:10:15.575929 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'.
Apr 16 20:10:15.677377 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgKKdtzJ3t00vS2XukI8st0aNJ5cWI0wH8e1uelUD2qYINZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'.
Apr 16 20:10:15.825404 osdx OSDxCLI[110216]: User 'admin' added a new cfg line: 'show working'.
Apr 16 20:10:15.902560 osdx ubnt-cfgd[438390]: inactive
Apr 16 20:10:15.929830 osdx INFO[438398]: FRR daemons did not change
Apr 16 20:10:15.945683 osdx ca-certificates[438414]: Updating certificates in /etc/ssl/certs...
Apr 16 20:10:16.588906 osdx ubnt-cfgd[439426]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
Apr 16 20:10:16.598956 osdx ca-certificates[439431]: 1 added, 0 removed; done.
Apr 16 20:10:16.602472 osdx ca-certificates[439438]: Running hooks in /etc/ca-certificates/update.d...
Apr 16 20:10:16.606087 osdx ca-certificates[439440]: done.
Apr 16 20:10:16.696062 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy.
Apr 16 20:10:16.699870 osdx cfgd[1626]: [110216]Completed change to active configuration
Apr 16 20:10:16.702145 osdx OSDxCLI[110216]: User 'admin' committed the configuration.
Apr 16 20:10:16.722722 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] dnscrypt-proxy 2.0.45
Apr 16 20:10:16.723256 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] Network connectivity detected
Apr 16 20:10:16.723256 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] Dropping privileges
Apr 16 20:10:16.725717 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] Network connectivity detected
Apr 16 20:10:16.725810 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] Now listening to 127.0.0.1:53 [UDP]
Apr 16 20:10:16.725810 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] Now listening to 127.0.0.1:53 [TCP]
Apr 16 20:10:16.725810 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] Firefox workaround initialized
Apr 16 20:10:16.725810 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp12w2owuj]
Apr 16 20:10:16.731355 osdx OSDxCLI[110216]: User 'admin' left the configuration menu.
Apr 16 20:10:16.825937 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] [DUT0] OK (DoH) - rtt: 13ms
Apr 16 20:10:16.825937 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 13ms)
Apr 16 20:10:16.825937 osdx dnscrypt-proxy[439447]: [2026-04-16 20:10:16] [NOTICE] dnscrypt-proxy is ready - live servers: 1

Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:

teldat.com has address 10.11.12.13