Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 2f188ce6386e1a21b422ea2145dc5bb65c4e8922988c617cdd6046218cd8885b set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:10:06.275495 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 2.0M, max 13.8M, 11.7M free. May 04 23:10:06.277312 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:10:06.277369 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:10:06.285812 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:10:06.482502 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:10:06.729671 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:06.817176 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:10:06.884755 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:10:06.984761 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:07.044271 osdx ubnt-cfgd[276428]: inactive May 04 23:10:07.064869 osdx INFO[276434]: FRR daemons did not change May 04 23:10:07.097336 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:10:07.140504 osdx WARNING[276503]: No supported link modes on interface eth0 May 04 23:10:07.141818 osdx modulelauncher[276503]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:10:07.141829 osdx modulelauncher[276503]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:10:07.142917 osdx modulelauncher[276503]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:10:07.142924 osdx modulelauncher[276503]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:10:07.178012 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:07.189594 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:07.218513 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:07.360256 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:10:07.424467 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:07.628642 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:07.684816 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 04 23:10:07.780085 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:10:07.841822 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. May 04 23:10:07.930769 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. May 04 23:10:07.985655 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 2f188ce6386e1a21b422ea2145dc5bb65c4e8922988c617cdd6046218cd8885b'. May 04 23:10:08.093936 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:10:08.191992 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:08.250965 osdx ubnt-cfgd[276600]: inactive May 04 23:10:08.273024 osdx INFO[276608]: FRR daemons did not change May 04 23:10:08.286174 osdx ca-certificates[276624]: Updating certificates in /etc/ssl/certs... May 04 23:10:08.791848 osdx ubnt-cfgd[277636]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:10:08.801155 osdx ca-certificates[277642]: 1 added, 0 removed; done. May 04 23:10:08.804760 osdx ca-certificates[277648]: Running hooks in /etc/ca-certificates/update.d... May 04 23:10:08.807736 osdx ca-certificates[277650]: done. May 04 23:10:08.909690 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:10:08.911011 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:08.913377 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:08.931729 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:08.935987 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:08] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:10:08.936185 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:08] [NOTICE] Network connectivity detected May 04 23:10:08.936282 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:08] [NOTICE] Dropping privileges May 04 23:10:08.938255 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:08] [NOTICE] Network connectivity detected May 04 23:10:08.938302 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:08] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:10:08.938302 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:08] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:10:08.938302 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:08] [NOTICE] Firefox workaround initialized May 04 23:10:08.938302 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:08] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpax9j4ykv] May 04 23:10:09.082263 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:09.359560 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:09] [NOTICE] [RD] OK (DoH) - rtt: 401ms May 04 23:10:09.359560 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:09] [NOTICE] Server with the lowest initial latency: RD (rtt: 401ms) May 04 23:10:09.359560 osdx dnscrypt-proxy[277706]: [2026-05-04 23:10:09] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
May 04 23:10:16.287169 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.8M, max 13.8M, 11.9M free. May 04 23:10:16.287749 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:10:16.287795 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:10:16.296594 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:10:16.500556 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:10:16.780478 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:16.857943 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:10:16.931467 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:10:16.997731 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:17.088183 osdx ubnt-cfgd[279446]: inactive May 04 23:10:17.106220 osdx INFO[279452]: FRR daemons did not change May 04 23:10:17.131398 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:10:17.171655 osdx WARNING[279521]: No supported link modes on interface eth0 May 04 23:10:17.172888 osdx modulelauncher[279521]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:10:17.172898 osdx modulelauncher[279521]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:10:17.174028 osdx modulelauncher[279521]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:10:17.174035 osdx modulelauncher[279521]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:10:17.207102 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:17.217769 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:17.232640 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:17.373110 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:10:17.436579 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:17.607484 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:17.662945 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:10:17.767047 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:17.814443 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:17.867139 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:18.027075 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:18.082506 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:10:18.183395 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. May 04 23:10:18.233570 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. May 04 23:10:18.323248 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:10:18.377960 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show changes'. May 04 23:10:18.476365 osdx ubnt-cfgd[279625]: inactive May 04 23:10:18.492667 osdx INFO[279631]: FRR daemons did not change May 04 23:10:18.587716 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:10:18.588874 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:18.590989 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:18.606827 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:18.607712 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:10:18.607948 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] Network connectivity detected May 04 23:10:18.608121 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] Dropping privileges May 04 23:10:18.611007 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] Network connectivity detected May 04 23:10:18.611093 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:10:18.611093 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:10:18.611093 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] Firefox workaround initialized May 04 23:10:18.611093 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp9cfhzfwo] May 04 23:10:18.636836 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABAgXRX2vJUV7y6lewn65gzi": x509: certificate signed by unknown authority May 04 23:10:18.636836 osdx dnscrypt-proxy[279689]: [2026-05-04 23:10:18] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:10:27.283771 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.8M, max 13.8M, 11.9M free. May 04 23:10:27.287132 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:10:27.287198 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:10:27.293951 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:10:27.507240 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:10:27.741533 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:27.820969 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:10:27.894873 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:10:27.951689 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:28.040930 osdx ubnt-cfgd[279949]: inactive May 04 23:10:28.058529 osdx INFO[279955]: FRR daemons did not change May 04 23:10:28.083127 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:10:28.125931 osdx WARNING[280024]: No supported link modes on interface eth0 May 04 23:10:28.127227 osdx modulelauncher[280024]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:10:28.127239 osdx modulelauncher[280024]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:10:28.128330 osdx modulelauncher[280024]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:10:28.128336 osdx modulelauncher[280024]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:10:28.160682 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:28.171215 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:28.187574 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:28.330877 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:10:28.394897 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:28.563902 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:28.618311 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:10:28.769338 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:28.818271 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:28.878098 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:29.032427 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:29.088446 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:10:29.189329 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. May 04 23:10:29.241093 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. May 04 23:10:29.330215 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. May 04 23:10:29.381782 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:10:29.479209 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show changes'. May 04 23:10:29.533491 osdx ubnt-cfgd[280129]: inactive May 04 23:10:29.549827 osdx INFO[280135]: FRR daemons did not change May 04 23:10:29.659442 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:10:29.660604 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:29.662672 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:29.676883 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:29.680084 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:29] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:10:29.680216 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:29] [NOTICE] Network connectivity detected May 04 23:10:29.680352 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:29] [NOTICE] Dropping privileges May 04 23:10:29.682180 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:29] [NOTICE] Network connectivity detected May 04 23:10:29.682218 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:10:29.682218 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:10:29.682218 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:29] [NOTICE] Firefox workaround initialized May 04 23:10:29.682218 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmph8unjgli] May 04 23:10:29.826711 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:30.092072 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:30] [NOTICE] [RD] OK (DoH) - rtt: 403ms May 04 23:10:30.092072 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:30] [NOTICE] Server with the lowest initial latency: RD (rtt: 403ms) May 04 23:10:30.092072 osdx dnscrypt-proxy[280193]: [2026-05-04 23:10:30] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 2f188ce6386e1a21b422ea2145dc5bb65c4e8922988c617cdd6046218cd8885b at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAvGIzmOG4aIbQi6iFF3Fu2XE6JIpiMYXzdYEYhjNiIWwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAvGIzmOG4aIbQi6iFF3Fu2XE6JIpiMYXzdYEYhjNiIWwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:10:36.283478 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.8M, max 13.8M, 11.9M free. May 04 23:10:36.284475 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:10:36.284519 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:10:36.292394 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:10:36.488375 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:10:36.748180 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:36.832112 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:10:36.894517 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:10:36.995867 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:37.051098 osdx ubnt-cfgd[280459]: inactive May 04 23:10:37.068660 osdx INFO[280465]: FRR daemons did not change May 04 23:10:37.096484 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:10:37.135565 osdx WARNING[280534]: No supported link modes on interface eth0 May 04 23:10:37.136862 osdx modulelauncher[280534]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:10:37.136872 osdx modulelauncher[280534]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:10:37.137963 osdx modulelauncher[280534]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:10:37.137975 osdx modulelauncher[280534]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:10:37.170192 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:37.181399 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:37.195424 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:37.333259 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:10:37.400733 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:37.530981 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 2f188ce6386e1a21b422ea2145dc5bb65c4e8922988c617cdd6046218cd8885b'. May 04 23:10:37.663442 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:37.718806 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 04 23:10:37.813333 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:10:37.872223 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAvGIzmOG4aIbQi6iFF3Fu2XE6JIpiMYXzdYEYhjNiIWwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. May 04 23:10:37.958179 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:10:38.029800 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:38.113099 osdx ubnt-cfgd[280632]: inactive May 04 23:10:38.133505 osdx INFO[280640]: FRR daemons did not change May 04 23:10:38.145043 osdx ca-certificates[280656]: Updating certificates in /etc/ssl/certs... May 04 23:10:38.665013 osdx ubnt-cfgd[281668]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:10:38.673442 osdx ca-certificates[281674]: 1 added, 0 removed; done. May 04 23:10:38.677066 osdx ca-certificates[281680]: Running hooks in /etc/ca-certificates/update.d... May 04 23:10:38.680573 osdx ca-certificates[281682]: done. May 04 23:10:38.776848 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:10:38.779185 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:38.781472 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:38.803103 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:38] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:10:38.803299 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:38] [NOTICE] Network connectivity detected May 04 23:10:38.803342 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:38] [NOTICE] Dropping privileges May 04 23:10:38.805189 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:38] [NOTICE] Network connectivity detected May 04 23:10:38.805232 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:38] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:10:38.805232 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:38] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:10:38.805232 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:38] [NOTICE] Firefox workaround initialized May 04 23:10:38.805293 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:38] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp78gz_53z] May 04 23:10:38.807444 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:38.954653 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:39.103556 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:39] [NOTICE] [RD] OK (DoH) - rtt: 282ms May 04 23:10:39.103556 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:39] [NOTICE] Server with the lowest initial latency: RD (rtt: 282ms) May 04 23:10:39.103556 osdx dnscrypt-proxy[281738]: [2026-05-04 23:10:39] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
May 04 23:10:45.286499 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.8M, max 13.8M, 11.9M free. May 04 23:10:45.287919 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:10:45.287963 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:10:45.295612 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:10:45.494632 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:10:45.705074 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:45.797305 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:10:45.867753 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:10:45.982057 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:46.040808 osdx ubnt-cfgd[283476]: inactive May 04 23:10:46.063016 osdx INFO[283482]: FRR daemons did not change May 04 23:10:46.091959 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:10:46.137426 osdx WARNING[283551]: No supported link modes on interface eth0 May 04 23:10:46.138746 osdx modulelauncher[283551]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:10:46.138757 osdx modulelauncher[283551]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:10:46.139851 osdx modulelauncher[283551]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:10:46.139857 osdx modulelauncher[283551]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:10:46.176209 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:46.190049 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:46.213958 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:46.358767 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:10:46.425823 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:46.592763 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. May 04 23:10:46.722170 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:46.776405 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 04 23:10:46.874446 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:10:46.937295 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. May 04 23:10:47.026799 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. May 04 23:10:47.079485 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. May 04 23:10:47.176637 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df'. May 04 23:10:47.223443 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:10:47.334308 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:47.393575 osdx ubnt-cfgd[283651]: inactive May 04 23:10:47.414312 osdx INFO[283659]: FRR daemons did not change May 04 23:10:47.426854 osdx ca-certificates[283675]: Updating certificates in /etc/ssl/certs... May 04 23:10:47.946333 osdx ubnt-cfgd[284687]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:10:47.955010 osdx ca-certificates[284693]: 1 added, 0 removed; done. May 04 23:10:47.958215 osdx ca-certificates[284699]: Running hooks in /etc/ca-certificates/update.d... May 04 23:10:47.960887 osdx ca-certificates[284701]: done. May 04 23:10:48.116273 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:10:48.117443 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:48.119522 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:48.134282 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:48.143262 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:10:48.143512 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] Network connectivity detected May 04 23:10:48.143541 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] Dropping privileges May 04 23:10:48.145986 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] Network connectivity detected May 04 23:10:48.146051 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:10:48.146051 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:10:48.146051 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] Firefox workaround initialized May 04 23:10:48.146051 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpxwie7yi_] May 04 23:10:48.146722 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms May 04 23:10:48.146756 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) May 04 23:10:48.146756 osdx dnscrypt-proxy[284757]: [2026-05-04 23:10:48] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF-0wrhn628NWk3ZbAoNJQXMBlhJcE-YayEqnmntck_fGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF-0wrhn628NWk3ZbAoNJQXMBlhJcE-YayEqnmntck_fGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
May 04 23:10:53.278650 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.8M, max 13.8M, 11.9M free. May 04 23:10:53.279262 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:10:53.279305 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:10:53.288755 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:10:53.479413 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:10:53.718074 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:53.807131 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:10:53.880836 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:10:53.941629 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:54.030221 osdx ubnt-cfgd[286490]: inactive May 04 23:10:54.048735 osdx INFO[286496]: FRR daemons did not change May 04 23:10:54.079177 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:10:54.121036 osdx WARNING[286565]: No supported link modes on interface eth0 May 04 23:10:54.122338 osdx modulelauncher[286565]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:10:54.122352 osdx modulelauncher[286565]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:10:54.123531 osdx modulelauncher[286565]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:10:54.123539 osdx modulelauncher[286565]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:10:54.156121 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:54.166584 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:54.181585 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:10:54.321592 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:10:54.388364 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:10:54.503618 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. May 04 23:10:54.601983 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df ip 10.215.168.1 port 8443'. May 04 23:10:54.743018 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:10:54.799118 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 04 23:10:54.893580 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:10:54.951456 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF-0wrhn628NWk3ZbAoNJQXMBlhJcE-YayEqnmntck_fGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. May 04 23:10:55.035473 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:10:55.098437 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:10:55.191691 osdx ubnt-cfgd[286665]: inactive May 04 23:10:55.210564 osdx INFO[286673]: FRR daemons did not change May 04 23:10:55.222322 osdx ca-certificates[286689]: Updating certificates in /etc/ssl/certs... May 04 23:10:55.740373 osdx ubnt-cfgd[287701]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:10:55.748296 osdx ca-certificates[287707]: 1 added, 0 removed; done. May 04 23:10:55.751062 osdx ca-certificates[287713]: Running hooks in /etc/ca-certificates/update.d... May 04 23:10:55.753698 osdx ca-certificates[287715]: done. May 04 23:10:55.863491 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:10:55.864620 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:10:55.866607 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:10:55.888428 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:10:55.888646 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] Network connectivity detected May 04 23:10:55.888734 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] Dropping privileges May 04 23:10:55.891210 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] Network connectivity detected May 04 23:10:55.891267 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:10:55.891267 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:10:55.891267 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] Firefox workaround initialized May 04 23:10:55.891267 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpwd3wgfcf] May 04 23:10:55.892026 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms May 04 23:10:55.892026 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) May 04 23:10:55.892026 osdx dnscrypt-proxy[287771]: [2026-05-04 23:10:55] [NOTICE] dnscrypt-proxy is ready - live servers: 1 May 04 23:10:55.935636 osdx OSDxCLI[130064]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16