Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 2f188ce6386e1a21b422ea2145dc5bb65c4e8922988c617cdd6046218cd8885b set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:11:12.319420 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.9M, max 13.8M, 11.9M free. May 04 23:11:12.322384 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:11:12.322440 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:11:12.329169 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:11:12.530949 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:11:12.735757 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:11:12.838077 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:11:12.913370 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:11:13.016289 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:13.078164 osdx ubnt-cfgd[289908]: inactive May 04 23:11:13.096548 osdx INFO[289914]: FRR daemons did not change May 04 23:11:13.126406 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:11:13.176283 osdx WARNING[289983]: No supported link modes on interface eth0 May 04 23:11:13.177736 osdx modulelauncher[289983]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:11:13.177751 osdx modulelauncher[289983]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:11:13.179043 osdx modulelauncher[289983]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:11:13.179052 osdx modulelauncher[289983]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:11:13.222110 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:11:13.235993 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:11:13.254532 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:11:13.417404 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:11:13.481330 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:11:14.561269 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:11:14.617256 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 04 23:11:14.715247 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:11:14.780579 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. May 04 23:11:14.866617 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. May 04 23:11:14.922861 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 2f188ce6386e1a21b422ea2145dc5bb65c4e8922988c617cdd6046218cd8885b'. May 04 23:11:15.010110 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. May 04 23:11:15.062670 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. May 04 23:11:15.153567 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:11:15.240603 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 04 23:11:15.346943 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:15.409775 osdx ubnt-cfgd[290083]: inactive May 04 23:11:15.430530 osdx INFO[290091]: FRR daemons did not change May 04 23:11:15.441904 osdx ca-certificates[290107]: Updating certificates in /etc/ssl/certs... May 04 23:11:15.933609 osdx ubnt-cfgd[291119]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:11:15.941009 osdx ca-certificates[291125]: 1 added, 0 removed; done. May 04 23:11:15.943764 osdx ca-certificates[291131]: Running hooks in /etc/ca-certificates/update.d... May 04 23:11:15.946524 osdx ca-certificates[291133]: done. May 04 23:11:16.054686 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:11:16.056113 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:11:16.060279 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:11:16.081584 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:11:16.090191 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:11:16.090348 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Network connectivity detected May 04 23:11:16.090485 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Dropping privileges May 04 23:11:16.092391 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Network connectivity detected May 04 23:11:16.092415 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:11:16.092415 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:11:16.092449 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] May 04 23:11:16.092449 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Firefox workaround initialized May 04 23:11:16.092449 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp1027clwf] May 04 23:11:16.233583 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:11:16.438705 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] [RD] OK (DoH) - rtt: 329ms May 04 23:11:16.438705 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] Server with the lowest initial latency: RD (rtt: 329ms) May 04 23:11:16.438705 osdx dnscrypt-proxy[291192]: [2026-05-04 23:11:16] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 10121c1d7e249ce26ec576c407bc2ceace8c96b2b00d46db1abf9c96cf9bd1ca set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:11:12.290838 osdx systemd-journald[1804]: Runtime Journal (/run/log/journal/535ba18673ea4b63ad160634860bb768) is 896.0K, max 6.4M, 5.6M free. May 04 23:11:12.294392 osdx systemd-journald[1804]: Received client request to rotate journal, rotating. May 04 23:11:12.294445 osdx systemd-journald[1804]: Vacuuming done, freed 0B of archived journals from /run/log/journal/535ba18673ea4b63ad160634860bb768. May 04 23:11:12.301056 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system journal clear'. May 04 23:11:12.491162 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:11:13.513865 osdx OSDxCLI[461384]: User 'admin' entered the configuration menu. May 04 23:11:13.607197 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. May 04 23:11:13.687324 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:11:13.774815 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service ssh'. May 04 23:11:13.839815 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:13.923841 osdx ubnt-cfgd[489454]: inactive May 04 23:11:14.000585 osdx INFO[489475]: FRR daemons did not change May 04 23:11:14.028187 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:11:14.070677 osdx WARNING[489544]: No supported link modes on interface eth0 May 04 23:11:14.072017 osdx modulelauncher[489544]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:11:14.072029 osdx modulelauncher[489544]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:11:14.073463 osdx modulelauncher[489544]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 04 23:11:14.073472 osdx modulelauncher[489544]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 04 23:11:14.180446 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... May 04 23:11:14.191636 osdx sshd[489610]: Server listening on 0.0.0.0 port 22. May 04 23:11:14.191809 osdx sshd[489610]: Server listening on :: port 22. May 04 23:11:14.191911 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. May 04 23:11:14.193227 osdx cfgd[1440]: [461384]Completed change to active configuration May 04 23:11:14.207197 osdx OSDxCLI[461384]: User 'admin' committed the configuration. May 04 23:11:14.228407 osdx OSDxCLI[461384]: User 'admin' left the configuration menu. May 04 23:11:14.373735 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. May 04 23:11:18.351977 osdx OSDxCLI[461384]: User 'admin' entered the configuration menu. May 04 23:11:18.417085 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. May 04 23:11:18.512848 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. May 04 23:11:18.562483 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. May 04 23:11:18.661210 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. May 04 23:11:18.716417 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. May 04 23:11:18.807317 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. May 04 23:11:18.859646 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 10121c1d7e249ce26ec576c407bc2ceace8c96b2b00d46db1abf9c96cf9bd1ca'. May 04 23:11:18.967418 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:19.038419 osdx ubnt-cfgd[489658]: inactive May 04 23:11:19.060452 osdx INFO[489666]: FRR daemons did not change May 04 23:11:19.075434 osdx ca-certificates[489682]: Updating certificates in /etc/ssl/certs... May 04 23:11:19.538696 osdx ubnt-cfgd[490694]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:11:19.546116 osdx ca-certificates[490700]: 1 added, 0 removed; done. May 04 23:11:19.548988 osdx ca-certificates[490706]: Running hooks in /etc/ca-certificates/update.d... May 04 23:11:19.551821 osdx ca-certificates[490708]: done. May 04 23:11:19.644763 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:11:19.648394 osdx cfgd[1440]: [461384]Completed change to active configuration May 04 23:11:19.652615 osdx OSDxCLI[461384]: User 'admin' committed the configuration. May 04 23:11:19.666322 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:11:19.666551 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] Network connectivity detected May 04 23:11:19.666663 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] Dropping privileges May 04 23:11:19.668646 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] Network connectivity detected May 04 23:11:19.668722 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:11:19.668722 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:11:19.668722 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] Firefox workaround initialized May 04 23:11:19.668722 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpulepmqk0] May 04 23:11:19.685700 osdx OSDxCLI[461384]: User 'admin' left the configuration menu. May 04 23:11:19.753482 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] [DUT0] OK (DoH) - rtt: 14ms May 04 23:11:19.753482 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 14ms) May 04 23:11:19.753482 osdx dnscrypt-proxy[490715]: [2026-05-04 23:11:19] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 2f188ce6386e1a21b422ea2145dc5bb65c4e8922988c617cdd6046218cd8885b at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAvGIzmOG4aIbQi6iFF3Fu2XE6JIpiMYXzdYEYhjNiIWwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAvGIzmOG4aIbQi6iFF3Fu2XE6JIpiMYXzdYEYhjNiIWwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:11:25.283762 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.8M, max 13.8M, 11.9M free. May 04 23:11:25.286356 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:11:25.286417 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:11:25.294620 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:11:25.498549 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:11:25.703352 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:11:25.783262 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:11:25.854959 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:11:25.915597 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:26.006257 osdx ubnt-cfgd[292929]: inactive May 04 23:11:26.026181 osdx INFO[292935]: FRR daemons did not change May 04 23:11:26.054364 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:11:26.097153 osdx WARNING[293004]: No supported link modes on interface eth0 May 04 23:11:26.098647 osdx modulelauncher[293004]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:11:26.098660 osdx modulelauncher[293004]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:11:26.099960 osdx modulelauncher[293004]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:11:26.099971 osdx modulelauncher[293004]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:11:26.138755 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:11:26.150762 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:11:26.178637 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:11:26.467833 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:11:26.533314 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:11:27.621284 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 2f188ce6386e1a21b422ea2145dc5bb65c4e8922988c617cdd6046218cd8885b'. May 04 23:11:27.780049 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:11:27.852567 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 04 23:11:27.957801 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:11:28.040424 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSAvGIzmOG4aIbQi6iFF3Fu2XE6JIpiMYXzdYEYhjNiIWwpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. May 04 23:11:28.150586 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. May 04 23:11:28.201750 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. May 04 23:11:28.294036 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 04 23:11:28.343436 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:11:28.440728 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 04 23:11:28.518767 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:28.612014 osdx ubnt-cfgd[293106]: inactive May 04 23:11:28.632323 osdx INFO[293114]: FRR daemons did not change May 04 23:11:28.644881 osdx ca-certificates[293130]: Updating certificates in /etc/ssl/certs... May 04 23:11:29.142461 osdx ubnt-cfgd[294142]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:11:29.150608 osdx ca-certificates[294148]: 1 added, 0 removed; done. May 04 23:11:29.153397 osdx ca-certificates[294154]: Running hooks in /etc/ca-certificates/update.d... May 04 23:11:29.156058 osdx ca-certificates[294156]: done. May 04 23:11:29.274687 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:11:29.275834 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:11:29.278072 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:11:29.295451 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:11:29.295653 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Network connectivity detected May 04 23:11:29.295743 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Dropping privileges May 04 23:11:29.297805 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Network connectivity detected May 04 23:11:29.297858 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:11:29.297858 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:11:29.297858 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] May 04 23:11:29.297858 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Firefox workaround initialized May 04 23:11:29.297858 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp859ixvmu] May 04 23:11:29.305665 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:11:29.483725 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:11:29.550933 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] [RD] OK (DoH) - rtt: 238ms May 04 23:11:29.550933 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] Server with the lowest initial latency: RD (rtt: 238ms) May 04 23:11:29.550933 osdx dnscrypt-proxy[294215]: [2026-05-04 23:11:29] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 10121c1d7e249ce26ec576c407bc2ceace8c96b2b00d46db1abf9c96cf9bd1ca at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEBIcHX4knOJuxXbEB7ws6s6MlrKwDUbbGr-cls-b0coNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEBIcHX4knOJuxXbEB7ws6s6MlrKwDUbbGr-cls-b0coNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:11:25.259390 osdx systemd-journald[1804]: Runtime Journal (/run/log/journal/535ba18673ea4b63ad160634860bb768) is 928.0K, max 6.4M, 5.5M free. May 04 23:11:25.263392 osdx systemd-journald[1804]: Received client request to rotate journal, rotating. May 04 23:11:25.263461 osdx systemd-journald[1804]: Vacuuming done, freed 0B of archived journals from /run/log/journal/535ba18673ea4b63ad160634860bb768. May 04 23:11:25.272379 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system journal clear'. May 04 23:11:25.459856 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:11:26.575737 osdx OSDxCLI[461384]: User 'admin' entered the configuration menu. May 04 23:11:26.671717 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. May 04 23:11:26.742173 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:11:26.827637 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service ssh'. May 04 23:11:26.892620 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:26.987391 osdx ubnt-cfgd[492434]: inactive May 04 23:11:27.054478 osdx INFO[492455]: FRR daemons did not change May 04 23:11:27.087391 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:11:27.128345 osdx WARNING[492524]: No supported link modes on interface eth0 May 04 23:11:27.129602 osdx modulelauncher[492524]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:11:27.129657 osdx modulelauncher[492524]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:11:27.130749 osdx modulelauncher[492524]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 04 23:11:27.130789 osdx modulelauncher[492524]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 04 23:11:27.219828 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... May 04 23:11:27.234574 osdx sshd[492590]: Server listening on 0.0.0.0 port 22. May 04 23:11:27.234600 osdx sshd[492590]: Server listening on :: port 22. May 04 23:11:27.234689 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. May 04 23:11:27.235767 osdx cfgd[1440]: [461384]Completed change to active configuration May 04 23:11:27.248231 osdx OSDxCLI[461384]: User 'admin' committed the configuration. May 04 23:11:27.263085 osdx OSDxCLI[461384]: User 'admin' left the configuration menu. May 04 23:11:27.407595 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. May 04 23:11:31.623293 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 10121c1d7e249ce26ec576c407bc2ceace8c96b2b00d46db1abf9c96cf9bd1ca'. May 04 23:11:31.772562 osdx OSDxCLI[461384]: User 'admin' entered the configuration menu. May 04 23:11:31.847386 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. May 04 23:11:31.952696 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. May 04 23:11:32.006735 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. May 04 23:11:32.103413 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEBIcHX4knOJuxXbEB7ws6s6MlrKwDUbbGr-cls-b0coNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. May 04 23:11:32.164941 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:32.255963 osdx ubnt-cfgd[492640]: inactive May 04 23:11:32.276140 osdx INFO[492648]: FRR daemons did not change May 04 23:11:32.289207 osdx ca-certificates[492664]: Updating certificates in /etc/ssl/certs... May 04 23:11:32.795393 osdx ubnt-cfgd[493676]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:11:32.803913 osdx ca-certificates[493682]: 1 added, 0 removed; done. May 04 23:11:32.806816 osdx ca-certificates[493688]: Running hooks in /etc/ca-certificates/update.d... May 04 23:11:32.810263 osdx ca-certificates[493690]: done. May 04 23:11:32.903968 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:11:32.907176 osdx cfgd[1440]: [461384]Completed change to active configuration May 04 23:11:32.916352 osdx OSDxCLI[461384]: User 'admin' committed the configuration. May 04 23:11:32.933305 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:32] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:11:32.933476 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:32] [NOTICE] Network connectivity detected May 04 23:11:32.933537 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:32] [NOTICE] Dropping privileges May 04 23:11:32.936712 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:32] [NOTICE] Network connectivity detected May 04 23:11:32.936712 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:32] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:11:32.936712 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:32] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:11:32.936712 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:32] [NOTICE] Firefox workaround initialized May 04 23:11:32.936712 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:32] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpnaikbo4_] May 04 23:11:32.936672 osdx OSDxCLI[461384]: User 'admin' left the configuration menu. May 04 23:11:33.097999 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:11:33.295160 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:33] [NOTICE] [DUT0] OK (DoH) - rtt: 284ms May 04 23:11:33.295160 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:33] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 284ms) May 04 23:11:33.295160 osdx dnscrypt-proxy[493697]: [2026-05-04 23:11:33] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
May 04 23:11:41.297256 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.8M, max 13.8M, 11.9M free. May 04 23:11:41.299029 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:11:41.299075 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:11:41.307583 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:11:41.524478 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:11:41.780992 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:11:41.885969 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:11:41.940199 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:11:42.046982 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:42.104027 osdx ubnt-cfgd[295953]: inactive May 04 23:11:42.125498 osdx INFO[295959]: FRR daemons did not change May 04 23:11:42.155097 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:11:42.195527 osdx WARNING[296028]: No supported link modes on interface eth0 May 04 23:11:42.196856 osdx modulelauncher[296028]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:11:42.196868 osdx modulelauncher[296028]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:11:42.198011 osdx modulelauncher[296028]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:11:42.198021 osdx modulelauncher[296028]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:11:42.233627 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:11:42.244434 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:11:42.258805 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:11:42.398263 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:11:42.461676 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:11:43.438326 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. May 04 23:11:43.592702 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:11:43.712473 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 04 23:11:43.829819 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:11:43.912498 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. May 04 23:11:44.006412 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. May 04 23:11:44.064809 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. May 04 23:11:44.160160 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df'. May 04 23:11:44.211079 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:11:44.337804 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. May 04 23:11:44.389275 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. May 04 23:11:44.479729 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 04 23:11:44.542434 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:44.654485 osdx ubnt-cfgd[296131]: inactive May 04 23:11:44.674987 osdx INFO[296139]: FRR daemons did not change May 04 23:11:44.688288 osdx ca-certificates[296155]: Updating certificates in /etc/ssl/certs... May 04 23:11:45.185026 osdx ubnt-cfgd[297167]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:11:45.192545 osdx ca-certificates[297173]: 1 added, 0 removed; done. May 04 23:11:45.195268 osdx ca-certificates[297179]: Running hooks in /etc/ca-certificates/update.d... May 04 23:11:45.197850 osdx ca-certificates[297181]: done. May 04 23:11:45.319364 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:11:45.320850 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:11:45.323115 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:11:45.338715 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:11:45.341344 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:11:45.341489 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Network connectivity detected May 04 23:11:45.341634 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Dropping privileges May 04 23:11:45.343546 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Network connectivity detected May 04 23:11:45.343597 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:11:45.343597 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:11:45.343597 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] May 04 23:11:45.343597 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Firefox workaround initialized May 04 23:11:45.343597 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpseewiuac] May 04 23:11:45.344185 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms May 04 23:11:45.344185 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) May 04 23:11:45.344185 osdx dnscrypt-proxy[297240]: [2026-05-04 23:11:45] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 10121c1d7e249ce26ec576c407bc2ceace8c96b2b00d46db1abf9c96cf9bd1ca set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:11:41.264530 osdx systemd-journald[1804]: Runtime Journal (/run/log/journal/535ba18673ea4b63ad160634860bb768) is 952.0K, max 6.4M, 5.5M free. May 04 23:11:41.268486 osdx systemd-journald[1804]: Received client request to rotate journal, rotating. May 04 23:11:41.268533 osdx systemd-journald[1804]: Vacuuming done, freed 0B of archived journals from /run/log/journal/535ba18673ea4b63ad160634860bb768. May 04 23:11:41.273775 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system journal clear'. May 04 23:11:41.497686 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:11:42.491192 osdx OSDxCLI[461384]: User 'admin' entered the configuration menu. May 04 23:11:42.565815 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. May 04 23:11:42.636661 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:11:42.689254 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service ssh'. May 04 23:11:42.789473 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:42.844512 osdx ubnt-cfgd[495420]: inactive May 04 23:11:42.916428 osdx INFO[495441]: FRR daemons did not change May 04 23:11:42.944480 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:11:42.988577 osdx WARNING[495510]: No supported link modes on interface eth0 May 04 23:11:42.989937 osdx modulelauncher[495510]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:11:42.989948 osdx modulelauncher[495510]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:11:42.991085 osdx modulelauncher[495510]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 04 23:11:42.991092 osdx modulelauncher[495510]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 04 23:11:43.076796 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... May 04 23:11:43.088251 osdx sshd[495576]: Server listening on 0.0.0.0 port 22. May 04 23:11:43.088468 osdx sshd[495576]: Server listening on :: port 22. May 04 23:11:43.088587 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. May 04 23:11:43.090097 osdx cfgd[1440]: [461384]Completed change to active configuration May 04 23:11:43.101655 osdx OSDxCLI[461384]: User 'admin' committed the configuration. May 04 23:11:43.118635 osdx OSDxCLI[461384]: User 'admin' left the configuration menu. May 04 23:11:43.255911 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. May 04 23:11:45.530345 osdx OSDxCLI[461384]: User 'admin' entered the configuration menu. May 04 23:11:45.586589 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. May 04 23:11:45.679663 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. May 04 23:11:45.733821 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. May 04 23:11:45.832960 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. May 04 23:11:45.886349 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. May 04 23:11:45.977933 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. May 04 23:11:46.034205 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 10121c1d7e249ce26ec576c407bc2ceace8c96b2b00d46db1abf9c96cf9bd1ca'. May 04 23:11:46.128521 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:46.189338 osdx ubnt-cfgd[495624]: inactive May 04 23:11:46.228068 osdx INFO[495632]: FRR daemons did not change May 04 23:11:46.241323 osdx ca-certificates[495648]: Updating certificates in /etc/ssl/certs... May 04 23:11:46.721939 osdx ubnt-cfgd[496660]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:11:46.729028 osdx ca-certificates[496665]: 1 added, 0 removed; done. May 04 23:11:46.731905 osdx ca-certificates[496672]: Running hooks in /etc/ca-certificates/update.d... May 04 23:11:46.734710 osdx ca-certificates[496674]: done. May 04 23:11:46.812783 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:11:46.816460 osdx cfgd[1440]: [461384]Completed change to active configuration May 04 23:11:46.818516 osdx OSDxCLI[461384]: User 'admin' committed the configuration. May 04 23:11:46.849481 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:46] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:11:46.849678 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:46] [NOTICE] Network connectivity detected May 04 23:11:46.849725 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:46] [NOTICE] Dropping privileges May 04 23:11:46.851549 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:46] [NOTICE] Network connectivity detected May 04 23:11:46.851589 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:46] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:11:46.851589 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:46] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:11:46.851620 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:46] [NOTICE] Firefox workaround initialized May 04 23:11:46.851620 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:46] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp4lf41v48] May 04 23:11:46.864945 osdx OSDxCLI[461384]: User 'admin' left the configuration menu. May 04 23:11:47.011448 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:11:47.335854 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:47] [NOTICE] [DUT0] OK (DoH) - rtt: 402ms May 04 23:11:47.335854 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:47] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 402ms) May 04 23:11:47.335854 osdx dnscrypt-proxy[496681]: [2026-05-04 23:11:47] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF-0wrhn628NWk3ZbAoNJQXMBlhJcE-YayEqnmntck_fGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF-0wrhn628NWk3ZbAoNJQXMBlhJcE-YayEqnmntck_fGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
May 04 23:11:54.000193 osdx systemd-timedated[256676]: Changed local time to Mon 2026-05-04 23:11:54 UTC May 04 23:11:54.001565 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'set date 2026-05-04 23:11:54'. May 04 23:11:54.001666 osdx systemd-journald[1908]: Time jumped backwards, rotating. May 04 23:11:54.291749 osdx systemd-journald[1908]: Runtime Journal (/run/log/journal/9e2a66651dea45ed982d8152051049c2) is 1.8M, max 13.8M, 11.9M free. May 04 23:11:54.293602 osdx systemd-journald[1908]: Received client request to rotate journal, rotating. May 04 23:11:54.293651 osdx systemd-journald[1908]: Vacuuming done, freed 0B of archived journals from /run/log/journal/9e2a66651dea45ed982d8152051049c2. May 04 23:11:54.301999 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal clear'. May 04 23:11:54.505036 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:11:54.716224 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:11:54.796346 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. May 04 23:11:54.864404 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:11:54.975056 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:55.030440 osdx ubnt-cfgd[298976]: inactive May 04 23:11:55.050730 osdx INFO[298982]: FRR daemons did not change May 04 23:11:55.081608 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:11:55.126272 osdx WARNING[299051]: No supported link modes on interface eth0 May 04 23:11:55.127617 osdx modulelauncher[299051]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:11:55.127631 osdx modulelauncher[299051]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:11:55.128708 osdx modulelauncher[299051]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- May 04 23:11:55.128715 osdx modulelauncher[299051]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. May 04 23:11:55.161038 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:11:55.173739 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:11:55.189323 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:11:55.331438 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. May 04 23:11:55.397260 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:11:56.433138 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. May 04 23:11:56.519451 osdx OSDxCLI[130064]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 5f:b4:c2:b8:67:eb:6f:0d:5a:4d:d9:6c:0a:0d:25:05:cc:06:58:49:70:4f:98:6b:21:2a:9e:69:ed:72:4f:df ip 10.215.168.1 port 8443'. May 04 23:11:56.665242 osdx OSDxCLI[130064]: User 'admin' entered the configuration menu. May 04 23:11:56.722374 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. May 04 23:11:56.824010 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. May 04 23:11:56.893487 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIF-0wrhn628NWk3ZbAoNJQXMBlhJcE-YayEqnmntck_fGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. May 04 23:11:57.003701 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns resolver local'. May 04 23:11:57.061272 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. May 04 23:11:57.152689 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. May 04 23:11:57.203385 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. May 04 23:11:57.312649 osdx OSDxCLI[130064]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:57.374646 osdx ubnt-cfgd[299154]: inactive May 04 23:11:57.393956 osdx INFO[299162]: FRR daemons did not change May 04 23:11:57.407644 osdx ca-certificates[299178]: Updating certificates in /etc/ssl/certs... May 04 23:11:57.925061 osdx ubnt-cfgd[300190]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:11:57.932486 osdx ca-certificates[300195]: 1 added, 0 removed; done. May 04 23:11:57.935188 osdx ca-certificates[300202]: Running hooks in /etc/ca-certificates/update.d... May 04 23:11:57.937735 osdx ca-certificates[300204]: done. May 04 23:11:58.045886 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:11:58.047023 osdx cfgd[1648]: [130064]Completed change to active configuration May 04 23:11:58.048920 osdx OSDxCLI[130064]: User 'admin' committed the configuration. May 04 23:11:58.063702 osdx OSDxCLI[130064]: User 'admin' left the configuration menu. May 04 23:11:58.064381 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:11:58.064533 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Network connectivity detected May 04 23:11:58.064646 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Dropping privileges May 04 23:11:58.066809 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Network connectivity detected May 04 23:11:58.066841 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:11:58.066841 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:11:58.066886 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] May 04 23:11:58.066886 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Firefox workaround initialized May 04 23:11:58.066886 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp5rzqf95y] May 04 23:11:58.067684 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms May 04 23:11:58.067684 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) May 04 23:11:58.067749 osdx dnscrypt-proxy[300263]: [2026-05-04 23:11:58] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 10121c1d7e249ce26ec576c407bc2ceace8c96b2b00d46db1abf9c96cf9bd1ca at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEBIcHX4knOJuxXbEB7ws6s6MlrKwDUbbGr-cls-b0coNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEBIcHX4knOJuxXbEB7ws6s6MlrKwDUbbGr-cls-b0coNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
May 04 23:11:55.263525 osdx systemd-journald[1804]: Runtime Journal (/run/log/journal/535ba18673ea4b63ad160634860bb768) is 952.0K, max 6.4M, 5.5M free. May 04 23:11:55.266400 osdx systemd-journald[1804]: Received client request to rotate journal, rotating. May 04 23:11:55.266449 osdx systemd-journald[1804]: Vacuuming done, freed 0B of archived journals from /run/log/journal/535ba18673ea4b63ad160634860bb768. May 04 23:11:55.274455 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system journal clear'. May 04 23:11:55.467569 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system coredump delete all'. May 04 23:11:56.424279 osdx OSDxCLI[461384]: User 'admin' entered the configuration menu. May 04 23:11:56.503079 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. May 04 23:11:56.583651 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. May 04 23:11:56.636856 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service ssh'. May 04 23:11:56.738855 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:56.802487 osdx ubnt-cfgd[498405]: inactive May 04 23:11:56.880277 osdx INFO[498426]: FRR daemons did not change May 04 23:11:56.910405 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 May 04 23:11:56.954678 osdx WARNING[498495]: No supported link modes on interface eth0 May 04 23:11:56.956059 osdx modulelauncher[498495]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on May 04 23:11:56.956070 osdx modulelauncher[498495]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. May 04 23:11:56.957175 osdx modulelauncher[498495]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- May 04 23:11:56.957182 osdx modulelauncher[498495]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. May 04 23:11:57.058646 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... May 04 23:11:57.073853 osdx sshd[498561]: Server listening on 0.0.0.0 port 22. May 04 23:11:57.073886 osdx sshd[498561]: Server listening on :: port 22. May 04 23:11:57.074001 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. May 04 23:11:57.075638 osdx cfgd[1440]: [461384]Completed change to active configuration May 04 23:11:57.091810 osdx OSDxCLI[461384]: User 'admin' committed the configuration. May 04 23:11:57.110372 osdx OSDxCLI[461384]: User 'admin' left the configuration menu. May 04 23:11:57.252016 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. May 04 23:11:59.239130 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 10121c1d7e249ce26ec576c407bc2ceace8c96b2b00d46db1abf9c96cf9bd1ca'. May 04 23:11:59.369917 osdx OSDxCLI[461384]: User 'admin' entered the configuration menu. May 04 23:11:59.424965 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. May 04 23:11:59.521579 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. May 04 23:11:59.578412 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. May 04 23:11:59.677607 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgEBIcHX4knOJuxXbEB7ws6s6MlrKwDUbbGr-cls-b0coNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. May 04 23:11:59.740980 osdx OSDxCLI[461384]: User 'admin' added a new cfg line: 'show working'. May 04 23:11:59.826899 osdx ubnt-cfgd[498609]: inactive May 04 23:11:59.844797 osdx INFO[498617]: FRR daemons did not change May 04 23:11:59.856698 osdx ca-certificates[498633]: Updating certificates in /etc/ssl/certs... May 04 23:12:00.316821 osdx ubnt-cfgd[499645]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL May 04 23:12:00.324540 osdx ca-certificates[499651]: 1 added, 0 removed; done. May 04 23:12:00.327373 osdx ca-certificates[499657]: Running hooks in /etc/ca-certificates/update.d... May 04 23:12:00.330047 osdx ca-certificates[499659]: done. May 04 23:12:00.394947 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. May 04 23:12:00.396796 osdx cfgd[1440]: [461384]Completed change to active configuration May 04 23:12:00.399589 osdx OSDxCLI[461384]: User 'admin' committed the configuration. May 04 23:12:00.415774 osdx OSDxCLI[461384]: User 'admin' left the configuration menu. May 04 23:12:00.416440 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] dnscrypt-proxy 2.0.45 May 04 23:12:00.416726 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] Network connectivity detected May 04 23:12:00.416790 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] Dropping privileges May 04 23:12:00.419715 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] Network connectivity detected May 04 23:12:00.419715 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] Now listening to 127.0.0.1:53 [UDP] May 04 23:12:00.419942 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] Now listening to 127.0.0.1:53 [TCP] May 04 23:12:00.419942 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] Firefox workaround initialized May 04 23:12:00.419942 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpzop9700e] May 04 23:12:00.557302 osdx OSDxCLI[461384]: User 'admin' executed a new command: 'system journal show | cat'. May 04 23:12:00.790419 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] [DUT0] OK (DoH) - rtt: 300ms May 04 23:12:00.790419 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 300ms) May 04 23:12:00.790419 osdx dnscrypt-proxy[499666]: [2026-05-04 23:12:00] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13