Static
Validation test suite using one of the DNS options available in an upstream server
DNS-over-HTTPS Server
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 7a29a0b37ebaaede8a38645ac1ef0ebcf68cb59eec2cc37db7bb962a1ff5c77b set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:36:13.298959 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.9M, max 13.8M, 11.8M free. Jun 04 19:36:13.299537 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:36:13.299581 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:36:13.311463 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:36:13.523264 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:36:13.740246 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:13.829545 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:36:13.894595 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:36:14.030196 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:14.105545 osdx ubnt-cfgd[974137]: inactive Jun 04 19:36:14.124158 osdx INFO[974143]: FRR daemons did not change Jun 04 19:36:14.159500 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:36:14.204375 osdx WARNING[974212]: No supported link modes on interface eth0 Jun 04 19:36:14.205942 osdx modulelauncher[974212]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:36:14.205957 osdx modulelauncher[974212]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:36:14.207154 osdx modulelauncher[974212]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:36:14.207163 osdx modulelauncher[974212]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:36:14.241134 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:14.255797 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:14.271897 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:14.491995 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:36:14.572951 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:36:14.710635 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:14.768311 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 04 19:36:14.872265 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:36:14.942984 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 04 19:36:15.042872 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 04 19:36:15.142554 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 7a29a0b37ebaaede8a38645ac1ef0ebcf68cb59eec2cc37db7bb962a1ff5c77b'. Jun 04 19:36:15.200159 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:36:15.332501 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:15.438537 osdx ubnt-cfgd[974309]: inactive Jun 04 19:36:15.465596 osdx INFO[974317]: FRR daemons did not change Jun 04 19:36:15.492767 osdx ca-certificates[974333]: Updating certificates in /etc/ssl/certs... Jun 04 19:36:16.027050 osdx ubnt-cfgd[975345]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:36:16.035841 osdx ca-certificates[975349]: 1 added, 0 removed; done. Jun 04 19:36:16.039505 osdx ca-certificates[975357]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:36:16.043034 osdx ca-certificates[975359]: done. Jun 04 19:36:16.143923 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:36:16.145302 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:16.148255 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:16.171606 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:36:16.171831 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] Network connectivity detected Jun 04 19:36:16.171900 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] Dropping privileges Jun 04 19:36:16.174326 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] Network connectivity detected Jun 04 19:36:16.174377 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:36:16.174377 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:36:16.174377 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] Firefox workaround initialized Jun 04 19:36:16.174377 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] Loading the set of cloaking rules from [/tmp/tmphpqhsqxn] Jun 04 19:36:16.175073 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:16.335052 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:36:16.404385 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] [RD] OK (DoH) - rtt: 103ms Jun 04 19:36:16.404385 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] Server with the lowest initial latency: RD (rtt: 103ms) Jun 04 19:36:16.404385 osdx dnscrypt-proxy[975415]: [2026-06-04 19:36:16] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server Trusting Fails
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without setting up certificates.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used.
Step 3: Run command system journal show | cat at DUT0 and check if output contains the following tokens:
: x509: certificate signed by unknown authorityShow output
Jun 04 19:36:23.000241 osdx systemd-timedated[973784]: Changed local time to Thu 2026-06-04 19:36:23 UTC Jun 04 19:36:23.001347 osdx systemd-journald[172397]: Time jumped backwards, rotating. Jun 04 19:36:23.002330 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'set date 2026-06-04 19:36:23'. Jun 04 19:36:23.359068 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.8M, max 13.8M, 11.9M free. Jun 04 19:36:23.361324 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:36:23.361383 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:36:23.370752 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:36:23.588495 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:36:23.828990 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:23.916327 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:36:23.996683 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:36:24.108941 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:24.182091 osdx ubnt-cfgd[977156]: inactive Jun 04 19:36:24.201349 osdx INFO[977162]: FRR daemons did not change Jun 04 19:36:24.237323 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:36:24.283950 osdx WARNING[977231]: No supported link modes on interface eth0 Jun 04 19:36:24.285296 osdx modulelauncher[977231]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:36:24.285315 osdx modulelauncher[977231]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:36:24.286748 osdx modulelauncher[977231]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:36:24.286755 osdx modulelauncher[977231]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:36:24.325076 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:24.336026 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:24.350906 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:24.493595 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:36:24.565963 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:36:24.715325 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:24.770514 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:36:24.901202 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:24.961452 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:25.023839 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:25.222576 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:25.293293 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:36:25.399654 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 04 19:36:25.464840 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 04 19:36:25.554714 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:36:25.618576 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show changes'. Jun 04 19:36:25.750454 osdx ubnt-cfgd[977335]: inactive Jun 04 19:36:25.770487 osdx INFO[977341]: FRR daemons did not change Jun 04 19:36:25.881733 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:36:25.883098 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:25.885475 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:25.911023 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:36:25.911220 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] Network connectivity detected Jun 04 19:36:25.911274 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] Dropping privileges Jun 04 19:36:25.913521 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] Network connectivity detected Jun 04 19:36:25.913552 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:36:25.913552 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:36:25.913580 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] Firefox workaround initialized Jun 04 19:36:25.913580 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpo03ehsft] Jun 04 19:36:25.915490 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:25.937116 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [ERROR] Get "https://remote.dns/dns-query?dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAAAAAFAAMABCNbdPtuZsZymXDg6CXRQpy": x509: certificate signed by unknown authority Jun 04 19:36:25.937116 osdx dnscrypt-proxy[977399]: [2026-06-04 19:36:25] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable
Step 4: Run command show host lookup teldat.com type A at DUT0 and expect this output:
Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: timed out ;; no servers could be reached CLI Error: Command error
Note
The above command attempts to resolve the hostname but fails because the certificate cannot be verified
DNS-over-HTTPS Server Trusting
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream without checking its certificate authority.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Note
The above commands set the network topology to interact with the DNS server
Step 2: Modify the following configuration lines in DUT0 :
set service dns proxy server-name RD set service dns proxy ssl-allow-insecure set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local
Note
The above commands set up the DNS server to be used, we skip certificate validation using set service dns proxy ssl-allow-insecure
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:36:35.291269 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.9M, max 13.8M, 11.9M free. Jun 04 19:36:35.292032 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:36:35.292086 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:36:35.301465 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:36:35.522069 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:36:35.795447 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:35.923448 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:36:35.976028 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:36:36.087857 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:36.146473 osdx ubnt-cfgd[977659]: inactive Jun 04 19:36:36.166378 osdx INFO[977665]: FRR daemons did not change Jun 04 19:36:36.203966 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:36:36.252920 osdx WARNING[977734]: No supported link modes on interface eth0 Jun 04 19:36:36.254729 osdx modulelauncher[977734]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:36:36.254741 osdx modulelauncher[977734]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:36:36.256072 osdx modulelauncher[977734]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:36:36.256081 osdx modulelauncher[977734]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:36:36.291912 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:36.304324 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:36.328878 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:36.514685 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:36:36.598259 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:36:36.767628 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:36.825727 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:36:36.930146 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:36.987507 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:37.060347 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:37.231974 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:37.300415 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:36:37.410985 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 04 19:36:37.473108 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 04 19:36:37.574850 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy ssl-allow-insecure'. Jun 04 19:36:37.638337 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:36:37.738764 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show changes'. Jun 04 19:36:37.794393 osdx ubnt-cfgd[977839]: inactive Jun 04 19:36:37.812282 osdx INFO[977845]: FRR daemons did not change Jun 04 19:36:37.904238 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:36:37.905805 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:37.907783 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:37.924462 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:37] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:36:37.924462 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:37] [NOTICE] Network connectivity detected Jun 04 19:36:37.924462 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:37] [NOTICE] Dropping privileges Jun 04 19:36:37.925729 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:37.927136 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:37] [NOTICE] Network connectivity detected Jun 04 19:36:37.927183 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:37] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:36:37.927183 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:37] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:36:37.927183 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:37] [NOTICE] Firefox workaround initialized Jun 04 19:36:37.927183 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:37] [NOTICE] Loading the set of cloaking rules from [/tmp/tmph52ajfbl] Jun 04 19:36:38.097242 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:38] [NOTICE] [RD] OK (DoH) - rtt: 162ms Jun 04 19:36:38.097242 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:38] [NOTICE] Server with the lowest initial latency: RD (rtt: 162ms) Jun 04 19:36:38.097242 osdx dnscrypt-proxy[977903]: [2026-06-04 19:36:38] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jun 04 19:36:38.108840 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'.
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNS-over-HTTPS Server With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 7a29a0b37ebaaede8a38645ac1ef0ebcf68cb59eec2cc37db7bb962a1ff5c77b at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSB6KaCzfrqu3oo4ZFrB7w689oy1nuwsw323u5YqH_XHewpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSB6KaCzfrqu3oo4ZFrB7w689oy1nuwsw323u5YqH_XHewpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:36:45.313241 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.9M, max 13.8M, 11.9M free. Jun 04 19:36:45.313869 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:36:45.313911 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:36:45.324957 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:36:45.549539 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:36:45.820553 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:45.920005 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:36:45.992459 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:36:46.108427 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:46.168733 osdx ubnt-cfgd[978169]: inactive Jun 04 19:36:46.188188 osdx INFO[978175]: FRR daemons did not change Jun 04 19:36:46.225547 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:36:46.273716 osdx WARNING[978244]: No supported link modes on interface eth0 Jun 04 19:36:46.275413 osdx modulelauncher[978244]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:36:46.275426 osdx modulelauncher[978244]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:36:46.276929 osdx modulelauncher[978244]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:36:46.276938 osdx modulelauncher[978244]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:36:46.312478 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:46.350957 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:46.378340 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:46.536059 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:36:46.612327 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:36:46.771698 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 7a29a0b37ebaaede8a38645ac1ef0ebcf68cb59eec2cc37db7bb962a1ff5c77b'. Jun 04 19:36:46.916965 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:46.978525 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 04 19:36:47.074813 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:36:47.135491 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSB6KaCzfrqu3oo4ZFrB7w689oy1nuwsw323u5YqH_XHewpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Jun 04 19:36:47.227257 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:36:47.292760 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:47.389008 osdx ubnt-cfgd[978342]: inactive Jun 04 19:36:47.410940 osdx INFO[978350]: FRR daemons did not change Jun 04 19:36:47.423962 osdx ca-certificates[978366]: Updating certificates in /etc/ssl/certs... Jun 04 19:36:47.939413 osdx ubnt-cfgd[979378]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:36:47.949918 osdx ca-certificates[979384]: 1 added, 0 removed; done. Jun 04 19:36:47.953771 osdx ca-certificates[979390]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:36:47.956599 osdx ca-certificates[979392]: done. Jun 04 19:36:48.045795 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:36:48.047694 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:48.050141 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:48.065275 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:36:48.065497 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] Network connectivity detected Jun 04 19:36:48.065541 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] Dropping privileges Jun 04 19:36:48.067522 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] Network connectivity detected Jun 04 19:36:48.067574 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:36:48.067574 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:36:48.067574 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] Firefox workaround initialized Jun 04 19:36:48.067574 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] Loading the set of cloaking rules from [/tmp/tmppu3l749t] Jun 04 19:36:48.071751 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:48.197552 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] [RD] OK (DoH) - rtt: 114ms Jun 04 19:36:48.197552 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] Server with the lowest initial latency: RD (rtt: 114ms) Jun 04 19:36:48.197552 osdx dnscrypt-proxy[979448]: [2026-06-04 19:36:48] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 04 19:36:53.320686 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.8M, max 13.8M, 11.9M free. Jun 04 19:36:53.324184 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:36:53.324241 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:36:53.331630 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:36:53.552954 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:36:53.803635 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:53.894372 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:36:53.968146 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:36:54.028945 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:54.122855 osdx ubnt-cfgd[981181]: inactive Jun 04 19:36:54.140830 osdx INFO[981187]: FRR daemons did not change Jun 04 19:36:54.176176 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:36:54.221381 osdx WARNING[981256]: No supported link modes on interface eth0 Jun 04 19:36:54.223146 osdx modulelauncher[981256]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:36:54.223160 osdx modulelauncher[981256]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:36:54.224440 osdx modulelauncher[981256]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:36:54.224451 osdx modulelauncher[981256]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:36:54.262633 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:54.274573 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:54.298959 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:54.442280 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:36:54.512142 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:36:54.621175 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 04 19:36:54.774198 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:36:54.832311 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 04 19:36:54.928636 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:36:54.985884 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Jun 04 19:36:55.096654 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Jun 04 19:36:55.152701 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Jun 04 19:36:55.248107 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b'. Jun 04 19:36:55.296598 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:36:55.405079 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:36:55.469552 osdx ubnt-cfgd[981356]: inactive Jun 04 19:36:55.490568 osdx INFO[981364]: FRR daemons did not change Jun 04 19:36:55.504207 osdx ca-certificates[981380]: Updating certificates in /etc/ssl/certs... Jun 04 19:36:56.019560 osdx ubnt-cfgd[982392]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:36:56.027298 osdx ca-certificates[982397]: 1 added, 0 removed; done. Jun 04 19:36:56.030073 osdx ca-certificates[982404]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:36:56.033527 osdx ca-certificates[982406]: done. Jun 04 19:36:56.136550 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:36:56.137888 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:36:56.140210 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:36:56.165962 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:36:56.166180 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] Network connectivity detected Jun 04 19:36:56.166208 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] Dropping privileges Jun 04 19:36:56.168360 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] Network connectivity detected Jun 04 19:36:56.168422 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:36:56.168422 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:36:56.168422 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] Firefox workaround initialized Jun 04 19:36:56.168422 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpvo2ky61o] Jun 04 19:36:56.168512 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:36:56.169169 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 04 19:36:56.169169 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 04 19:36:56.169169 osdx dnscrypt-proxy[982462]: [2026-06-04 19:36:56] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16
DNSCrypt Server With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHMM-hSlLTAMDVWuEWQNnie27V5gd0O3LghEWcIyDdIrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHMM-hSlLTAMDVWuEWQNnie27V5gd0O3LghEWcIyDdIrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 04 19:37:01.330117 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.8M, max 13.8M, 11.9M free. Jun 04 19:37:01.331150 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:37:01.331199 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:37:01.341334 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:37:01.561088 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:37:01.779866 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:37:01.879899 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:37:01.958188 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:37:02.103603 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:02.227216 osdx ubnt-cfgd[984195]: inactive Jun 04 19:37:02.251417 osdx INFO[984201]: FRR daemons did not change Jun 04 19:37:02.283161 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:37:02.331467 osdx WARNING[984270]: No supported link modes on interface eth0 Jun 04 19:37:02.333265 osdx modulelauncher[984270]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:37:02.333280 osdx modulelauncher[984270]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:37:02.334789 osdx modulelauncher[984270]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:37:02.334798 osdx modulelauncher[984270]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:37:02.377265 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:37:02.392930 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:37:02.414045 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:37:02.556572 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:37:02.627120 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:37:02.734738 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 04 19:37:02.855678 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b ip 10.215.168.1 port 8443'. Jun 04 19:37:02.996725 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:37:03.054832 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 04 19:37:03.149789 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:37:03.220256 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHMM-hSlLTAMDVWuEWQNnie27V5gd0O3LghEWcIyDdIrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Jun 04 19:37:03.309546 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:37:03.390829 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:03.458287 osdx ubnt-cfgd[984370]: inactive Jun 04 19:37:03.480226 osdx INFO[984378]: FRR daemons did not change Jun 04 19:37:03.505188 osdx ca-certificates[984394]: Updating certificates in /etc/ssl/certs... Jun 04 19:37:04.019417 osdx ubnt-cfgd[985406]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:37:04.028787 osdx ca-certificates[985412]: 1 added, 0 removed; done. Jun 04 19:37:04.031610 osdx ca-certificates[985418]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:37:04.034225 osdx ca-certificates[985420]: done. Jun 04 19:37:04.123440 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:37:04.124477 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:37:04.126528 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:37:04.142636 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:37:04.142815 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] Network connectivity detected Jun 04 19:37:04.142872 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] Dropping privileges Jun 04 19:37:04.144922 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] Network connectivity detected Jun 04 19:37:04.144961 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:37:04.144961 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:37:04.144961 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] Firefox workaround initialized Jun 04 19:37:04.144961 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] Loading the set of cloaking rules from [/tmp/tmptvh4p5nu] Jun 04 19:37:04.145628 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 04 19:37:04.145628 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 04 19:37:04.145628 osdx dnscrypt-proxy[985476]: [2026-06-04 19:37:04] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jun 04 19:37:04.154646 osdx OSDxCLI[937600]: User 'admin' left the configuration menu.
Step 5: Run command show host lookup teldat.com type A at DUT0 and check if output contains the following tokens:
teldat.com has address 19.18.17.16Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 19.18.17.16