Static Server
Test suite that connects DUT1 over DUT0 using DoH. Meanwhile, DUT0 establishes a connection with the upstream server and forwards DNS queries to it.
Server With Upstream DoH
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-over-https hash 7a29a0b37ebaaede8a38645ac1ef0ebcf68cb59eec2cc37db7bb962a1ff5c77b set service dns proxy static RD protocol dns-over-https host name remote.dns set service dns proxy static RD protocol dns-over-https ip 10.215.168.1 set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:37:23.326414 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.8M, max 13.8M, 11.9M free. Jun 04 19:37:23.330417 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:37:23.330475 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:37:23.336802 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:37:23.540156 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:37:23.811345 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:37:23.898081 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:37:23.976278 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:37:24.091002 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:24.162278 osdx ubnt-cfgd[987609]: inactive Jun 04 19:37:24.182519 osdx INFO[987615]: FRR daemons did not change Jun 04 19:37:24.214416 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:37:24.255537 osdx WARNING[987684]: No supported link modes on interface eth0 Jun 04 19:37:24.257222 osdx modulelauncher[987684]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:37:24.257235 osdx modulelauncher[987684]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:37:24.258939 osdx modulelauncher[987684]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:37:24.258952 osdx modulelauncher[987684]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:37:24.295217 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:37:24.308643 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:37:24.337429 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:37:24.504439 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:37:24.591893 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:37:25.832886 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:37:25.931244 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 04 19:37:25.987529 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:37:26.137850 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https host name remote.dns'. Jun 04 19:37:26.191884 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https ip 10.215.168.1'. Jun 04 19:37:26.301435 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-over-https hash 7a29a0b37ebaaede8a38645ac1ef0ebcf68cb59eec2cc37db7bb962a1ff5c77b'. Jun 04 19:37:26.377995 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 04 19:37:26.430722 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 04 19:37:26.534371 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:37:26.592486 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 04 19:37:26.703992 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:26.779079 osdx ubnt-cfgd[987784]: inactive Jun 04 19:37:26.800731 osdx INFO[987792]: FRR daemons did not change Jun 04 19:37:26.816106 osdx ca-certificates[987808]: Updating certificates in /etc/ssl/certs... Jun 04 19:37:27.349689 osdx ubnt-cfgd[988820]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:37:27.358649 osdx ca-certificates[988826]: 1 added, 0 removed; done. Jun 04 19:37:27.361528 osdx ca-certificates[988832]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:37:27.364341 osdx ca-certificates[988834]: done. Jun 04 19:37:27.486813 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:37:27.488874 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:37:27.492283 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:37:27.518872 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:37:27.519073 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Network connectivity detected Jun 04 19:37:27.519252 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Dropping privileges Jun 04 19:37:27.521592 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Network connectivity detected Jun 04 19:37:27.521659 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:37:27.521659 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:37:27.521659 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 04 19:37:27.521659 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Firefox workaround initialized Jun 04 19:37:27.521659 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpl9d4j7y8] Jun 04 19:37:27.532233 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:37:27.648166 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] [RD] OK (DoH) - rtt: 108ms Jun 04 19:37:27.648166 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] Server with the lowest initial latency: RD (rtt: 108ms) Jun 04 19:37:27.648166 osdx dnscrypt-proxy[988893]: [2026-06-04 19:37:27] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 7ddbf63841fbfa2c1a6d777869fef688c7b0fd2935fa9a5c2d8c7aab9fd6925c set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:37:23.278175 osdx systemd-journald[1992]: Runtime Journal (/run/log/journal/8ce304953175416aa09f22e2dd03a8cc) is 900.0K, max 6.4M, 5.6M free. Jun 04 19:37:23.279346 osdx systemd-journald[1992]: Received client request to rotate journal, rotating. Jun 04 19:37:23.279408 osdx systemd-journald[1992]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8ce304953175416aa09f22e2dd03a8cc. Jun 04 19:37:23.287912 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:37:23.490353 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:37:24.605791 osdx OSDxCLI[675110]: User 'admin' entered the configuration menu. Jun 04 19:37:24.703259 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 04 19:37:24.773663 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:37:24.891885 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service ssh'. Jun 04 19:37:24.978582 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:25.083643 osdx ubnt-cfgd[716300]: inactive Jun 04 19:37:25.171355 osdx INFO[716323]: FRR daemons did not change Jun 04 19:37:25.203037 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:37:25.256675 osdx WARNING[716392]: No supported link modes on interface eth0 Jun 04 19:37:25.258698 osdx modulelauncher[716392]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:37:25.258709 osdx modulelauncher[716392]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:37:25.260400 osdx modulelauncher[716392]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 04 19:37:25.260549 osdx modulelauncher[716392]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 04 19:37:25.367532 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 04 19:37:25.378624 osdx sshd[716458]: Server listening on 0.0.0.0 port 22. Jun 04 19:37:25.378804 osdx sshd[716458]: Server listening on :: port 22. Jun 04 19:37:25.378926 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 04 19:37:25.380955 osdx cfgd[1711]: [675110]Completed change to active configuration Jun 04 19:37:25.393167 osdx OSDxCLI[675110]: User 'admin' committed the configuration. Jun 04 19:37:25.421471 osdx OSDxCLI[675110]: User 'admin' left the configuration menu. Jun 04 19:37:25.599736 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 04 19:37:27.710990 osdx OSDxCLI[675110]: User 'admin' entered the configuration menu. Jun 04 19:37:27.782314 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 04 19:37:27.864144 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 04 19:37:27.933084 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 04 19:37:28.029218 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Jun 04 19:37:28.088326 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Jun 04 19:37:28.194134 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Jun 04 19:37:28.255559 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 7ddbf63841fbfa2c1a6d777869fef688c7b0fd2935fa9a5c2d8c7aab9fd6925c'. Jun 04 19:37:28.383261 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:28.484060 osdx ubnt-cfgd[716506]: inactive Jun 04 19:37:28.506758 osdx INFO[716514]: FRR daemons did not change Jun 04 19:37:28.537773 osdx ca-certificates[716530]: Updating certificates in /etc/ssl/certs... Jun 04 19:37:29.180462 osdx ubnt-cfgd[717542]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:37:29.193409 osdx ca-certificates[717546]: 1 added, 0 removed; done. Jun 04 19:37:29.197214 osdx ca-certificates[717554]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:37:29.201240 osdx ca-certificates[717556]: done. Jun 04 19:37:29.287620 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:37:29.291512 osdx cfgd[1711]: [675110]Completed change to active configuration Jun 04 19:37:29.295611 osdx OSDxCLI[675110]: User 'admin' committed the configuration. Jun 04 19:37:29.324105 osdx OSDxCLI[675110]: User 'admin' left the configuration menu. Jun 04 19:37:29.488536 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:37:29.545903 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:37:29.547386 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] Network connectivity detected Jun 04 19:37:29.547386 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] Dropping privileges Jun 04 19:37:29.548463 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] Network connectivity detected Jun 04 19:37:29.548509 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:37:29.548509 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:37:29.548509 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] Firefox workaround initialized Jun 04 19:37:29.548509 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpdcz87kqk] Jun 04 19:37:29.774025 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] [DUT0] OK (DoH) - rtt: 134ms Jun 04 19:37:29.774025 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 134ms) Jun 04 19:37:29.774025 osdx dnscrypt-proxy[717563]: [2026-06-04 19:37:29] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DoH With Stamp
Description
Configures DUT0 to connect, using DNS-over-HTTPS (DoH) over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 7a29a0b37ebaaede8a38645ac1ef0ebcf68cb59eec2cc37db7bb962a1ff5c77b at DUT0 and expect this output:
Show output
sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSB6KaCzfrqu3oo4ZFrB7w689oy1nuwsw323u5YqH_XHewpyZW1vdGUuZG5zCi9kbnMtcXVlcnk
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSB6KaCzfrqu3oo4ZFrB7w689oy1nuwsw323u5YqH_XHewpyZW1vdGUuZG5zCi9kbnMtcXVlcnk' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:37:38.339471 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.8M, max 13.8M, 11.9M free. Jun 04 19:37:38.341293 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:37:38.341364 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:37:38.351714 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:37:38.569584 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:37:38.803818 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:37:38.901327 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:37:38.962053 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:37:39.065711 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:39.125386 osdx ubnt-cfgd[990626]: inactive Jun 04 19:37:39.146595 osdx INFO[990632]: FRR daemons did not change Jun 04 19:37:39.177261 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:37:39.220325 osdx WARNING[990701]: No supported link modes on interface eth0 Jun 04 19:37:39.221680 osdx modulelauncher[990701]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:37:39.221691 osdx modulelauncher[990701]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:37:39.222814 osdx modulelauncher[990701]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:37:39.222821 osdx modulelauncher[990701]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:37:39.257676 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:37:39.269692 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:37:39.284341 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:37:39.430877 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:37:39.505696 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:37:40.718032 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name remote.dns host-path /dns-query host-port 443 ip 10.215.168.1 hash 7a29a0b37ebaaede8a38645ac1ef0ebcf68cb59eec2cc37db7bb962a1ff5c77b'. Jun 04 19:37:40.867403 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:37:40.952639 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 04 19:37:41.015610 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:37:41.124069 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AgAAAAAAAAAADDEwLjIxNS4xNjguMSB6KaCzfrqu3oo4ZFrB7w689oy1nuwsw323u5YqH_XHewpyZW1vdGUuZG5zCi9kbnMtcXVlcnk'. Jun 04 19:37:41.178144 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 04 19:37:41.285330 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 04 19:37:41.355369 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 04 19:37:41.449363 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:37:41.512829 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 04 19:37:41.624349 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:41.697067 osdx ubnt-cfgd[990803]: inactive Jun 04 19:37:41.721658 osdx INFO[990811]: FRR daemons did not change Jun 04 19:37:41.736037 osdx ca-certificates[990827]: Updating certificates in /etc/ssl/certs... Jun 04 19:37:42.284107 osdx ubnt-cfgd[991839]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:37:42.292134 osdx ca-certificates[991844]: 1 added, 0 removed; done. Jun 04 19:37:42.295062 osdx ca-certificates[991851]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:37:42.297997 osdx ca-certificates[991853]: done. Jun 04 19:37:42.425666 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:37:42.428454 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:37:42.430775 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:37:42.445781 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:37:42.445998 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Network connectivity detected Jun 04 19:37:42.446167 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Dropping privileges Jun 04 19:37:42.448993 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Network connectivity detected Jun 04 19:37:42.449090 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:37:42.449090 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:37:42.449090 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 04 19:37:42.449090 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Firefox workaround initialized Jun 04 19:37:42.449090 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpn56aah47] Jun 04 19:37:42.459687 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:37:42.585723 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] [RD] OK (DoH) - rtt: 116ms Jun 04 19:37:42.585723 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] Server with the lowest initial latency: RD (rtt: 116ms) Jun 04 19:37:42.585723 osdx dnscrypt-proxy[991912]: [2026-06-04 19:37:42] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 4: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 7ddbf63841fbfa2c1a6d777869fef688c7b0fd2935fa9a5c2d8c7aab9fd6925c at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgfdv2OEH7-iwabXd4af72iMew_Sk1-ppcLYx6q5_WklwNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 5: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgfdv2OEH7-iwabXd4af72iMew_Sk1-ppcLYx6q5_WklwNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 6: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:37:38.286099 osdx systemd-journald[1992]: Runtime Journal (/run/log/journal/8ce304953175416aa09f22e2dd03a8cc) is 928.0K, max 6.4M, 5.5M free. Jun 04 19:37:38.288397 osdx systemd-journald[1992]: Received client request to rotate journal, rotating. Jun 04 19:37:38.288454 osdx systemd-journald[1992]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8ce304953175416aa09f22e2dd03a8cc. Jun 04 19:37:38.295530 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:37:38.508403 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:37:39.523438 osdx OSDxCLI[675110]: User 'admin' entered the configuration menu. Jun 04 19:37:39.614514 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 04 19:37:39.686202 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:37:39.772304 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service ssh'. Jun 04 19:37:39.839445 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:39.918010 osdx ubnt-cfgd[719290]: inactive Jun 04 19:37:40.010907 osdx INFO[719311]: FRR daemons did not change Jun 04 19:37:40.040378 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:37:40.086947 osdx WARNING[719380]: No supported link modes on interface eth0 Jun 04 19:37:40.088592 osdx modulelauncher[719380]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:37:40.088601 osdx modulelauncher[719380]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:37:40.089827 osdx modulelauncher[719380]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 04 19:37:40.089834 osdx modulelauncher[719380]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 04 19:37:40.180722 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 04 19:37:40.192908 osdx sshd[719446]: Server listening on 0.0.0.0 port 22. Jun 04 19:37:40.192932 osdx sshd[719446]: Server listening on :: port 22. Jun 04 19:37:40.193025 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 04 19:37:40.194160 osdx cfgd[1711]: [675110]Completed change to active configuration Jun 04 19:37:40.209344 osdx OSDxCLI[675110]: User 'admin' committed the configuration. Jun 04 19:37:40.226350 osdx OSDxCLI[675110]: User 'admin' left the configuration menu. Jun 04 19:37:40.440224 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 04 19:37:42.700723 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 7ddbf63841fbfa2c1a6d777869fef688c7b0fd2935fa9a5c2d8c7aab9fd6925c'. Jun 04 19:37:42.869588 osdx OSDxCLI[675110]: User 'admin' entered the configuration menu. Jun 04 19:37:42.931324 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 04 19:37:43.062423 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 04 19:37:43.130787 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 04 19:37:43.227547 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgfdv2OEH7-iwabXd4af72iMew_Sk1-ppcLYx6q5_WklwNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Jun 04 19:37:43.294119 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:43.386741 osdx ubnt-cfgd[719494]: inactive Jun 04 19:37:43.406882 osdx INFO[719502]: FRR daemons did not change Jun 04 19:37:43.420068 osdx ca-certificates[719517]: Updating certificates in /etc/ssl/certs... Jun 04 19:37:43.940474 osdx ubnt-cfgd[720530]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:37:43.950990 osdx ca-certificates[720536]: 1 added, 0 removed; done. Jun 04 19:37:43.954438 osdx ca-certificates[720542]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:37:43.958059 osdx ca-certificates[720544]: done. Jun 04 19:37:44.032950 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:37:44.035643 osdx cfgd[1711]: [675110]Completed change to active configuration Jun 04 19:37:44.040683 osdx OSDxCLI[675110]: User 'admin' committed the configuration. Jun 04 19:37:44.056158 osdx OSDxCLI[675110]: User 'admin' left the configuration menu. Jun 04 19:37:44.071469 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:37:44.071669 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] Network connectivity detected Jun 04 19:37:44.071771 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] Dropping privileges Jun 04 19:37:44.073695 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] Network connectivity detected Jun 04 19:37:44.073748 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:37:44.073748 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:37:44.073748 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] Firefox workaround initialized Jun 04 19:37:44.073748 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp60aumaqf] Jun 04 19:37:44.225370 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:37:44.270531 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] [DUT0] OK (DoH) - rtt: 120ms Jun 04 19:37:44.270531 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 120ms) Jun 04 19:37:44.270531 osdx dnscrypt-proxy[720551]: [2026-06-04 19:37:44] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 7: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server.
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b
Step 2: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD protocol dns-crypt ip 10.215.168.1 set service dns proxy static RD protocol dns-crypt port 8443 set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns set service dns proxy static RD protocol dns-crypt provider public-key '73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 3: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 04 19:37:53.325243 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.8M, max 13.8M, 11.9M free. Jun 04 19:37:53.326142 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:37:53.326186 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:37:53.336634 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:37:53.562363 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:37:53.786462 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:37:53.868926 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:37:53.949087 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:37:54.057999 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:54.132308 osdx ubnt-cfgd[993647]: inactive Jun 04 19:37:54.152613 osdx INFO[993653]: FRR daemons did not change Jun 04 19:37:54.182048 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:37:54.226655 osdx WARNING[993722]: No supported link modes on interface eth0 Jun 04 19:37:54.228416 osdx modulelauncher[993722]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:37:54.228427 osdx modulelauncher[993722]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:37:54.229928 osdx modulelauncher[993722]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:37:54.229936 osdx modulelauncher[993722]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:37:54.267588 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:37:54.282897 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:37:54.305467 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:37:54.459426 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:37:54.555786 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:37:55.698457 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 04 19:37:55.831527 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:37:55.890714 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 04 19:37:55.986873 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:37:56.052847 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt ip 10.215.168.1'. Jun 04 19:37:56.158545 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt port 8443'. Jun 04 19:37:56.225045 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider name 2.dnscrypt-cert.remote.dns'. Jun 04 19:37:56.329122 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD protocol dns-crypt provider public-key 73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b'. Jun 04 19:37:56.379684 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:37:56.504973 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 04 19:37:56.590403 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 04 19:37:56.642745 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 04 19:37:56.752675 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:56.816673 osdx ubnt-cfgd[993825]: inactive Jun 04 19:37:56.837443 osdx INFO[993833]: FRR daemons did not change Jun 04 19:37:56.850175 osdx ca-certificates[993849]: Updating certificates in /etc/ssl/certs... Jun 04 19:37:57.363736 osdx ubnt-cfgd[994861]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:37:57.371414 osdx ca-certificates[994867]: 1 added, 0 removed; done. Jun 04 19:37:57.374406 osdx ca-certificates[994873]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:37:57.377285 osdx ca-certificates[994875]: done. Jun 04 19:37:57.494341 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:37:57.495607 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:37:57.498054 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:37:57.514001 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:37:57.514197 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Network connectivity detected Jun 04 19:37:57.514329 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Dropping privileges Jun 04 19:37:57.516433 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Network connectivity detected Jun 04 19:37:57.516483 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:37:57.516483 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:37:57.516483 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 04 19:37:57.516483 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Firefox workaround initialized Jun 04 19:37:57.516483 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpldt4r5wo] Jun 04 19:37:57.517090 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 04 19:37:57.517090 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 04 19:37:57.517090 osdx dnscrypt-proxy[994934]: [2026-06-04 19:37:57] [NOTICE] dnscrypt-proxy is ready - live servers: 1 Jun 04 19:37:57.538470 osdx OSDxCLI[937600]: User 'admin' left the configuration menu.
Step 4: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 protocol dns-over-https hash 7ddbf63841fbfa2c1a6d777869fef688c7b0fd2935fa9a5c2d8c7aab9fd6925c set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0 set service dns proxy static DUT0 protocol dns-over-https host port 3000 set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64 set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 5: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:37:53.292202 osdx systemd-journald[1992]: Runtime Journal (/run/log/journal/8ce304953175416aa09f22e2dd03a8cc) is 956.0K, max 6.4M, 5.5M free. Jun 04 19:37:53.295217 osdx systemd-journald[1992]: Received client request to rotate journal, rotating. Jun 04 19:37:53.295279 osdx systemd-journald[1992]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8ce304953175416aa09f22e2dd03a8cc. Jun 04 19:37:53.305534 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:37:53.523900 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:37:54.647061 osdx OSDxCLI[675110]: User 'admin' entered the configuration menu. Jun 04 19:37:54.735154 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 04 19:37:54.810904 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:37:54.902563 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service ssh'. Jun 04 19:37:54.966939 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:55.067525 osdx ubnt-cfgd[722278]: inactive Jun 04 19:37:55.154520 osdx INFO[722299]: FRR daemons did not change Jun 04 19:37:55.187211 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:37:55.235958 osdx WARNING[722368]: No supported link modes on interface eth0 Jun 04 19:37:55.237579 osdx modulelauncher[722368]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:37:55.237663 osdx modulelauncher[722368]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:37:55.239125 osdx modulelauncher[722368]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 04 19:37:55.239190 osdx modulelauncher[722368]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 04 19:37:55.327482 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 04 19:37:55.339000 osdx sshd[722434]: Server listening on 0.0.0.0 port 22. Jun 04 19:37:55.339193 osdx sshd[722434]: Server listening on :: port 22. Jun 04 19:37:55.339316 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 04 19:37:55.340867 osdx cfgd[1711]: [675110]Completed change to active configuration Jun 04 19:37:55.353443 osdx OSDxCLI[675110]: User 'admin' committed the configuration. Jun 04 19:37:55.374927 osdx OSDxCLI[675110]: User 'admin' left the configuration menu. Jun 04 19:37:55.518818 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 04 19:37:57.793835 osdx OSDxCLI[675110]: User 'admin' entered the configuration menu. Jun 04 19:37:57.858987 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 04 19:37:57.947131 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 04 19:37:58.012334 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 04 19:37:58.115269 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host name dns.dut0'. Jun 04 19:37:58.170741 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https host port 3000'. Jun 04 19:37:58.269851 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https ip 10.215.168.64'. Jun 04 19:37:58.328933 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 protocol dns-over-https hash 7ddbf63841fbfa2c1a6d777869fef688c7b0fd2935fa9a5c2d8c7aab9fd6925c'. Jun 04 19:37:58.431861 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:37:58.490261 osdx ubnt-cfgd[722482]: inactive Jun 04 19:37:58.509974 osdx INFO[722490]: FRR daemons did not change Jun 04 19:37:58.522964 osdx ca-certificates[722506]: Updating certificates in /etc/ssl/certs... Jun 04 19:37:59.068971 osdx ubnt-cfgd[723518]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:37:59.078257 osdx ca-certificates[723523]: 1 added, 0 removed; done. Jun 04 19:37:59.082076 osdx ca-certificates[723530]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:37:59.085792 osdx ca-certificates[723532]: done. Jun 04 19:37:59.163662 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:37:59.166898 osdx cfgd[1711]: [675110]Completed change to active configuration Jun 04 19:37:59.169670 osdx OSDxCLI[675110]: User 'admin' committed the configuration. Jun 04 19:37:59.187089 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:37:59.187089 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] Network connectivity detected Jun 04 19:37:59.187089 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] Dropping privileges Jun 04 19:37:59.186894 osdx OSDxCLI[675110]: User 'admin' left the configuration menu. Jun 04 19:37:59.189402 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] Network connectivity detected Jun 04 19:37:59.189402 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:37:59.189402 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:37:59.189402 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] Firefox workaround initialized Jun 04 19:37:59.189402 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] Loading the set of cloaking rules from [/tmp/tmp4jlqn7zn] Jun 04 19:37:59.334990 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:37:59.372968 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] [DUT0] OK (DoH) - rtt: 114ms Jun 04 19:37:59.372968 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 114ms) Jun 04 19:37:59.372968 osdx dnscrypt-proxy[723539]: [2026-06-04 19:37:59] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 6: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13
Server With Upstream DNSCrypt With Stamp
Description
Configures DUT0 to connect, using DNSCrypt over an upstream server (generating a DNS stamp and using it to configure the connection).
Scenario
Step 1: Run command service dns proxy dnscrypt public-key running://dnscrypt.crt at DUT0 and expect this output:
Show output
73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b
Step 2: Run command service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b ip 10.215.168.1 port 8443 at DUT0 and expect this output:
Show output
sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHMM-hSlLTAMDVWuEWQNnie27V5gd0O3LghEWcIyDdIrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z
Step 3: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server cert file 'running://dns.dut0.crt' set service dns proxy server cert key 'running://dns.dut0.key' set service dns proxy server-name RD set service dns proxy static RD stamp 'sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHMM-hSlLTAMDVWuEWQNnie27V5gd0O3LghEWcIyDdIrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z' set service dns resolver local set service dns static host-name teldat.com inet 10.11.12.13 set system certificate trust 'running://remote.dns-server.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | cat at DUT0 and check if output matches the following regular expressions:
(?m)^.*\[RD\] OK \(DNSCrypt\) - rtt: \d+ms$Show output
Jun 04 19:38:07.297748 osdx systemd-journald[172397]: Runtime Journal (/run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4) is 1.8M, max 13.8M, 11.9M free. Jun 04 19:38:07.301137 osdx systemd-journald[172397]: Received client request to rotate journal, rotating. Jun 04 19:38:07.301185 osdx systemd-journald[172397]: Vacuuming done, freed 0B of archived journals from /run/log/journal/d7b8b58d13984d0bb9acdb87ea6c32f4. Jun 04 19:38:07.307611 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:38:07.506242 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:38:07.770416 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:38:07.860053 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.64/24'. Jun 04 19:38:07.944744 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:38:08.046183 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:38:08.150530 osdx ubnt-cfgd[996667]: inactive Jun 04 19:38:08.170888 osdx INFO[996673]: FRR daemons did not change Jun 04 19:38:08.205143 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:38:08.249823 osdx WARNING[996742]: No supported link modes on interface eth0 Jun 04 19:38:08.251146 osdx modulelauncher[996742]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:38:08.251159 osdx modulelauncher[996742]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:38:08.252319 osdx modulelauncher[996742]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off -- Jun 04 19:38:08.252327 osdx modulelauncher[996742]: Command '/sbin/ethtool -s eth0 autoneg on advertise Asym_Pause off Pause off --' returned non-zero exit status 75. Jun 04 19:38:08.286272 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:38:08.297065 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:38:08.311817 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:38:08.455955 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'. Jun 04 19:38:08.524931 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:38:09.582371 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'service dns proxy dnscrypt public-key running://dnscrypt.crt'. Jun 04 19:38:09.683375 osdx OSDxCLI[937600]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-crypt provider-name 2.dnscrypt-cert.remote.dns provider-key 73:0c:fa:14:a5:2d:30:0c:0d:55:ae:11:64:0d:9e:27:b6:ed:5e:60:77:43:b7:2e:08:44:59:c2:32:0d:d2:2b ip 10.215.168.1 port 8443'. Jun 04 19:38:09.833012 osdx OSDxCLI[937600]: User 'admin' entered the configuration menu. Jun 04 19:38:09.892787 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set system certificate trust running://remote.dns-server.crt'. Jun 04 19:38:09.979911 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server-name RD'. Jun 04 19:38:10.042804 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy static RD stamp sdns://AQAAAAAAAAAAETEwLjIxNS4xNjguMTo4NDQzIHMM-hSlLTAMDVWuEWQNnie27V5gd0O3LghEWcIyDdIrGjIuZG5zY3J5cHQtY2VydC5yZW1vdGUuZG5z'. Jun 04 19:38:10.131188 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns resolver local'. Jun 04 19:38:10.187855 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server cert file running://dns.dut0.crt'. Jun 04 19:38:10.283907 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns proxy server cert key running://dns.dut0.key'. Jun 04 19:38:10.337943 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'set service dns static host-name teldat.com inet 10.11.12.13'. Jun 04 19:38:10.449872 osdx OSDxCLI[937600]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:38:10.511353 osdx ubnt-cfgd[996845]: inactive Jun 04 19:38:10.531264 osdx INFO[996853]: FRR daemons did not change Jun 04 19:38:10.548222 osdx ca-certificates[996869]: Updating certificates in /etc/ssl/certs... Jun 04 19:38:11.094677 osdx ubnt-cfgd[997881]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:38:11.102309 osdx ca-certificates[997886]: 1 added, 0 removed; done. Jun 04 19:38:11.105141 osdx ca-certificates[997893]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:38:11.107816 osdx ca-certificates[997895]: done. Jun 04 19:38:11.229526 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:38:11.232147 osdx cfgd[1850]: [937600]Completed change to active configuration Jun 04 19:38:11.234966 osdx OSDxCLI[937600]: User 'admin' committed the configuration. Jun 04 19:38:11.257509 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:38:11.257811 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Network connectivity detected Jun 04 19:38:11.257529 osdx OSDxCLI[937600]: User 'admin' left the configuration menu. Jun 04 19:38:11.257948 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Dropping privileges Jun 04 19:38:11.259766 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Network connectivity detected Jun 04 19:38:11.259810 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:38:11.259810 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:38:11.259810 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Now listening to https://[::]:3000/dns-query [DoH] Jun 04 19:38:11.259858 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Firefox workaround initialized Jun 04 19:38:11.259858 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpoertwmk4] Jun 04 19:38:11.260506 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] [RD] OK (DNSCrypt) - rtt: 0ms Jun 04 19:38:11.260533 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] Server with the lowest initial latency: RD (rtt: 0ms) Jun 04 19:38:11.260533 osdx dnscrypt-proxy[997954]: [2026-06-04 19:38:11] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 5: Run command service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 7ddbf63841fbfa2c1a6d777869fef688c7b0fd2935fa9a5c2d8c7aab9fd6925c at DUT1 and expect this output:
Show output
sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgfdv2OEH7-iwabXd4af72iMew_Sk1-ppcLYx6q5_WklwNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5
Step 6: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address 10.215.168.65/24 set protocols static route 0.0.0.0/0 next-hop 10.215.168.1 set service dns proxy server-name DUT0 set service dns proxy static DUT0 stamp 'sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgfdv2OEH7-iwabXd4af72iMew_Sk1-ppcLYx6q5_WklwNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5' set service dns static host-name dns.dut0 inet 10.215.168.64 set service ssh set system certificate trust 'running://CA.crt' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 7: Run command system journal show | cat at DUT1 and check if output matches the following regular expressions:
(?m)^.*\[DUT0\] OK \(DoH\) - rtt: \d+ms$Show output
Jun 04 19:38:07.276085 osdx systemd-journald[1992]: Runtime Journal (/run/log/journal/8ce304953175416aa09f22e2dd03a8cc) is 952.0K, max 6.4M, 5.5M free. Jun 04 19:38:07.276813 osdx systemd-journald[1992]: Received client request to rotate journal, rotating. Jun 04 19:38:07.276852 osdx systemd-journald[1992]: Vacuuming done, freed 0B of archived journals from /run/log/journal/8ce304953175416aa09f22e2dd03a8cc. Jun 04 19:38:07.285960 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system journal clear'. Jun 04 19:38:07.475314 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system coredump delete all'. Jun 04 19:38:08.563095 osdx OSDxCLI[675110]: User 'admin' entered the configuration menu. Jun 04 19:38:08.644100 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set interfaces ethernet eth0 address 10.215.168.65/24'. Jun 04 19:38:08.714638 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set protocols static route 0.0.0.0/0 next-hop 10.215.168.1'. Jun 04 19:38:08.818042 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service ssh'. Jun 04 19:38:08.887385 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:38:08.975001 osdx ubnt-cfgd[725264]: inactive Jun 04 19:38:09.045879 osdx INFO[725285]: FRR daemons did not change Jun 04 19:38:09.072876 osdx kernel: 8021q: adding VLAN 0 to HW filter on device eth0 Jun 04 19:38:09.117410 osdx WARNING[725354]: No supported link modes on interface eth0 Jun 04 19:38:09.118712 osdx modulelauncher[725354]: osdx.utils.xos cmd error: /sbin/ethtool -A eth0 autoneg on Jun 04 19:38:09.118723 osdx modulelauncher[725354]: Command '/sbin/ethtool -A eth0 autoneg on' returned non-zero exit status 76. Jun 04 19:38:09.119879 osdx modulelauncher[725354]: osdx.utils.xos cmd error: /sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off -- Jun 04 19:38:09.119885 osdx modulelauncher[725354]: Command '/sbin/ethtool -s eth0 autoneg on advertise Pause off Asym_Pause off --' returned non-zero exit status 75. Jun 04 19:38:09.205167 osdx systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Jun 04 19:38:09.217158 osdx sshd[725420]: Server listening on 0.0.0.0 port 22. Jun 04 19:38:09.217182 osdx sshd[725420]: Server listening on :: port 22. Jun 04 19:38:09.217269 osdx systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Jun 04 19:38:09.218699 osdx cfgd[1711]: [675110]Completed change to active configuration Jun 04 19:38:09.230781 osdx OSDxCLI[675110]: User 'admin' committed the configuration. Jun 04 19:38:09.247505 osdx OSDxCLI[675110]: User 'admin' left the configuration menu. Jun 04 19:38:09.396434 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'ping 10.215.168.64 count 1 size 56 timeout 1'. Jun 04 19:38:11.528821 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'service dns proxy stamp calculate dns-over-https host-name dns.dut0 host-path /dns-query host-port 3000 ip 10.215.168.64 hash 7ddbf63841fbfa2c1a6d777869fef688c7b0fd2935fa9a5c2d8c7aab9fd6925c'. Jun 04 19:38:11.689730 osdx OSDxCLI[675110]: User 'admin' entered the configuration menu. Jun 04 19:38:11.757611 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns static host-name dns.dut0 inet 10.215.168.64'. Jun 04 19:38:11.863194 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set system certificate trust running://CA.crt'. Jun 04 19:38:11.914298 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy server-name DUT0'. Jun 04 19:38:12.024246 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'set service dns proxy static DUT0 stamp sdns://AgAAAAAAAAAADTEwLjIxNS4xNjguNjQgfdv2OEH7-iwabXd4af72iMew_Sk1-ppcLYx6q5_WklwNZG5zLmR1dDA6MzAwMAovZG5zLXF1ZXJ5'. Jun 04 19:38:12.095848 osdx OSDxCLI[675110]: User 'admin' added a new cfg line: 'show working'. Jun 04 19:38:12.221421 osdx ubnt-cfgd[725468]: inactive Jun 04 19:38:12.247270 osdx INFO[725476]: FRR daemons did not change Jun 04 19:38:12.263750 osdx ca-certificates[725492]: Updating certificates in /etc/ssl/certs... Jun 04 19:38:12.793752 osdx ubnt-cfgd[726504]: rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL Jun 04 19:38:12.802093 osdx ca-certificates[726509]: 1 added, 0 removed; done. Jun 04 19:38:12.805045 osdx ca-certificates[726516]: Running hooks in /etc/ca-certificates/update.d... Jun 04 19:38:12.807814 osdx ca-certificates[726518]: done. Jun 04 19:38:12.881321 osdx systemd[1]: Started dnscrypt-proxy.service - DNSCrypt client proxy. Jun 04 19:38:12.883441 osdx cfgd[1711]: [675110]Completed change to active configuration Jun 04 19:38:12.885657 osdx OSDxCLI[675110]: User 'admin' committed the configuration. Jun 04 19:38:12.906006 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:12] [NOTICE] dnscrypt-proxy 2.0.45 Jun 04 19:38:12.906301 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:12] [NOTICE] Network connectivity detected Jun 04 19:38:12.906301 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:12] [NOTICE] Dropping privileges Jun 04 19:38:12.908744 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:12] [NOTICE] Network connectivity detected Jun 04 19:38:12.908826 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:12] [NOTICE] Now listening to 127.0.0.1:53 [UDP] Jun 04 19:38:12.908826 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:12] [NOTICE] Now listening to 127.0.0.1:53 [TCP] Jun 04 19:38:12.908826 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:12] [NOTICE] Firefox workaround initialized Jun 04 19:38:12.908826 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:12] [NOTICE] Loading the set of cloaking rules from [/tmp/tmpc3asfaai] Jun 04 19:38:12.938288 osdx OSDxCLI[675110]: User 'admin' left the configuration menu. Jun 04 19:38:13.085431 osdx OSDxCLI[675110]: User 'admin' executed a new command: 'system journal show | cat'. Jun 04 19:38:13.107264 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:13] [NOTICE] [DUT0] OK (DoH) - rtt: 113ms Jun 04 19:38:13.107264 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:13] [NOTICE] Server with the lowest initial latency: DUT0 (rtt: 113ms) Jun 04 19:38:13.107264 osdx dnscrypt-proxy[726525]: [2026-06-04 19:38:13] [NOTICE] dnscrypt-proxy is ready - live servers: 1
Step 8: Run command show host lookup teldat.com type A at DUT1 and check if output contains the following tokens:
teldat.com has address 10.11.12.13Show output
;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused teldat.com has address 10.11.12.13