I've configured many servers in my company to work with NSCD for local caching of hosts and in order to lower traffic to the local DNS servers as well as return a quicker DNS response when possible.
nscd like so and only using it for caching hosts:
logfile /var/log/nscd.log debug-level 9 server-user nscd paranoia no enable-cache hosts yes #positive-time-to-live hosts 3600 positive-time-to-live hosts 86400 negative-time-to-live hosts 20 suggested-size hosts 211 check-files hosts yes persistent hosts yes shared hosts yes #max-db-size hosts 67108864 max-db-size hosts 536870912
You can see that I've configured Positive-TTL to 24 hours.
My question is, which TTL is the one used? The one which is configured here or the one which is configured per domain in the DNS?
My guess is that the shorter TTL is the one that takes place but I could be wrong, can you please shed some light on this matter?