Prisma Client SSL certificate validation and DNS caching behavior

Database Connectivity and Security

Prisma Client manages database connections via a connection string, utilizing parameters such as sslmode to define the level of certificate validation. In environments requiring strict identity verification, such as verify-full, the Prisma Query Engine relies on the operating system's root CA store or a provided CA certificate via sslcert.

Engine Resolution Constraints

The Query Engine, implemented in Rust, handles DNS resolution for the database host. While it typically inherits host environment configurations, there is uncertainty regarding how the engine manages DNS caching intervals compared to the underlying operating system's TTL settings.

When deploying in containerized environments where DNS records may rotate or update frequently, the interaction between the Rust-based engine's internal cache and the system resolver is not fully documented.

• Does the Prisma Query Engine implement an internal DNS cache independent of the host OS?
• How does the engine handle TTL expiration for database hostnames during long-lived connection pool cycles?