Do we really need NSCD service running? What are the pros and cons?

We have a pretty mixed environment in terms of operating systems. Suse 12/15, Oracle Linux 6/7/8, Redhat 6/7/8 and a few others. We've been using Active Directory authentication for some time. For Linux clients, this authentication is done primarily using two type of integration: - Most older systems use --> Samba + Winbind + NSCD - Newer systems use --> Samba + SSSD (no NSCD here) We've had issue with dns caching and nscd was blamed for the problem. My question is: Do we really need NSCD? What are the best practices for dns cache? Our environment has around 4000 VMs (between windows and unix-like systems)