Please update https://learn.hashicorp.com/tutorials/consul/dns-forwarding#dnsmasq-setup

There is a nuance in the Consul + dnsmasq configuration. Please see if https://learn.hashicorp.com/tutorials/consul/dns-forwarding#dnsmasq-setup can be updated to include this nuance:

If you configured your Consul agent to answer DNS queries with a non-zero TTL (service_ttl or node_ttl settings), dnsmasq will *not cache* those replies anyway unless Consul is also configured not to refuse recursive DNS queries (those with the RD flag set).

Configure a recursor in Consul (even a bogus one which will never be used) and the problem is solved.

Discussion: https://discuss.hashicorp.com/t/dnsmasq-problem-caching-responses-from-consul/14673