The default should be failover=false. We can't assume that normal configurations will use broker nodes that never fail.
incubator/activemq/trunk/activemq-core/src/main/java/org/apache/activemq/network/DiscoveryNetworkConnector.java