ip_vs_random_dropentry

[Jacob Coby <jcoby@xxxxxxxxxxxxxxx>]

I've been looking at the source code for ipvs 1.0.10 and noticed that 
ip_vs_random_dropentry does not send a RESET packet to the realserver. 
It is my understanding that this feature is to prevent SYN flood (and 
related) attacks, but it doesn't seem like it would be effective as the 
realserver will continue to SYN/ACK until it reaches tcp_synack_retries. 
 You've potentially saved the director from attack, but lost the 
realserver(s).
Am I missing something, or is this by design?

--
-Jacob