One thing that needs to be reviewed is if they are dual links or redundant links.

In any system where both sides of redundancy always carry traffic then loss of one link can cause congestion failure if any link fails. This is a very common means of failure in electrical networks that requires load shedding. Well, you can't load shed air traffic.

A more complex system that I like, but comes with it's own set of constraints and implementation issues is a system where both lines carry all the traffic at all times. This way the default state of the system is always working and your first failure isn't invisibly critical.

But this is very hard as we see in TCP when things get out of order and high latency creeps in. You have to manage a lot more state at the data level.