Abstract: An example network device includes a memory; and processing circuitry configured to: determine a primary path between the network device and a second network device; determine candidate backup paths between the network device and the second network device; in response to a determination that a first candidate backup path of the candidate backup paths satisfies a first priority criteria, select the first candidate backup path as a backup path; in response to a determination that a second candidate backup path of the candidate backup paths satisfies a second priority criteria, select the second candidate backup path as the backup path; and program a packet processor of the network device with the primary path and the backup path. The first priority criteria and the second priority criteria can be based on a risk of simultaneous failure of the primary path and a candidate backup path of the plurality of backup path.