Redundant controller