allow for 2 node failures