Fault tolerant queue