Fault-tolerant multi-producer multi-consumer message passing