In theory, I could let transactions queue in memory when either partner was down. But I was concerned about how much I could queue, and how long a nasty situation could last. Either side had GigaBytes of space, but I didn't. So I opted to halt feeds if any side was out of action.