Tandem has more experience with shadow disks than anybody else, so
examining their system is probably worthwhile. They support such things
as network shadowed disks, including resynchronization after a fault over
the network. They also support distributed fault-tolerant multiprocessing
over their net, of course.
John Nagle