A controller is configured to obtain traffic information of one or more tunnels in the network, where the traffic information of each tunnel is indicative of a protection type of the tunnel against failures, and provide configuration information to each network node that is a head-end node of a determined tunnel with a certain protection type according to the obtained traffic information of the determined tunnel, where the configuration information includes a bandwidth threshold and a load balancing configuration for the determined tunnel. A network node is configured to receive configuration information from the controller, and send the notification to the controller, if it is determined that the traffic of the tunnel is above the bandwidth threshold.