Systems and methods for estimating aggregate bandwidths of primary traffic flows are provided. Tighter upper bounds on aggregate bandwidths for arbitrary combinations of primary traffic flows may be computed. These tighter bounds are highly useful in configuring backup tunnels to protect a node in the event of failure in that the total backup bandwidth burden on individual links may be determined more accurately to permit optimal use of available backup bandwidth capacity.