A method of managing traffic flow in a packet network. A working sub-network is provided, which comprises one or more provisioned static working paths between at least one source node and one or more destination nodes in the network, and the working sub-network with a service instance. A backup sub-network is provided, which comprises one or more dynamic protection paths between the at least one source node and the one or more destination nodes, and the backup sub-network associated with the service instance. During a normal operation of the network, forwarding subscriber traffic associated with the service instance through the network using the working sub-network. Following detection of a network failure affecting the service instance, the subscriber traffic associated with the service instance is switched for forwarding through the network using the backup sub-network.