See some detail in https://issues.apache.org/jira/browse/AMQ-4465
Essentially when we forward we do a send and individual ack. If we miss the send reply due to connection failure or broker death we will have a duplicate send. The other end may suppress but this cannot be guaranteed.
We need to do batch 2pc between the brokers such that we can always recover and guarantee at most once delivery.