Guide · Reliability

Internet Redundancy for Business

Redundancy is not a second invoice, it is a second failure domain — and the physical route is only one of the domains involved. This guide covers the whole design: which failure modes to plan against, the single points of failure that sit inside your own rack rather than in the ground, how failover should behave when it fires, how to test it, and how much redundancy is proportionate to what an outage actually costs. For the physical-route question specifically — what makes two paths genuinely separate and how apparent diversity fails — read why fiber route diversity matters, which goes deeper on that one layer.

Reading time
6 minutes
Topic
Reliability
Published
August 24, 2026
Written by
Vast Networks

6 min read · Published August 24, 2026 · Vast Networks

What you are actually buying

The purpose of a second connection is that it survives whatever takes the first one down. That makes the useful question not "do we have two circuits" but "what could remove both at once". Every shared element between the two paths is a way for one event to take out both, and shared elements are easy to acquire accidentally because nothing in the ordering process reveals them.

Work through the chain from your equipment outward: the router, the building entry, the conduit or aerial path to the street, the route back to the provider’s facility, and the provider’s own upstream connectivity. Independence at every layer is rarely achievable or affordable. Independence at the layers most likely to fail — physical path and building entry — is usually both.

The failure modes worth designing against

**The backhoe.** Physical damage during construction is the most common cause of a hard outage, and it takes out everything in the trench. Two circuits in one conduit fail together, whoever sold them.

**The building entry.** Many buildings have exactly one point where services enter. Two providers, two routes across town, one wall penetration — and a flooded riser or a contractor with a core drill removes both.

**The upstream.** Two providers can buy transit from the same upstream carrier. Their outage becomes your outage twice over. Asking is the only way to find out.

**Your own equipment.** A single router or firewall with two WAN ports is a single point of failure holding two circuits. This one is frequently the cheapest to fix and the most often overlooked.

**Power.** Both circuits terminate on equipment that needs power. If the UPS covers one rack and not the other, the redundancy has a runtime limit nobody documented.

Choosing the second path

The strongest second path is a physically separate route entering the building at a different point, from a provider with independent upstream connectivity. Whether that exists at your address is a question about conduits, crossings, and entries rather than about contracts, and it is covered properly in why fiber route diversity matters — including the four ways two circuits that look separate turn out not to be.

The option that guide does not cover is changing medium. A fixed wireless link fails for entirely unrelated reasons: it has no trench, no conduit, and no duct to share. As a backup path it is frequently more genuinely independent than a second fiber that follows the same street, and its lower capacity matters less than it appears — during an outage the question is what still functions, not what performs identically.

Where neither is available, the honest position is a single path with a documented recovery plan: mobile failover for a defined subset of traffic, a work-from-home arrangement, or an accepted downtime window agreed in advance. Knowing you are on one path is materially better than assuming you are not.

Failover that actually works

A second circuit that requires someone to reconfigure a router is a recovery procedure, not failover. Decide in advance what should switch automatically, what should be manual, and how long each takes. Then decide what happens to sessions: voice calls will drop on an IP change unless the platform handles registration migration, and VPN tunnels will need to re-establish.

Test it deliberately. Pull the primary circuit during a scheduled window and observe what breaks — not once at installation, but periodically, because configurations drift and equipment gets replaced. The most common discovery is not that failover fails, but that it works while something depending on a static address quietly does not.

How much redundancy is proportionate

Cost the outage before designing the solution. A distribution operation that cannot ship, a clinic that cannot retrieve imaging, or a plant whose batch record must be complete has an hourly cost that makes diverse paths obviously worthwhile. An office where people can work from home for an afternoon does not.

Between those poles, the useful exercise is to identify which specific functions must survive and provide for those rather than for the whole site. A backup path sized for the point-of-sale, the phones, and the essential applications is far cheaper than one sized to be indistinguishable from the primary, and it covers the actual requirement.

Frequently asked questions

We have two providers. What is left to check?

The layers a second contract does not touch. Whether both circuits terminate on one router or firewall. Whether both racks are on the same UPS. Whether anything depends on a public address that belongs to the primary circuit. Whether voice re-registers when the path changes, and how long that takes. Whether anyone has run the failover since the last equipment change. Two providers is a good start on the physical layer — the route question itself is covered in why fiber route diversity matters — but most failed failovers are discovered above it.

Is a mobile or wireless backup good enough?

For many businesses, yes — and its independence is a genuine advantage, because it shares no infrastructure with a buried route. Size it for the functions that must survive rather than for parity with the primary. The realistic question during an outage is whether the phones, payments, and essential applications work, not whether the backup benchmarks the same.

What single points of failure do people miss inside their own building?

Three, usually. One router or firewall holding both WAN circuits, which is the cheapest to fix and the most commonly overlooked. Power, where the UPS covers one rack and not the other, so the redundancy has an undocumented runtime limit. And DNS or a hard-coded public address that follows the primary circuit, which is what turns a working failover into an outage nobody can explain. None of these are visible from the circuit diagram.

How often should we test failover?

At least annually, and after any change to routers, firewalls, or circuits. Configurations drift, equipment gets replaced, and the person who set it up moves on. A scheduled test during a quiet window is inexpensive; discovering during an incident that a static address broke the failover is not.

Want a second opinion on your own numbers?

Send the address and what the site actually runs. A California-based engineer will tell you what can be delivered there, what it involves, and where the guidance above does not apply to your situation.

Talk to a Network Specialist

Service availability depends on location, network proximity, capacity, and engineering review. Share an address and we will confirm what can be delivered there.