Redundancy means having a second circuit or device ready to take over. Diversity means that second path does not share the same physical weak points as the first: the same conduit, street, building entrance, carrier facility or power source. Redundancy without diversity is common, and it fails exactly when you need it, because one event takes down both paths. Real resilience comes from checking each layer, getting route details in writing and testing failover regularly.
It is a familiar pattern. A business does everything right on paper: two circuits, two carriers, automatic failover. Then one construction crew cuts one conduit in the street, and both circuits go down, because both ran through it. Nobody lied. Nobody asked.
Redundant, diverse and protected
These words get used loosely on quotes, so it helps to be precise.
- Redundant: there is a spare. Two circuits, two firewalls, two power supplies. It says nothing about whether they can fail together.
- Diverse: the paths are physically separate at the layers that matter. The term is only meaningful when the carrier says which layers it covers.
- Protected: the carrier's network switches your traffic to another path automatically if one fails, for example around a fiber ring. Protection inside the carrier's network often does not extend to the last stretch into your building.
The layers where paths share risk
| Layer | What can be shared | How to check |
|---|---|---|
| Your equipment | One firewall, one switch, one router | Look at your own rack: is there a single box both circuits depend on? |
| Power | One UPS, one circuit breaker, no generator | Trace power to each device, including carrier equipment in your suite |
| Inside the building | One riser, one telecom room | Ask the building engineer where each circuit runs |
| Building entrance | One conduit or entry point from the street | Ask each carrier which entrance it uses; confirm on the site survey |
| Street route | The same conduit, manholes or pole line | Request route maps from each carrier |
| Last-mile provider | Two carriers both leasing from the same local network | Ask whether each circuit is on-net or leased, and from whom |
| Carrier facility | The same central office or point of presence | Ask which facility each circuit is served from |
| Upstream | The same backbone or the same cloud region | Relevant for large networks and critical services |
Engineers sometimes describe paths that share any of these as belonging to a shared risk group. The idea is the useful part: list every thing that, if it failed, would take out both paths at once.
Why two carriers is not automatically diversity
Choosing different carriers is a good start, but it guarantees less than people assume. Carriers lease capacity from each other, especially for the last stretch to a building they do not reach themselves. Two different names on two invoices can mean the same fiber in the same conduit for the last few blocks. Separately, carriers that do own their fiber often share the same conduit systems, bridges and building entrances, because there are only so many ways into a street or a building.
The reverse is also true: one carrier can sometimes deliver two genuinely diverse circuits, with separate entrances and routes to separate facilities, and will commit to it in writing. The carrier name matters less than the route.
How to verify diversity
- Ask each carrier whether the circuit is on-net or leased for the last mile, and if leased, from whom.
- Request route information. Carriers may provide route maps, sometimes as KMZ files that open in mapping software, under a confidentiality agreement. Overlay them.
- Identify the building entrance for each circuit. Confirm it during the site survey, not just on paper.
- Identify the serving facility for each circuit.
- Get diversity written into the order, stating which layers are diverse, and ask what the carrier will do if a future network change moves your circuit onto a shared path. Carriers periodically reorganise their networks, sometimes called re-grooming, and a route that was diverse at install can drift.
- Review it every year or two, and after any carrier network change notice.
What real diversity costs, and why
The expensive part of diversity is usually the last few hundred metres. If your building has only one entrance, a second one means new conduit and possibly a new core through the foundation. If a carrier's only route to your building runs down the same street as the other carrier's, a diverse route may need a lateral from a different street. That work is priced as special construction, with the timeline that goes with it; see special construction costs explained.
The cheaper alternative is a different medium altogether. A fixed wireless link from the roof or a 5G or satellite service shares nothing with your fiber below the roof line, which is why wireless options make good backups where a second diverse fiber route would mean construction. The trade-offs are covered in satellite internet as a business backup.
A worked example
Hypothetical office and designs, invented to show how to test a design against real events.
A firm compares three designs for its office. Design A is two carriers that, it turns out, both lease the last mile from the same local provider through the same entrance. Design B is two fiber circuits confirmed on separate entrances and separate street routes to separate carrier facilities. Design C is one fiber circuit plus a fixed wireless link on the roof.
| Event | Design A | Design B | Design C |
|---|---|---|---|
| Conduit cut in the street outside | Both down | One stays up | Wireless stays up |
| Last-mile provider outage | Both down | At most one down | Wireless stays up |
| Flood in the basement telecom room | Both down | Depends where each circuit terminates | Wireless stays up if its equipment is higher in the building |
| Building power failure, no UPS | Both down | Both down | Both down |
| Single firewall fails | Office offline | Office offline | Office offline |
| Heavy rainstorm | No effect | No effect | Wireless may degrade; fiber unaffected |
Design A looked redundant on the quote and fails on the two most common physical events. Design B is strongest on the wire but may need construction. Design C is often the best value. Notice the last two rows: no circuit design helps if power and the firewall are single points of failure. A UPS for every device in the path, carrier equipment included, and a firewall pair are part of the design, not extras.
Inside the building: the part carriers do not cover
- Power: put the carrier's hand-off devices, your firewall, your switches and any wireless radio on a UPS, and know how long it lasts. If the building has a generator, find out which circuits it feeds.
- Equipment: a single firewall or router is the most common single point of failure in an office with two circuits. High-availability pairs exist for this.
- Failover logic: an SD-WAN device or dual-WAN firewall has to detect a failure and move traffic. Test it by unplugging the primary during a quiet hour, every month.
- Monitoring: know when you are running on the backup. A managed network service can alert you and report on failover tests.
Write the design down
Diversity work is wasted if nobody remembers it. Keep a one-page record for each site: every circuit's carrier and circuit ID, whether it is on-net or leased, its building entrance, its serving facility, the equipment and power it depends on, and the date the routes were last checked. When a carrier sends a maintenance or network change notice, that page tells you in a minute whether both circuits are affected. It also makes the next renewal easier, because you can tell a new carrier exactly which route and entrance it has to avoid, and ask it to quote on that basis from the start.
Diversity for wavelengths and dark fiber
For businesses connecting data centers or offices with wavelengths or dark fiber, the same principles apply over longer distances. Buy the two routes as a diverse pair, get the route maps, check where they cross or share bridges and tunnels, and write the diversity commitment into the contract. A pair of routes that shares a single river crossing is one route with extra steps.
Questions to ask your carrier
- Is this circuit on your own fiber all the way, or leased for the last mile, and from whom?
- Which building entrance and which serving facility will it use?
- Can you provide route maps under a confidentiality agreement?
- Will you commit to diversity in writing, and which layers does that cover?
- Will you notify me if a network change moves the circuit onto a shared path?
- If a truly diverse route needs construction, what is the cost and timeline?
Have your backup checked, not just bought
When we quote a second circuit, we ask each carrier how it reaches your building and by what route, so the backup you buy fails for different reasons than your primary. Tier 1 carriers bid on your address, we bring back the options with the diversity details alongside the price, and the carrier pays us, so your invoice is not marked up. The review is free with no obligation. Start with does your business need backup internet, send us your address, call 478-758-8091 or text (347) 870-0965.
