Your Company Has Two Fiber Providers but One Backhoe Can Kill Both

Your Company Has Two Fiber Providers but One Backhoe Can Kill Both

Fiber Resilience Audit
I would not call two fiber circuits diverse until I could trace the common failure points

Two carriers can deliver excellent independent services and still share the one piece of infrastructure most likely to be damaged. The audit has to go deeper than provider names and bandwidth.

The resilience test

Pick one realistic failure such as a backhoe strike, flooded handhole, utility-pole accident, building fire, power loss or router failure. If that single event can disable both circuits, there is still a shared point of failure.

A route-diversity audit has to cross seven boundaries

The circuits can be independent at one boundary and converge again at the next.

1   Customer equipment
Routers, firewalls, switches and power
↓
2   Server room to building entrance
Risers, telecom rooms, cable trays and internal conduit
↓
3   Building entrance
One MPOE or physically separate entrances
↓
4   Property and street route
Conduit, handholes, poles and nearby rights-of-way
↓
5   Local access network
Carrier-owned loop or wholesale third-party access
↓
6   Metro aggregation
Carrier POPs, central offices, bridges and metro chokepoints
↓
7   Upstream network
Separate provider nodes, peering, routing and backbone infrastructure
Redundancy and diversity are different

Redundancy means another resource is available when the primary fails.

Diversity means that alternate resource avoids enough of the same physical infrastructure that the original failure is unlikely to remove it too.

10 checks that expose false route diversity

Several of these can be checked before ordering. Others may require carrier engineering or a site walk.

01
Identify the actual local-loop owner

Provider names alone are not enough. A national ISP can purchase local access from another carrier to reach a building that is outside its own fiber footprint.

If both providers ultimately use the same local access company, the first part of each circuit may have much less independence than the invoices suggest.

02
Trace the conduit leaving the property

Two separate fiber cables can occupy the same underground conduit. If construction equipment cuts or crushes that duct bank, both disappear.

For a high-availability site, the useful question is not simply whether two fibers exist. It is whether they occupy physically separated pathways.

03
Verify separate building entrances

A south-side and north-side entrance can protect against localized construction damage, fire, flooding or pathway failure near the building.

Separate carrier routes that both enter one conduit through one wall are still vulnerable at precisely the point closest to the customer’s operations.

04
Check the first handhole and splice point

Two fibers can leave a building separately and immediately converge in one handhole, vault or splice enclosure. A route map that begins a few hundred feet away may miss the most important shared structure.

05
Look beyond the first mile

Two routes can depart in opposite directions and reconnect farther upstream. Metro networks naturally converge around bridges, tunnels, utility corridors, railroad rights-of-way and carrier facilities.

The audit should therefore establish the portion of the journey for which diversity is actually guaranteed.

06
Ask whether each circuit reaches a different carrier node

Physical separation is stronger when two access circuits reach different provider nodes or POPs rather than converging immediately into the same local facility. For truly critical applications, node diversity can be as relevant as cable diversity.

07
Audit the internal building route too

Diverse carrier entrances can still share the same riser, telecom closet, overhead tray or conduit on the way to the server room.

A fire or water event inside the building can therefore defeat an otherwise excellent outside-plant design.

08
Remove the single-router problem

Two perfect fiber routes connected to one failed firewall still produce an outage.

High-resilience architectures may require redundant routers or firewalls, separate switch paths, dual power supplies and a network design capable of transferring traffic automatically.

09
Protect the network from the same power outage

Carrier diversity cannot keep an unpowered firewall alive. ONTs, NIDs, switches, routers and SD-WAN appliances all need electricity.

UPS runtime, generator coverage and the power requirements of carrier-owned equipment belong in the same resilience audit as fiber routing.

10
Pull the plug on purpose

A route-diversity audit should end with a controlled failure test. Disable the primary WAN and confirm that business-critical applications actually continue over the alternate circuit.

VPN sessions, voice platforms, firewall rules, public IP addresses, BGP, DNS, SD-WAN policies and cloud allowlists can all interfere with failover even when the backup circuit itself is healthy.

Grade the architecture instead of calling everything redundant
Architecture Resilience Grade Remaining Concern
Two ISP names over same local loop D Shared access infrastructure
Separate fiber cables in same conduit C Single excavation failure
Separate conduits but one building entrance B- Shared entrance facility
Separate entrances and geographically diverse paths A- Customer equipment and upstream convergence
Separate routes, nodes, entrances, equipment and power A Configuration and broader regional events remain possible
Diverse fiber plus independent wireless or satellite tertiary path A+ Performance of tertiary medium
Send this route audit to both providers

Vague answers such as “separate network” or “redundant backbone” do not establish local path diversity.

Who owns the access fiber between our building and your first network node?
Does this circuit share conduit with our other provider anywhere near the property?
Which side of the building does the circuit enter?
Can carrier engineering provide a route-diversity drawing or written route description?
Does the service include contracted physical diversity or is the routing best effort?
Which provider POP or access node terminates the local route?
Are any known bridges, tunnels, railroad corridors or shared facilities common to both paths?
Ask for evidence not adjectives

For mission-critical locations, the strongest evidence may be a carrier engineering drawing, KMZ or route map, written diversity commitment, or service specification that identifies the protected portion of the path.

Carriers may restrict detailed route information for operational or security reasons. The practical objective is still to obtain enough engineering confirmation to establish that the two services do not knowingly share the failure points the business is trying to avoid.

Route diversity should match the price of downtime

A 15-person professional office may not need the same architecture as a hospital, trading operation, call center or production facility. The economically rational design depends on the cost of losing connectivity.

Outage Impact Practical Redundancy Target
Annoying but operations continue Primary fiber plus 5G backup may be sufficient
Major productivity loss Two independent providers with local path investigation
Revenue stops immediately Verified physical route diversity and automatic failover
Safety, clinical or regulated operations affected Separate routes, entrances, equipment, power and tertiary connectivity as appropriate
Interactive Audit
True Route Diversity Score

Unknown answers intentionally score poorly. If nobody can establish the route, the business should not count the path as verified diversity.

Your route score will appear here
Complete the audit fields and calculate the score.