RU RU

068 | Internet Link Redundancy (for Web Services and Data Centers)

Published on July 30, 2025

We conclude our series on communication link redundancy by exploring perhaps the most critical scenario for modern companies: ensuring continuous Internet access for web services, applications, and data centers. If your website, online store, cloud services, or APIs become unreachable to the outside world, the consequences are immediate — lost customers, lost revenue, and reputational damage.

Providing resilience at this level is complex but absolutely essential, requiring deep understanding of network protocols and architectures.

The Challenge: Global Availability

When it comes to Internet access, you’re dealing with risks on a global scale:

  • Large-scale provider outages: Failures in hardware, routing, or entire network segments on your provider’s side.
  • Backbone cable cuts: Submarine or terrestrial cables connecting continents and regions.
  • DDoS attacks: Targeted overloads aimed at saturating your link or crashing your servers.
  • DNS issues: Unreachable or misconfigured DNS servers.

Common Solutions for Internet Redundancy

To ensure maximum availability of your external services, the following solutions are typically used:

1. Multiple Independent Internet Providers (Multi-homing)

This is the foundation of any serious Internet redundancy setup. Your data center or network hub should be connected to at least two independent Internet providers.

  • Separate physical entry points: Cables from each provider should enter the building via different routes to avoid simultaneous damage (e.g., from construction).
  • Different Autonomous Systems (AS): Make sure your providers belong to different ASes, ensuring diverse global routing and independence from shared backbone infrastructure.

2. BGP (Border Gateway Protocol)

If you use multiple providers, you’ll likely need your own Autonomous System Number (ASN) and BGP (Border Gateway Protocol). BGP is the protocol used to exchange routing information between ASes on the Internet.

  • Announcing your own IP prefixes: With BGP, you can announce your public IP block (obtained from a registry like RIPE NCC) via both providers.
  • Automatic Failover: In case of a provider failure, BGP will automatically withdraw routes through that provider and shift traffic to the other — no manual intervention needed.
  • Load Balancing (Active/Active): You can configure BGP to distribute traffic across both providers by manipulating BGP attributes (e.g., AS-Path Prepending, Local Preference, MED).
  • Requirements: BGP requires dedicated routers, an ASN, a public IP block, and a skilled network engineer.

3. DNS Failover (DNS / GSLB)

If you don’t have your own ASN and BGP — or want to complement them — DNS-based failover is an excellent option:

  • Multiple A records: Create several A-records for your domain (e.g., yourcompany.com) pointing to different IPs (e.g., from different providers). DNS servers will serve them in rotation (Round Robin).
  • DNS Failover Services: Providers like Cloudflare, Amazon Route 53, and DNS Made Easy offer failover services that constantly monitor your IPs. If a primary IP goes down, they automatically remove it from DNS responses and serve the backup.
  • GSLB (Global Server Load Balancing): More advanced setups can route users based not only on availability but also on geography or server load.

4. CDN (Content Delivery Network)

A CDN is a globally distributed network of servers that cache and serve your static (and sometimes dynamic) content from locations close to the end user.

  • Reduced load on your main link: Most traffic (images, CSS, JS, video) is served by the CDN, reducing stress on your primary Internet channel.
  • Increased resilience: If your main data center or link goes down, the CDN can still serve cached content. Even if it can’t fetch new data, part of your site remains available. Many CDNs also offer DNS failover and WAF (Web Application Firewall) features.

5. Cloud Solutions (Multi-AZ / Multi-Region)

For companies using cloud platforms (AWS, Azure, Google Cloud):

  • Multiple Availability Zones: Deploy apps and databases across different availability zones within the same region. Each zone has independent infrastructure, including networking.
  • Multi-Region Deployment: For maximum resilience and global reach, deploy services in different geographic regions. If an entire region fails, traffic is redirected to another.
  • Cloud Load Balancers: Use cloud-native load balancers that distribute traffic across different instances — including cross-zone or cross-region — and automatically exclude failed nodes.

6. DDoS Protection

While DDoS protection is not link redundancy in the traditional sense, it’s a critical part of availability. A large-scale DDoS attack can overwhelm even redundant connections.

  • Use specialized DDoS protection services (e.g., Cloudflare, Akamai, or your provider’s solution). These services filter malicious traffic and allow only legitimate requests through.

7. Dual-Stack (IPv4/IPv6)

Running services on both protocols (IPv4 and IPv6) adds another layer of robustness. If routing issues affect one protocol, users may still reach your services over the other.

What Can Fail at This Level?

  • Massive Internet provider outages: Collapse of entire ASes or backbone routes.
  • DDoS attacks: Saturating bandwidth or exhausting system resources.
  • BGP session issues: Peering link failures.
  • DNS configuration errors: Incorrect records pointing to unreachable IPs.
  • Load balancer or GSLB service failures.

Failover Scenarios

  • Automatic BGP: Fastest and most seamless, typically within seconds.
  • Automatic DNS Failover: May take seconds to several minutes depending on DNS record TTL (Time To Live).
  • Manual Switch-over: Last resort when automation fails — requires human intervention.

Monitoring

Ongoing, comprehensive monitoring is key to successful Internet redundancy:

  • Synthetic monitoring: Check availability from multiple global locations (e.g., UptimeRobot, New Relic Synthetics).
  • BGP session monitoring: Track peering status with providers.
  • Latency and packet loss tracking: For each Internet channel.
  • DNS monitoring: Ensure records are updating properly.
  • Traffic analytics: Detect anomalies that might signal DDoS or other issues.

Conclusion

Internet link redundancy is the pinnacle of network resilience. It demands a comprehensive approach that may include BGP-based multi-homing, intelligent DNS failover, CDN usage, cloud-based multi-region deployment, and strong DDoS mitigation. When implemented properly, this strategy ensures that your business remains accessible to users and partners worldwide, regardless of network failures.

Need help?

Get in touch with me and I'll help solve the problem

Related Posts