Two Internet Lines Are Not Redundancy
“We’re covered, we have two ISPs.”
We hear this sentence a lot. And honestly, it makes sense. Two internet lines from two different providers sounds like the safest setup a business can have.
Then one day, one provider goes down. The second line kicks in, the office can browse again, and everyone relaxes. But the VPN to the branches is dead. The website and the customer portal are unreachable. The VoIP calls dropped. And the team is on the phone with the hosting company trying to understand why nothing that lives “inside” the company can be reached from outside.
That’s the moment many companies discover the difference between having two internet lines and actually being redundant.
Why two lines are not enough
In a typical setup, each ISP gives you a few public IP addresses from its own pool. Your firewall watches both lines and switches traffic when one fails.
For outgoing traffic, like browsing and email, this works fine. The problem is incoming traffic. Your website, your VPN, your mail server and your remote access are all tied to the IP addresses of the first ISP. When that ISP goes down, those addresses go down with it.
So the internet “works”, but your business is unreachable. You can patch around it with DNS tricks, but the world doesn’t update instantly, and active sessions break anyway.
What true redundancy looks like
Real redundancy flips the logic. Instead of borrowing IP addresses from your ISPs, you own them.
Your company gets its own block of public IP addresses and its own identity on the internet, called an Autonomous System Number (ASN). Then, using a protocol called BGP, you tell both ISPs: “These addresses are mine, send their traffic to me.”
Now the internet knows two paths to reach you. If one ISP fails, the routes through it disappear and traffic flows through the other one. Same IPs, same website, same VPN. No DNS changes, no calls to anyone. Most users won’t even notice.
This is what large banks, data centres and service providers do. It’s called multihoming, and it’s no longer only for the big players.
Owning your IPs: the AFRINIC journey
For companies in Egypt and across Africa, IP addresses and ASNs come from AFRINIC, the regional internet registry for the continent.
On paper, the process sounds simple: become a member, request your resources, get approved. In reality, it’s where many companies get stuck.
IPv4 addresses are running out worldwide, and the rules for getting what’s left are strict. AFRINIC wants to understand your network, your growth plans and why you need the space. The application has to be built and justified properly. A weak request means questions, delays, or a rejection.
And getting the addresses is only half the job. They also need to be registered and secured in the right global databases, so the internet trusts that they’re really yours. Skip this, and some networks will simply ignore your routes.
Where it gets tricky
Once you have your IPs and ASN, the real engineering starts. A few things we see go wrong often:
- ISP readiness. Not every local provider is used to BGP sessions with enterprise customers. Getting them aligned takes the right technical conversation.
- Traffic balance. By default, all your traffic may end up on one line while you pay for both. Steering it the way you want is a craft of its own.
- The firewall layer. Redundant ISPs mean little if a single firewall sits in the middle. The edge design needs to match the redundancy promise.
- Safety. A small mistake in BGP can leak routes or take your whole presence offline. Filtering and protection have to be right from day one.
None of this is impossible. But it rewards experience much more than trial and error.
Who actually needs this?
Not every company does. But if any of these sound like you, it’s worth a serious look:
- You host services that customers or partners reach from outside: portals, apps, APIs, payment systems.
- Your branches, factories or remote teams depend on VPNs back to head office.
- An hour of downtime costs you money, reputation, or a regulator’s attention.
- You’re tired of being tied to one ISP’s addresses every time you want to change providers.
That last point is a hidden bonus. When the IPs are yours, switching or adding an ISP stops being a migration project.
The bottom line
Two internet lines protect your browsing. Your own IPs, your own ASN and a proper BGP design protect your business.
At KIT Consulting, we’ve walked this road end to end: from preparing the AFRINIC application, to working with local ISPs, to designing and running the edge network that ties it all together.
If you’re wondering whether your setup is truly redundant, or where to even start, let’s talk. Sometimes one conversation is enough to know which path makes sense for you.