VoIP.info Guide

SIP trunk failover and redundant calling paths

Design alternate routing without assuming active calls will survive.

Reviewed 2026-10-19Foundational

Define the failure you intend to survive

A provider outage, local internet failure, PBX failure and a single unreachable destination need different responses. A second trunk on the same PBX and internet circuit does not remove those shared dependencies.

Redundancy needs separate failure paths
A PBX uses a primary provider path and an alternate provider path. Shared PBX, power and internet dependencies remain unless the design also separates them.

New-call recovery and active-call survival are different tests. Inbound number failover needs a provider-side routing plan.

Design outbound behavior

Specify which failures should trigger an alternate route. An authorization denial or invalid destination may require correction rather than another attempt. Limit retries and verify number formatting, caller identity and permissions on each trunk. Prevent loops between alternate paths.

Design inbound behavior separately

Inbound failover depends on control of the called number and the provider's routing options. Ask where calls go when the primary PBX cannot be reached and whether that behavior uses a timeout or a health signal. A second outbound account alone does not redirect inbound calls to your number.

DIDWW documents DNS SRV for a customer trunk host and trunk groups with selected rerouting disconnect codes, priority and weight. Flowroute documents per-number primary and failover destinations. Neither pattern implies that every SIP error or an already established call will move. Record the triggering response and every attempted destination when you test.

SIP.US documents primary and secondary trunk assignments plus PSTN Backup and Forward options. These have different triggers and channel use; see the SIP.US record rather than treating them as one universal failover mode.

Voxtelesys portal route profiles can prioritize registered-PBX, customer-IP and external-transfer destinations. Review the provider record and validate the actual advance trigger, cost and shared dependencies.

Amazon Chime SDK Voice Connector uses priority and weight for customer SIP hosts, while connector groups can span AWS Regions. Review the provider record and keep provider-region fallback distinct from the customer PBX, access network and active-call state.

Test recovery as well as failure

Use an agreed maintenance exercise. Confirm new calls on the backup path, expected handling of active calls and return to the primary route. Check capacity, billing assumptions and emergency-calling arrangements for the backup. Record the observed recovery time instead of describing the design as seamless without evidence.

Where the provider exposes a separate CDR for each delivery attempt, reconcile attempts by call identifier and time. DIDWW describes that behavior for SRV and trunk-group failover. A single successful final leg can hide a repeatedly failing primary leg.

Model every BYOC-P failure domain

Zoom Phone BYOC-P can use regional trunks, alternate Zoom data-center routing, multiple customer SBCs and Internet or private connectivity. Those controls do not establish one universal route order, timer, access diversity, carrier recovery or established-call behavior; test each accepted boundary separately.

Keep Genesys provider requirements separate from the deployed sequence

For Genesys Cloud BYOC, the provider record distinguishes OPTIONS, 503 and sequential-failover requirements from the selected carrier's actual target order, timers, capacity, restoration and established-call behavior.

Bind ACS Direct Routing failover to route priority and response code

For Azure Communication Services Direct Routing, the provider record preserves regular-expression match, route priority, equal-priority random SBC selection, OPTIONS health and Microsoft's documented 408, 503 and 504 next-SBC failover boundary.

Keep the CCAI Platform BYOC failover owner explicit

Google assigns customers responsibility for high availability and call routing from carrier services to the CCAI Platform media edge. The BYOC record preserves multiple inbound carriers, the single outbound-carrier boundary and requested Google-telephony fallback as different designs.

Trace a peoplefone offline-forwarding path

The peoplefone fallback diagnostic follows registration expiry, provider line state, the offline role, number filtering, alternate delivery and return to primary without representing forwarding as active-call survival.

Keep redundant targets distinguishable from stale branches

The A&A duplicate-ringing diagnostic inventories registration, direct server and Also Ring branches before deciding whether an alternate path is intended resilience or a retired target.

Apply SureVoIP’s timeout-only destination policy

For SureVoIP inbound delivery, use the provider-specific destination diagnostic to preserve the ordered routes and distinguish a timeout from Busy, Unavailable or later PBX failure.

Distinguish Magrathea health probes from call delivery

Use the Magrathea SIP Resilience diagnostic to correlate nominated addresses, provider probes, pool membership, new-call selection and later PBX routing.

Distinguish NFON multi-PBX modes from PSTN backup

Use the NFON backup-PBX diagnostic to correlate the selected mode, endpoint readiness, provider branch, PBX route and restoration.

Prove SIP DNS selection before expecting another target

Use the Voip Unlimited DNS failover diagnostic to trace NAPTR, SRV, address records, cache state, a qualifying failure and the new transaction.

Resolve Broadvoice failover mechanics for the ordered route

Broadvoice publishes built-in redundancy and failover without one public timer or route contract. The Broadvoice provider record keeps targets, health checks, failure responses, detection, restoration, new-call recovery and established-call behavior as separate acceptance evidence.

Qualify SIPcity’s optional peering failover address

SIPcity permits a primary and optional failover IP for peering, but does not publish one trigger or timer contract. The SIPcity provider record requires an approved new-call exercise and keeps active-call survival and restoration as separate evidence.

Separate Toku platform redundancy from customer-trunk failover

Toku describes redundant infrastructure, but the reviewed material does not define one customer trunk trigger, retry path or restoration timer. The Toku provider record requires the selected design and an approved new-call failure and recovery exercise.

Separate LoopUp endpoint distribution from DNS and WAN failover

LoopUp offers round-robin or ordered failover across customer endpoints and separately publishes regional platform FQDNs. The provider record requires each new-call choice and recovery path to be proved.

Separate SIPTRUNK gateway redundancy from call treatment

SIPTRUNK documents multiple gateway registration or SRV behavior separately from PSTN Backup, hard forwarding and voicemail. The mode-mismatch diagnostic keeps provider reachability, inbound destination, treatment trigger and restoration as different observations.

Do not combine SIP.US gateway failover with secondary routing

SIP.US documents provider-gateway redundancy, secondary-trunk DID routing and PSTN Backup as separate mechanisms. Use the SIP.US failover diagnostic to capture the qualifying failure, next attempted path, caller result and restoration.

Keep Flowroute provider-edge selection and number-route failover separate

Flowroute documents current PoP selection separately from per-number primary and failover route relationships. Use the Flowroute diagnostic to record the first delivery result, any second attempt and return to primary without assuming which responses advance.

Keep DIDWW trunk-group and DNS SRV attempts separate

DIDWW can create a new CDR for each trunk-group or DNS SRV attempt. The provider-specific diagnostic binds every attempt to the layer, configured trigger and destination that owned it.

Use every available Twilio edge address without losing trunk identity

Twilio recommends avoiding a single termination IP and preserving the personal trunk domain while edge routing changes. The termination diagnostic separates DNS or address failover from ACL and credential acceptance.

Preserve SIPStation failover precedence

Sangoma documents different behavior when no failover is configured and when account-level or per-DID failover exists. The SIPStation diagnostic records the first server, configured override, next attempt and final route.

Keep IP Telecom access diversity separate from SIP failover

IP Telecom recommends resilient connectivity such as backup broadband or 4G/5G. The provider record keeps access failover, provider SIP routing, alternate inbound delivery, PBX redundancy and established-call survival as separate evidence.

Treat Clearfly forwarding and virtual attendant as routing controls

Clearfly describes personalized forwarding and a virtual attendant for weather or phone-system outages. The provider record keeps those controls separate from SIP target health, access diversity, PBX resilience and established-call survival.

Bind Redcentric failover to the ordered access design

A legacy Redcentric description tied standard failover to provider-supplied circuits and treated third-party access as designed work. The provider record uses that only as a present-day acceptance question for circuits, targets, triggers, recovery and support.

Translate CommPeak redundancy claims into a tested route map

CommPeak publishes geo-redundant routing and failover language. The provider record still requires selected targets, DNS behavior, triggers, established-dialog limits, alternate inbound handling, recovery and rollback evidence.

Require an explicit Voximplant alternate-path design

The reviewed Voximplant pages do not define one universal customer failover sequence. Use the provider record to record targets, DNS dependency, triggers, retry behavior, established-dialog limits, recovery and rollback.

Separate Voip Unlimited DNS routing from portal diversion

The provider profile distinguishes NAPTR or SRV target selection, registered Contact, customer-system diversion and non-registration alerts.

Keep SignalWire resource assignment separate from failover

The reviewed SignalWire material documents number and Resource SIP Address routing but does not establish a redundant PBX retry policy. The provider profile keeps that gap explicit.

Interpret Telnyx failover from the recorded first result

Telnyx documents response-specific advancement for IP and FQDN routes and a separate registered-instance path for credential Connections. Use the Telnyx diagnostic to retain each attempt, response and next destination.

Do not invent Bandwidth failover triggers

Bandwidth Build documents prioritized routes and later failover routes but the reviewed public page does not publish a complete response-code or timer contract. The Bandwidth diagnostic preserves the observed attempt, result and any next route.

Classify Voipfone diverts before calling them failover

Voipfone publishes Always, closed, busy, no-answer and PSTN-failover controls. The Voipfone diagnostic records which rule was enabled, what triggered and which attempt occurred.

Classify the VoIP.ms failover state first

VoIP.ms separates Busy, Unreachable, No Answer and Max Capacity. The VoIP.ms diagnostic records the trigger evidence and alternate attempt for each.

Read the Twilio stopping response before expecting another URI

Twilio publishes response classes that stop Origination URL advancement and a four-second no-response boundary. The Twilio diagnostic preserves each attempt.

Test Plivo fallback only at its documented boundary

The Plivo inbound diagnostic distinguishes an unresponsive primary from a reachable destination that returns a final SIP response.

Test Vonage priority and timeout at their documented boundary

The Vonage inbound diagnostic distinguishes an unreachable URI from a reachable target that returns a final SIP response.

Preserve Voxtelesys destination priority and transfer ownership

Voxtelesys supports prioritized route destinations and a later Transfer using an outbound trunk group. The diagnostic retains the actual attempt and avoids inventing a universal response matrix.

Separate Amazon Chime group fallback from origination routing

Voice Connector group priority and origination-host priority are different selection layers. The Amazon Chime diagnostic traces each without claiming active-call survival.

Test Callcentric Network Down Forward below DID Forward

A direct DID Forward has higher priority than Call Treatments, including a network-down treatment. The Callcentric diagnostic tests precedence, the separate forwarded leg and return to primary.

Scope Anveo Direct failover to the DID add-on

The Failover Add-on can send an inbound DID to a backup SIP URI, while outbound LCR has different controls. The diagnostic records the actual attempts without inventing a trigger matrix.

CarrierX soft failure is not dead-trunk state

CarrierX separates one-call soft failure from thresholded hard-failure state and SIP OPTIONS monitoring. The diagnostic retains each transition and next attempt.

AVOXI terminal codes are explicit stop controls

An AVOXI URI can list 400–699 responses that terminate a call. The diagnostic does not infer universal retry or alternate-target behavior for other outcomes.

Separate Easybell address order from Offline forwarding

A later Trusted IP and an Offline forward to a telephone number are different mechanisms. The diagnostic requires observed attempts instead of an invented universal trigger.

SIP.US Forward, Backup and secondary trunks have different precedence

PSTN Forward bypasses the PBX and prevents conditional Backup from engaging; a secondary trunk is a separate SIP route. The diagnostic requires observed attempts.

Separate Flowroute edge recovery from number-route failover

A preferred PoP can change the Flowroute source edge while the number remains on the same customer route. The Flowroute failover diagnostic records both layers.

ClearlyIP number-level failover has separate precedence

The ClearlyIP workflow keeps per-number rules, Location rules, Smart Routing and observed recovery as different evidence.

Keep Simwood routing controls and observed recovery separate

The Simwood workflow records time-of-day routing, forwarding, failover and the provider attempt as different evidence.

Do not pin one Sinch regional edge

The Sinch diagnostic preserves the regional FQDN, DNS answers, selected address and observed result.

Sources & applicability

Primary references for the technical details above. Operational examples and planning checklists are VoIP.info editorial guidance.