Comment by midasuni

You really need two in physically different locations (ideally ASes) with some form of failover, assuming you want a reasonable guaranteed uptime