Why a Single Failed Router Can Ground a Thousand Flights