ETOPS — How Twin-Engine Aircraft Fly Across Oceans

Until the mid-1980s, a simple rule governed commercial aviation: if you wanted to fly across the Atlantic, you needed at least three — preferably four — engines. Twin-engine aircraft were not permitted to operate more than 60 minutes from a suitable diversion airport — a restriction that effectively made ocean crossings with twins impossible. Today, the Boeing 777, Airbus A350, and Boeing 787 routinely fly over the most remote oceans, sometimes as far as 370 minutes from the nearest runway. How did this become possible? The answer is ETOPS.

The History: Why Four Engines?

In the early years of the jet age, engines were far less reliable than they are today. The In-Flight Shutdown (IFSD) rate — the frequency at which an engine fails in flight — was 10 to 50 times higher in the 1960s and 1970s than it is for modern powerplants. The logic was straightforward: more engines meant more redundancy. If a quad-engine aircraft like the Boeing 747 lost one engine, three remained — more than enough to safely reach the nearest airport.

The FAA's 60-minute rule prohibited twin-engine aircraft from operating more than 60 flight minutes (on one engine) from a suitable diversion airport. This rule made transatlantic and transpacific flights with twins impossible, since these routes include segments that are hundreds of miles from any runway.

The joke among pilots and engineers summed up the skepticism: "ETOPS = Engines Turn Or Passengers Swim" — a humorous but telling summary of the concerns about ocean flying with only two engines.

The Breakthrough: ETOPS Becomes Reality

By the 1980s, engine reliability had improved dramatically. High-bypass turbofan engines like the CF6, PW4000, and RB211 achieved IFSD rates far below the older benchmarks. At the same time, the industry was pressing for approval of twin-engine long-range aircraft — twins were more fuel-efficient, easier to maintain, and less expensive to acquire than quads.

In 1985, the FAA changed the rules and introduced the concept of Extended-range Twin-engine Operational Performance Standards — ETOPS. The core idea: if an airline can demonstrate that its twin-engine aircraft, its maintenance, and its crews meet certain stringent requirements, it may exceed the 60-minute limit.

The first ETOPS approvals were for ETOPS-120 — 120 minutes from a diversion airport. ETOPS-180 quickly followed, and over the subsequent decades the limits were further extended:

The Requirements: What ETOPS Demands

ETOPS is not a blanket approval — each airline must apply for it individually for each aircraft type and demonstrate that it meets the stringent requirements. Both the FAA (under 14 CFR Part 121 and Advisory Circular 120-42B) and EASA (under EU OPS regulations) govern ETOPS certification, with broadly harmonized standards. The requirements cover three areas: the aircraft, the maintenance, and the crews.

Engine Reliability

The most critical prerequisite is a demonstrated IFSD rate (In-Flight Shutdown Rate) below a defined threshold. For ETOPS-180, the combined IFSD rate of both engines must be below 0.05 per 1,000 engine hours — meaning that, statistically, an engine is shut down in flight only once every 20,000 flight hours. For ETOPS-330 and above, even stricter thresholds of 0.02 per 1,000 hours apply.

This reliability must be demonstrated not only by the engine manufacturer but also by the individual airline with its specific fleet. New engine types must first complete an ETOPS proving period before being approved for higher ratings.

Maintenance Program

The maintenance program for ETOPS aircraft goes well beyond the standard maintenance program. Special attention is paid to so-called ETOPS Significant Systems — systems whose failure could force a diversion:

• Engines and engine systems: oil pressure, oil temperature, vibration monitoring
• Electrical systems: generators, batteries, APU (Auxiliary Power Unit)
• Hydraulic systems: redundant systems, RAM Air Turbine
• Pressurization: cabin pressure controllers, outflow valves, emergency oxygen
• Fire suppression systems: engines, APU, cargo compartment
• Navigation and communication: redundant systems, CPDLC

Special procedures apply to ETOPS maintenance: the Dual Maintenance prohibition stipulates that maintenance tasks on both engines or on redundant systems may not be performed simultaneously by the same technician. This prevents a single error from affecting both systems. Additionally, following certain maintenance tasks, ETOPS Verification Flights must be conducted before the aircraft may resume ETOPS operations.

Crew Training

Pilots who operate ETOPS flights must complete specialized ETOPS training. This includes theoretical instruction on ETOPS procedures and regulations, plus simulator sessions practicing ETOPS-specific scenarios: engine failure over the ocean, cabin depressurization, dual generator failure, cargo compartment fire, and decision-making regarding the optimal diversion airport.

MEL Restrictions

The Minimum Equipment List (MEL) for ETOPS flights is significantly more restrictive than for non-ETOPS flights. While an aircraft on a short-haul route may be dispatched with a failed generator, this is not permitted for an ETOPS flight. The ETOPS MEL ensures that all safety-critical systems are fully operational before an oceanic flight.

Rule Time vs. Diversion Time

An important concept in the ETOPS system is the distinction between Rule Time and Diversion Time. The Rule Time is the ETOPS approval rating — for example, 180 minutes. The Diversion Time is the actual flight time to the nearest diversion airport with one engine inoperative, accounting for current winds.

The Diversion Time must never exceed the Rule Time. This means: with strong headwinds toward the nearest diversion airport, the actual distance in nautical miles may be considerably less than what would be permissible in still air. Flight planning must account for current wind forecasts and route the flight so that the Rule Time is not exceeded at any point.

Equal-Time Point and Critical Fuel Scenario

The Equal-Time Point (ETP) — also called the Critical Point — is the point on the route at which the flight time to the nearest suitable airport is equal in both directions. Before the ETP, it is faster to return; after the ETP, it is faster to continue. For each ETOPS flight, multiple ETPs are calculated — one for each scenario such as engine failure, cabin depressurization, or medical emergency.

The Critical Fuel Scenario calculates the worst-case fuel requirement for a diversion: engine failure at the most disadvantageous point, cabin depressurization (requiring descent to a lower, more fuel-intensive altitude), holding at the diversion airport, and a go-around. Only if sufficient fuel for this scenario is carried may the ETOPS flight be conducted. This additional ETOPS Critical Fuel is added on top of the normal fuel requirement.

ETOPS Alternate Airports: Lifelines Across the Ocean

Along the major oceanic routes, a network of ETOPS Alternate Airports serves as diversion targets for ETOPS flights. Many of these airports are in remote locations and see little regular traffic, yet they play a critical role in the safety of oceanic aviation:

These airports must meet specific standards: a sufficiently long runway, instrument approach procedures, airport rescue and firefighting (at least ICAO Category 4), and available weather reporting. However, many of these airports offer only minimal infrastructure — hotels, spare parts, or maintenance capabilities for a widebody aircraft simply do not exist at places like Midway Island or Cold Bay. An ETOPS diversion to such a location is an emergency operation, not a comfortable rerouting.

The Stars: B777 and A350

Two aircraft types have elevated ETOPS to a new level:

The Boeing 777 was the first aircraft designed from the outset for ETOPS operations. At initial certification in 1995, it received ETOPS-180, and the 777-200LR variant achieved ETOPS-330 — five and a half hours of flight time to the nearest diversion airport. With a range exceeding 9,400 NM (17,000 km), the 777-200LR can reach virtually any point on Earth while complying with ETOPS rules. The GE90 engines powering the 777 have achieved IFSD rates among the lowest in aviation history.

The Airbus A350 holds the current record with ETOPS-370 — over six hours from the nearest diversion airport. This enables routes across the South Pacific and over Antarctica that were previously reserved for four-engine aircraft. The Rolls-Royce Trent XWB engines on the A350 deliver outstanding reliability, and the aircraft's modern systems — including a bleedless architecture and electrically driven cabin pressurization — further reduce the probability of systemic failures.

The End of the Four-Engine Era

ETOPS has fundamentally changed aviation. The economic advantages of twins — 20 to 30 percent lower fuel consumption per seat, lower maintenance costs, reduced overhaul expenses — have driven four-engine aircraft out of airline service.

The consequences are dramatic: the Boeing 747, once the Queen of the Skies, ceased production in 2022 after more than 50 years. The Airbus A380, the world's largest passenger aircraft, was discontinued after only 14 years of production in 2021. The Airbus A340 — ironically Airbus' own quad — was discontinued in 2011 and has already been retired by most airlines.

Today, new long-haul aircraft are designed exclusively as twins. The Boeing 777X, the Airbus A350, and the Boeing 787 are all twin-engine aircraft that, thanks to ETOPS, can serve any route in the world. The only remaining quads in scheduled service are the A380 fleets of a few airlines (Emirates, Singapore Airlines, Lufthansa, Qantas) — and their days are numbered.

ETOPS in Practice: A Diversion Scenario

Consider the following scenario: a Lufthansa A350 is en route from Frankfurt to New York, mid-Atlantic. The left engine displays an abnormal oil pressure drop. The crew runs the checklist and decides to precautionarily shut down the engine — a precautionary engine shutdown.

The ETOPS procedure now begins: the aircraft descends to a lower altitude (one engine produces less thrust, and the drift-down altitude is typically FL250 to FL310). The crew calculates, based on the ETP and the current wind conditions, which diversion airport can be reached most quickly — in this case Shannon, Ireland, in approximately 95 minutes of flight time. A MAYDAY is declared, ATC clears the airspace, and the aircraft flies direct to Shannon.

Thanks to ETOPS training, the pre-computed diversion routes in the FMS, and adequate fuel reserves, the diversion proceeds as a well-rehearsed procedure. The aircraft lands safely at Shannon, the 300 passengers are taken care of, and a replacement aircraft is ferried to Ireland. What sounds like a dramatic scenario is, in reality, a rare but well-managed event — exactly what ETOPS was designed for.

"ETOPS democratized oceanic aviation. You used to need a 747 or an A340 to fly across the Atlantic. Today a 787 does it — more efficiently, more quietly, and just as safely." — Long-Haul Fleet Manager at a major European airline