A method to build redundancy on top of redundancy for critical systems using geographically separated redundant pairs or individual nodes