A redundant server system with failover capability, comprising:a first server and a second server, each configured with a first application for serving data to multiple clients and a second application for generating periodic status messages, each status message including a server fingerprint;a routing device in secure communication with the first server and the second server, the routing device configuredto route traffic exclusively to a primary server of the first and second servers,to receive the status messages from the first and second servers,to compare the server fingerprint of a status message with a server fingerprint stored on the routing device; andto change the primary server to another of the first and second servers in response to a comparison of the primary server fingerprint yielding a mismatch prior to the change.
