Two weeks ago, Iranian drones hit AWS data centers in the UAE. I wrote about it at the time. The attack was precise, targeted, and it knocked services offline for customers across the region. It was a warning shot.
Today, missiles hit Ras Laffan.
If you do not know what Ras Laffan is, that is part of the problem. It is the largest liquefied natural gas export facility on earth. Qatar processes roughly 77 million tonnes of LNG per year through that complex. Europe, Asia, and half the developing world depend on those shipments to keep the lights on and the furnaces running.
The Difference
When you hit a data center, you hit one company's customers. Maybe a few thousand websites go dark. Maybe some APIs stop responding. Engineers scramble. Failover kicks in. Within hours or days, traffic reroutes. The internet was literally designed for this.
When you hit an LNG terminal, there is no failover.
There is no cdn.qatargas.com that spins up a backup node in Frankfurt. There is no load balancer that redirects natural gas to an alternate pipeline. The molecules are physical. The ships are physical. The cooling infrastructure that liquefies gas at negative 162 degrees Celsius is physical, bespoke, and takes years to build.
Brent crude is above 111 dollars this morning. The Sensex dropped 1,900 points. European gas futures are spiking. One facility, one set of missiles, and the economic shockwave reaches every continent.
N+0
In my world, we talk about N+1 redundancy. You need N units to operate, you deploy N+1. If a power supply fails, the other one carries the load. If a drive dies, the array rebuilds. The redundancy exists because someone, at some point, decided the cost of building extra capacity was less than the cost of going down.
Global energy infrastructure runs at N+0. Sometimes N-1. There is no spare Ras Laffan. There is no hot standby for the Strait of Hormuz. The entire system is optimized for efficiency, not resilience, because resilience is expensive and the accountants always win — right up until the moment they do not.
The Real Attack Surface
We spent twenty years worrying about cyberattacks on critical infrastructure. Stuxnet. Colonial Pipeline. The nightmare scenario was always someone hacking the grid, poisoning the water supply, shutting down the ports remotely.
Turns out the attack surface was never digital. It was always physical. A few missiles at the right coordinates and you do not need to hack anything. The grid prices itself into crisis. The supply chains seize. The markets do the rest.
Data centers can be rebuilt in months. Replicated across regions. Distributed by design. Energy infrastructure cannot. A liquefaction train takes four to six years to build. A refinery takes longer. The lead times are measured in political cycles, not sprint reviews.
What This Means
I am not a geopolitical analyst. I run infrastructure for a living. But I know what it looks like when a system has a single point of failure and someone just demonstrated they know where it is.
The lesson from the AWS strikes was that cloud infrastructure is now a military target. The lesson from Ras Laffan is worse: energy infrastructure has always been the target. We just convinced ourselves it was off-limits because the consequences were too severe.
The consequences are here. Brent at 111 is the proof.
In infrastructure, we have a saying: if you have not tested your disaster recovery plan, you do not have a disaster recovery plan. The global energy system just got its first real test, and the answer is coming back in red across every market on earth.