← ALL AVIONICS
VARIOUS (ENSIGN-BICKFORD, SPACEX, ULA)

Flight Termination System (AFTS)

Range SafetyFlight Termination System● Active
MASS
15 kg
POWER
25 W
REDUNDANCY
Dual-redundant (independent chains)
RAD HARDENED
N/A (short mission duration)
FIRST USE
Jan 2017

Flight Termination System (AFTS) is a range safety system manufactured by Various (Ensign-Bickford, SpaceX, ULA). It features dual-redundant (independent chains) redundancy.

ABOUT FLIGHT TERMINATION SYSTEM (AFTS)

An Autonomous Flight Termination System (AFTS) is an onboard “safety brain” that can end a rocket’s flight all by itself if the rocket strays off course — no human on the ground required. It is one of the most important pieces of avionics (the electronics that fly a vehicle) on a modern launch vehicle.

Quick facts

  • What it is: A self-contained, redundant avionics subsystem that lives on the rocket and works independently of any ground equipment.
  • Other names: Autonomous Flight Safety System (AFSS).
  • Sensors it uses: Onboard GPS (satellite-based positioning, also called GNSS) plus an Inertial Measurement Unit (IMU) — sensors that track motion and orientation.
  • How it decides: Pre-loaded software “mission rules” agreed with the range safety officials before launch and locked in at liftoff.
  • Built-in backup: Two redundant processor “strings”; if either healthy string votes to terminate, the flight ends (a fail-safe bias toward safety).
  • Government version: NASA’s NAFTU (NASA Autonomous Flight Termination Unit) — fully funded in 2020, certification targeted for February 2022, and mandated for U.S. Department of Defense launches starting 2025.

What it is and how it works

Traditionally, a rocket’s flight was watched by a human range safety officer staring at radar screens. If the rocket went dangerously wrong, that person manually transmitted a “destruct” signal from the ground. AFTS moves that entire decision onto the vehicle itself.

During flight, redundant onboard processors continuously read the rocket’s position, velocity (speed and direction), and attitude (which way it is pointing) from the GPS receivers and the inertial measurement unit. The software compares the rocket’s real path against its mission rules. Those rules can include an allowable flight corridor (a 3D safety boundary in the sky), speed limits, predictions of where the vehicle would hit the ground if it failed right now, and signs of trouble like loss of thrust or tumbling.

Think of it like a self-driving car that already knows the exact lane it must stay in. If the rocket leaves its safe corridor — or its predicted impact point would endanger people — the AFTS issues a termination command on its own, in milliseconds: shutting down the engines and/or firing destruct charges (small explosives, called ordnance) to break up the vehicle so debris falls in cleared, empty areas. Because the logic rides on the rocket, it keeps working over the horizon, beyond the reach of ground radar or the delay of a radio signal.

Why it matters

AFTS removes the ground-based, human-in-the-loop destruct chain that used to limit how often a range could launch. It eliminates the need for expensive, maintenance-heavy tracking radars and command-transmitter stations. A range can reconfigure between different rockets almost instantly, shrinking turnaround time. It also allows wider launch windows and smaller downrange safety zones, meaning less airspace and ocean must be cleared, and it reacts faster and more consistently than a person could.

Those gains add up. By adopting AFSS, the U.S. Eastern Range at Cape Canaveral targeted up to about 48 launches a year — roughly three times its earlier average — with fewer ground staff. That is a major reason the technology became standard for high-tempo commercial flights and was mandated for U.S. Department of Defense launches from 2025.

There is a trade-off. Because the mission rules are fixed at liftoff, there is no human judgment call mid-flight — so the rule set and the software certification must be extremely rigorous. This is an especially serious concern for crewed rockets, where an automatic destruct decision is far higher-stakes, and NASA has published dedicated studies on the question.

Notable examples

  • SpaceX Falcon 9 and Falcon Heavy: Among the first operational rockets to fly AFTS as their primary safety system. The system was demonstrated on the F9R Dev1 test booster in 2014, which it autonomously destroyed after a faulty sensor reading sent it off course.
  • ATK / NASA Wallops: The Autonomous Flight Safety System made its operational debut at NASA’s Wallops Flight Facility on November 19, 2013.
  • Rocket Lab Electron: The first vehicle to fly NASA’s shareable, NAFTU-based autonomous flight safety system, from the Mid-Atlantic Regional Spaceport at Wallops.
  • NASA NAFTU: A government-developed, vehicle-agnostic AFTS released to industry and mandated for U.S. DoD launches from 2025. It is deliberately more complex than a single-vehicle, in-house unit like SpaceX’s, because it must be reconfigurable across many vehicles and ranges.
  • Next-generation vehicles: ULA’s Vulcan Centaur and Blue Origin’s New Glenn, plus considerations for NASA’s Space Launch System and crewed vehicles.
OPERATING PRINCIPLE

Onboard GPS compares vehicle position/velocity against pre-loaded flight safety limits; autonomous destruct if violated

VEHICLES USING THIS SYSTEM
Falcon 9Atlas VVulcanVarious US launch vehicles
SPECIFICATIONS
CATEGORYRange Safety
TYPEFlight Termination System
MANUFACTURERVarious (Ensign-Bickford, SpaceX, ULA)
MASS15 kg
POWER CONSUMPTION25 W
REDUNDANCYDual-redundant (independent chains)
RADIATION HARDENEDN/A (short mission duration)
ACCURACYGPS-based position accuracy < 10 m
FIRST USEJanuary 1, 2017
STATUSActive
DETAILED SPECS
DECISION_TIME_MS< 100
GPS_CHANNELS12
BATTERY_LIFE_HR8
ARM_FIRE_INDEPENDENTYes

Related Articles