At 41,000 feet over the Atlantic, Air Transat Flight 236 ran out of fuel. Both Rolls-Royce engines on the Airbus A330 wound down to silence. For the 306 people aboard, the next 19 minutes would be the longest of their lives — a powerless glide toward a runway in the Azores that most of them had never heard of. They made it. Every single one.

The scenario sounds like the premise of a disaster film: total engine failure at cruising altitude. But the engineering reality is more reassuring than the headline suggests. Modern commercial jets are not flying bricks. They are, in fact, remarkably efficient gliders — and the procedures, training, and backup systems designed for exactly this scenario are among the most thoroughly rehearsed in all of aviation.

The Physics: Why Jets Glide Better Than You Think

The moment both engines fail, a commercial aircraft does not drop out of the sky. It transitions into an unpowered glide, governed by the same aerodynamic principles that keep sailplanes aloft for hours. The key metric is the glide ratio — the horizontal distance covered per unit of altitude lost.

A Cessna 172 has a glide ratio of around 9:1. A modern sailplane can achieve 60:1 or higher. Commercial jets sit surprisingly high on this spectrum. The Boeing 737 and Airbus A320 families achieve approximately 17:1. The larger A330 and Boeing 777 — with their longer, more efficient wings — can reach 18:1 to 20:1. In practical terms, an A320 at 35,000 feet has roughly 180 kilometers of glide range. A 777 at the same altitude has over 200 km.

This is not theoretical. It has been demonstrated in real emergencies, repeatedly.

Step by Step: What Happens in the Cockpit

When both engines fail simultaneously, the cockpit sequence follows a precise, well-drilled procedure:

0–5 seconds: Engine failure warnings illuminate. The ECAM (Electronic Centralised Aircraft Monitor) on Airbus, or EICAS (Engine Indicating and Crew Alerting System) on Boeing, displays the failure. The aircraft begins to decelerate.

5–15 seconds: The crew pitches the nose down to establish the optimum glide speed — typically around 220–250 knots depending on aircraft type and weight. This is the speed that maximizes distance per foot of altitude lost.

15–30 seconds: The Ram Air Turbine (RAT) deploys — either automatically or manually. This small propeller drops from the fuselage into the airstream, using ram air pressure to generate hydraulic and electrical power. It provides enough energy to run essential flight instruments, one hydraulic system, and critical avionics.

30 seconds – 2 minutes: Pilots attempt engine restart using the windmill restart procedure. At altitude, airflow through the engines may be sufficient to spin the turbine and reignite combustion. If fuel is available and the engine is mechanically intact, restart success rates are high.

2–5 minutes: If restart fails, the crew declares a MAYDAY, identifies the nearest suitable airport using onboard databases, and begins planning the approach. ATC clears all traffic from the flight path.

5+ minutes: The aircraft descends in a controlled glide at approximately 2,000–3,000 feet per minute. At this rate, a jet at 35,000 feet has roughly 12–17 minutes of flight time remaining — enough for a carefully planned approach.

The Gimli Glider: When a 767 Ran Out of Fuel

On July 23, 1983, Air Canada Flight 143 — a Boeing 767-200 — ran out of fuel at 41,000 feet over Manitoba, Canada. A metric-imperial conversion error during fueling had left the aircraft with less than half the required fuel. Both Pratt & Whitney engines flamed out in sequence.

Captain Robert Pearson, an experienced glider pilot, pitched for best glide speed and turned toward a decommissioned RCAF base at Gimli, Manitoba. The 767 glided 17 minutes across 75 nautical miles. On approach, Pearson found the runway was being used as a drag racing strip — complete with spectators and vehicles. He executed a forward slip — a crosswind technique almost never used on large jets — to lose altitude rapidly, touching down at excessive speed but with all 69 occupants uninjured.

The aircraft, registered C-GAUN, returned to service after repairs and flew for Air Canada until 2008. It became the most famous gliding jet in history.

Air Transat 236: The Atlantic Glider

On August 24, 2001, Air Transat Flight 236 was over the mid-Atlantic en route from Toronto to Lisbon when a fuel leak — caused by an improperly installed hydraulic pump — drained both wing tanks. The Airbus A330 lost both engines at 34,500 feet, approximately 120 km from Lajes Air Base in the Azores.

Captain Robert Piché and First Officer Dirk DeJager glided the A330 for 19 minutes across 120 km, making the longest glide by a commercial aircraft in aviation history. The landing was hard — the brakes locked, blowing eight main tires — but all 306 occupants survived. Sixteen passengers sustained minor injuries.

The RAT deployed automatically, providing the crew with basic flight controls and instruments throughout the descent. Without it, the outcome would have been very different.

US Airways 1549: Miracle on the Hudson

On January 15, 2009, US Airways Flight 1549 — an Airbus A320 — struck a flock of Canada geese at 2,818 feet, just three minutes after takeoff from LaGuardia Airport. Both CFM56 engines ingested birds and lost thrust almost simultaneously.

Captain Chesley “Sully” Sullenberger and First Officer Jeffrey Skiles had approximately 208 seconds to make a decision. At low altitude over one of the most densely populated metropolitan areas on Earth, there were no runways within glide range. Sullenberger chose the Hudson River.

The A320 touched down on the river at approximately 150 mph. The fuselage remained intact. All 155 occupants evacuated onto the wings and into rescue boats within minutes. There were zero fatalities. The event, immediately dubbed the “Miracle on the Hudson,” became the most famous emergency landing in aviation history and prompted a wave of renewed interest in bird strike prevention and engine certification standards.

The Ram Air Turbine: Aviation’s Emergency Generator

The Ram Air Turbine is one of the most critical — and least discussed — safety systems on modern jets. It is a small propeller, typically 50–65 cm in diameter, stored in a compartment on the aircraft’s belly or lower fuselage. When deployed, it drops into the airstream and spins at high speed, converting the kinetic energy of the aircraft’s forward motion into hydraulic and electrical power.

On Airbus aircraft, the RAT powers the Blue hydraulic system, providing control of the flight control surfaces — ailerons, elevators, rudder — and essential avionics. On Boeing aircraft, the RAT typically drives a hydraulic pump connected to the flight controls. In both cases, the RAT provides enough power to fly and land the aircraft, but not enough for non-essential systems like cabin lighting, galleys, or entertainment.

The RAT has been deployed in real emergencies dozens of times. It has never failed to provide the power needed to bring an aircraft to a safe landing.

ETOPS: Planning for the Worst Over Oceans

The dual-engine-failure scenario is so thoroughly addressed that it shaped one of aviation’s most important regulatory frameworks: ETOPS — Extended-range Twin-engine Operational Performance Standards.

ETOPS certifies how far a twin-engine aircraft may fly from the nearest suitable diversion airport. Early twin-engine jets were restricted to routes within 60 minutes of an airport. Modern ETOPS ratings extend to 180 minutes (most current twin-engine jets), 240 minutes (Boeing 787, A350), and even 370 minutes for certain operations.

Achieving an ETOPS rating requires demonstrated engine reliability exceeding specific thresholds, proven maintenance protocols, crew training for extended diversions, and route-specific planning that identifies all diversion airports along the flight path. It is the reason twin-engine aircraft now dominate transoceanic routes that were once the exclusive domain of four-engine jets like the 747.

The Bottom Line: Jets Are Designed for This

Dual engine failure is not a design oversight — it is a design requirement. Every commercial aircraft certified under FAR Part 25 (or EASA CS-25) must demonstrate controllable flight and a safe landing following complete loss of thrust. The glide ratio, the RAT, the engine restart procedures, the ETOPS framework — all of these exist because engineers and regulators asked the question “what if both engines quit?” and then built systems to answer it.

The Gimli Glider glided to safety. Air Transat 236 crossed 120 km of ocean without power. US Airways 1549 ditched on a river with zero fatalities. In each case, the aircraft performed as designed, and the crews executed as trained.

Both engines dead at 35,000 feet is terrifying. But it is survivable — not by luck, but by engineering.

Sources: FAA Advisory Circular 120-42B (ETOPS), NTSB Reports AAR-10/03 (US Airways 1549), Transportation Safety Board of Canada Report A83H0001 (Gimli Glider), Bureau d’Enquêtes et d’Analyses (Air Transat 236), Airbus A320 Flight Crew Operating Manual, Boeing 767 Airplane Flight Manual