I know most engines are super reliable today, but do manufacturers do anything to at least make an explosion result in the least damage possible?

  • 7
    $\begingroup$ Fun fact: If you're riding in a Dash 8, look for the little vertical red stripe on the inside of the nacelles. That's where the turbine disc is. $\endgroup$ – John K Jan 12 '20 at 23:48
  • 1
    $\begingroup$ Southwest Flight #1380, April 2018, had the left engine explode with shrapnel piercing the cabin and damaging control surfaces on the wing. The pilot was still able to successfully land. There are a few dramatization, and scientific discussion, videos of this event on youtube. $\endgroup$ – user312440 Jan 14 '20 at 1:27

The most (kinetic) energy is in the fan and turbine blades and disc. The engine is enclosed in a containment chamber whose purpose it is to protect the rest of the airplane from shrapnel in case of a fan disc or fan blade failure. Here's a video of a test where a fan blade failure is simulated:

As you can see, the fan blade more or less completely destroys the engine, but no debris or shrapnel leaves the containment chamber.

Unfortunately, the turbine disc and blades have too much energy to be realistically containable. (In other words: the required shielding would be too thick and heavy.)

Engine failures where debris or shrapnel is able to leave the containment chamber is called an uncontained engine failure, and they are very rare, but they still do happen.

Since it is impossible to contain a turbine blade or disc failure, risks are mitigated in different ways, e.g. by requiring regular, very detailed inspections and extremely tight tolerances.

  • 1
    $\begingroup$ I disagree with your first statement. I was of the understanding that the turbine discs/blades had the most energy and were uncontainable. $\endgroup$ – Notts90 supports Monica Jan 12 '20 at 22:01
  • $\begingroup$ Blade and vane failures are bad, but a disc failure is about certain to be catastrophic. $\endgroup$ – blacksmith37 Jan 12 '20 at 22:13
  • 1
    $\begingroup$ Indeed, the reason why the failure on QF32 was uncontained was because it threw a turbine disc. Pieces of the disc punctured the wing, severing multiple electronic and hydraulic lines, as well as blowing holes in the wing fuel tanks. It was the #2 engine (inboard left side) that failed, but, due to the severed control lines, the #1 engine (left outboard) was also rendered uncontrollable. Even after they landed, they ultimately had to foam the #1 engine in order to shut it down. They weren't even able to cut off fuel flow to it. $\endgroup$ – reirab Jan 13 '20 at 9:11
  • $\begingroup$ In 2018, there were a couple incidents where a poorly maintained turbine had fan blades shear off in just the wrong location, hitting a structural weakness and causing explosive decompression in the cabin from engine shrapnel hitting a window. One of the planes had someone almost sucked out of the plane, and even though the pilots did an outstanding job landing the plane quickly and safely, the affected passenger did end up dying. $\endgroup$ – Nzall Jan 13 '20 at 19:23
  • $\begingroup$ That's still "designed to do the least damage possible", a.k.a. design-basis event. That mother nature can come up with scenarios that go beyond the design basis is the reason why life can become so interesting all of a sudden... $\endgroup$ – DevSolar Jan 14 '20 at 13:14

The main place engine manufacturers will focus on minimizing damage is with the large fan at the front of a turbofan engine. FAA Advisory Circular 33-5 discusses the regulations that cover this. The manufacturer must show that the worst case blade rotating at the highest RPM can successfully be contained. Only 15 seconds after the event is the operator allowed to adjust engine controls. The engine and related structure must also be able to withstand the resulting imbalance for the rest of the flight, especially for ETOPS certification. While the windmilling engine will produce drag, the aircraft will still remain controllable.

However, an engine failure is an extremely dynamic event, dissipating large amounts of energy. It's up to the aircraft manufacturer to ensure the engines do not pose a threat to safety of flight in the event of an uncontained engine failure. FAA Advisory Circular 20-128A discusses some of the methods on minimizing the hazards of an uncontained engine failure on the airplane. Below is a figure from this document showing typical locations of systems in the fuselage.

Systems layout within fuselage

Each critical system will have redundancy, and is routed such that debris from an engine failure cannot damage enough systems to prevent safety of flight. Below, tail mounted engine is shown, plotting debris paths versus systems locations.

Debris path from engine

The FAA also published a report on Large Engine Uncontained Debris Analysis. This report is full of statistics and photos of damage caused by uncontained engine failures. Analysis considers the size of the debris involved, the speed at which it impacts other structure, and relative angles between the debris and impact surface.

Thickness needed to shield against debris

One of the most critical systems to protect in a twin-engine airplane is the remaining engine. Shielding may be required to prevent debris from one engine from crossing over and damaging critical parts of the other engine. Manufacturers have also sought patents on ways of tilting the engines to keep them out of each other's debris paths.

New technologies such as open rotor fans present additional challenges to protect the aircraft from a blade failure, as there is no fan case to contain them.


A jet engine may not contain a severe explosion (for whatever reason) but there are various mandated things that are put in place to help protect the airframe.

  • The engines are generally mounted such that they shear off cleanly and away from the airframe.
  • There are a few AC's like this one and this one that discuss how to deal with and comply with various safety regulations around unconfined blade failure and unconfined rotor failure, as well as this one about pylon loading.
  • Jets are generally produced to a very high standard to prevent issues from happening in the first place which is in a way a safety consideration.

Cowlings can be designed to contain fan failures but if the core comes apart you have some pretty high velocity shrapnel coming out that nothing short of quarter inch armour plate will stop.

The main design feature you typically see to mitigate burst risk is the placement of cable runs and hydraulic runs, where there are redundant runs, spaced apart in the fuselage to reduce this risk of shrapnel taking out all of the cable runs from a burst (as happened with that DC-10 all those years ago, because they were forced to run right next to the tail engine to get to the fin). You might also see strategically placed armour plates located between a cable run and the turbine disc, where a single run is critical for safety.

Beyond that, control of risk is mostly about maintenance and inspection of the components, same as with things like primary structure. When turbine bursts happen it's usually because of some microscopic manufacturing flaw in the disc that went undetected and falls into the random s--t happens category. As I like to say, it's a dangerous world for everybody but rocks.

  • $\begingroup$ So let me guess... quarter inch armor plate is a tad heavy, so you don't use that? $\endgroup$ – rackandboneman Jan 13 '20 at 9:04
  • $\begingroup$ Would quarter-inch plating even stop pieces of a turbine disc at high RPM? In QF32, they blew straight through the wing entire wing. Luckily, none of them struck the fuselage. High-velocity pieces of jet engines flying into the passenger cabin are typically fatal. $\endgroup$ – reirab Jan 13 '20 at 9:15
  • 2
    $\begingroup$ ...did you mean quarter-inch or quarter-foot? $\endgroup$ – rackandboneman Jan 13 '20 at 9:38
  • 1
    $\begingroup$ @JohnK A typical turbine rotor stage has a mass of around 100kg. A catastrophic failure will usually produce one "fragment" with about half the total mass. Stopping a 7.62mm bullet is an irrelevant comparison. $\endgroup$ – alephzero Jan 13 '20 at 18:22
  • 2
    $\begingroup$ I once saw some pictures of a C130 aircraft which had a propeller blade fail and detach - lucklly, while on the ground, and the aircraft was empty. There was a neat blade-shaped hole in the over-wing exit door where the blade entered the aircraft, and a similar hole in the opposite door where it exited. So much for "containment of explosions" in real life. $\endgroup$ – alephzero Jan 13 '20 at 18:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.