Some of San Francisco’s most important emergency infrastructure is invisible until you know what a brick circle in an intersection means.
Beneath those markers are cisterns: underground reservoirs built to give firefighters water when the ordinary municipal system cannot be trusted.
They exist because in April 1906, the city learned what happens when the hydrant network fails at the same moment the city begins to burn.
The earthquake exposed a design assumption.
Before the 1906 earthquake, San Francisco relied heavily on the same general water infrastructure for daily use and firefighting. When the earthquake broke mains and disrupted pressure, firefighters lost access to water across large parts of the city. Fires then burned for days through districts that could not be defended normally.
The lesson was not simply that the pipes needed to be stronger. It was that firefighting water needed an independent path.
The answer was a second system.
San Francisco’s Auxiliary Water Supply System, now known as the Emergency Firefighting Water System, was built in the years after the disaster and entered service in the early twentieth century. SFPUC describes it as an independent high-pressure system created specifically for fire protection.
Its components were intentionally varied: high-pressure pipelines, a high-elevation reservoir, large storage tanks, pumping stations, fireboats, Bay-water intakes, and cisterns. The system could deliver much higher pressure than the ordinary municipal network and could draw seawater when stored supplies were insufficient.
That diversity is the point. The city was no longer depending on one source, one pressure regime, or one route.
Cisterns turn intersections into reservoirs.
San Francisco’s emergency cisterns are distributed through the city rather than concentrated in one giant tank. SFPUC now reports more than two hundred cisterns citywide, typically holding about 75,000 gallons each; the largest, near City Hall, holds approximately 220,000 gallons.
Distributed storage does something a single reservoir cannot. It places water closer to where a fire may occur and preserves options if pipelines are damaged.
A cistern under an intersection is therefore less impressive than a monumental dam and more useful in a very specific emergency.
The Bay became part of the system.
The city also built the ability to draw water directly from San Francisco Bay. Pumping stations and suction connections meant firefighters were not limited to finite stored reserves.
That was a direct answer to one of 1906’s strangest contradictions: a city surrounded by enormous quantities of water could still lack usable firefighting water because the infrastructure connecting source to hydrant had failed.
The post-earthquake system tried to remove that contradiction.
Redundancy became visible in engineering.
Modern resilience is often described in abstract language. San Francisco’s emergency water system makes it physical.
If the municipal network works, use it. If pressure fails, use the high-pressure network. If stored water is limited, draw from the Bay. If pipelines are damaged near a fire, access a local cistern. If the fire is near the waterfront, use fireboats and suction connections.
No single backup solves every problem. The system survives by having several imperfect backups that fail differently.
The system is still evolving.
SFPUC continues to expand and seismically strengthen the emergency network. New cisterns have been added, pipelines extended, and westside projects are being developed to improve firefighting water access in neighborhoods historically less served by the original system.
That continuing investment matters because redundancy is not a one-time construction project. Cities change. Hazards change. Infrastructure ages. A backup system that is never maintained eventually becomes another assumption.
The Final Vestige
The circles marking San Francisco’s cisterns are easy to walk past. They do not look like monuments to disaster.
But they are exactly that.
They are the city’s memory of hydrants that went dry in 1906, translated into concrete beneath the street.
The household version of that principle is much smaller: do not let one pipe, one container, one treatment method, or one assumption carry the entire burden of something essential.
Redundancy is rarely dramatic before it is needed. That is why it works.
Start with the failure: The Morning San Francisco Lost Its Water tells the 1906 story that made this second system necessary.