You're correct, co-location at the exchange data centre is indeed a requirement for most HFT firms.

I think (but I'm not 100% sure) that the length of network cabling is also tightly regulated at many exchanges so that nobody gains an advantage in that manner. If anybody has more insight into this, I'd love to hear about it.