Redundancy
Using the redundancy settings, a pair of OPC routers can be configured so that the secondary service takes over if the primary service fails. The OPC Router operates in hot standby mode: The secondary service establishes connections to the endpoints while in standby mode and can therefore immediately take over the active role in the event of a failover. Additionally, project synchronization can be used to transfer project states between the two systems.
This built-in secure redundancy is one of several concepts the OPC Router uses to mitigate outages and keep systems accessible. Depending on the approach, either the OPC Router itself is operated in a redundant configuration, or the connection to an external target system is switched to an alternative remote site. You can configure additional redundancy and failover options in the designated locations, such as within the relevant plug-in or via an upstream reverse proxy.
| Aspect | Secure Redundancy | Third-Party System Redundancy with Enterprise+ | External HTTP(S) Failover for Server Endpoints |
|---|---|---|---|
| Purpose | Makes the OPC Router itself redundant. | Used for the redundant connection of an external target system, such as an alternative OPC server. | Complements the internal OPC Router redundancy with a stable external address. |
| configuration | Configure this in the OPC Router settings. | Configured in the respective plug-in. | This is configured via an upstream reverse proxy. |
| Scope and Special Features | Depending on the version, it supports additional redundancy features, such as project synchronization. | This does not make the OPC Router itself redundant and requires the “Redundant Connection of Third-Party Systems” feature from the Enterprise+ add-on. | Applies to REST, Web Management, and suitable HTTP(S)-based access paths and does not replace either the internal OPC Router redundancy or the third-party system redundancy of an external target system. |
Behavior During Operation
As long as the primary service is available, the secondary service remains on standby. If the primary service fails, the secondary service takes over the active role. In the secondary service’s status display, the active state is shown in green and the standby state in blue.
Project synchronization and failover serve different purposes: Project synchronization transfers project states between two OPC routers. HTTP(S) failover, on the other hand, ensures that clients can continue to reach an active endpoint via a stable address.
Topics in This Section
Redundancy Configuration
- Current secure redundancy with heartbeat, role switching, and optional project synchronization (2nd generation)
- Differences between 1st and 2nd generation directly in the context of the respective settings
Migration and Troubleshooting
- Differences between Legacy and Secure Redundancy
- Common errors related to firewalls, certificates, and pre-shared keys
Secure Redundancy: Migration and Troubleshooting
SAP in Redundancy Mode
- Understanding SAP-Specific Considerations in Redundancy Mode
- Notes on Triggers, User Concepts, and Failover Tests
Third-Party System Redundancy with Enterprise+
- Redundant connection of an external target system via the respective plug-in
- Requires the Enterprise+ add-on and must be clearly distinguished from internal redundancy
Third-Party System Redundancy with Enterprise+
HTTP(S) Failover Concepts
- External failover for RESTful web service, OPC UA server, and web management functions in the OPC Router
- Examples using reverse proxies such as Nginx and Traefik
HTTP(S) Failover Concepts for REST, OPC UA Server, and Web Management in the OPC Router