
3Ć55 Theory of Operation: Redundancy
Original Ć June 1990 CE4.2:CL6211
3.6.3 Redundant Controller Normal Online Operation
The redundant controllers normal online operation requires the ACTIVE
controller to continuously update the STANDBY controller, to keep the
STANDBY controller matched to the current operating point of the
ACTIVE controller. Effectively, the STANDBY controller is forced to track
the operation of the ACTIVE controller.
3.6.3.1 Inter-Controller Tracking
Under normal operation, redundant controllers are continuously passing
data back and forth between the ACTIVE and STANDBY controllers.
Both status and tracking information is passed between the controllers.
A special inter-controller tracking message is passed as often as
possible, to continuously keep the STANDBY controller updated to the
current operating point of the ACTIVE controller. This is NOT a
lock-step redundancy, that is, the controller central processing units are
not forced to examine and validate each operation that the other
controller performs. The inter-controller tracking message will force the
STANDBY controller to match the ACTIVE controller at a specific instant
in time. The STANDBY controller will then continue performing its normal
forward control algorithms - as if it were in control of the outputs (but it
actually is not in control of the outputs).
3.6.3.2 Tuning Parameter Handshake
Any tuning parameter change received at the active controller is
immediately saved into Non-Volatile Memory (NVM). This allows the
controller to retain this data on a power fail restart condition. The same
tuning parameter change request is also queued for transmission to the
STANDBY controller. This will guarantee that the STANDBY controller is
operating with the same tuning parameter constants as the ACTIVE
controller.
3.6.4 Redundant Controller Power Fail Restart
The redundant controllers will restart according to the following
sequence after any power failure occurs.
Commenti su questo manuale