LADX
Start free
← Resources
Networking·7 min read·

OPC UA: what it is for, and what it is not for

The protocol that connects the plant floor to everything above it, and the reason it is not a fieldbus.

Short answer

OPC UA moves data between control systems and the software above them: historians, MES, ERP and analytics. It carries a self-describing information model, so a client can discover what a server offers rather than being told in advance. It is not a fieldbus and is generally too heavy for cyclic I/O, which remains the job of EtherNet/IP or PROFINET.

Which protocol sits whereENTERPRISEOPC UAMQTTCONTROLEtherNet/IPPROFINETModbus TCPDEVICEIO-LinkPROFIBUS DPModbus RTUEthernet carries most of it now, which is why the layers blur.

OPC UA is what connects the control layer to everything that wants to read from it, which is increasingly everything.

The information model is the point

Older protocols move numbers. A register holds 4,872 and something elsewhere knows that means tank level in litres.

OPC UA carries the description with the data: names, types, units, engineering ranges and the relationships between objects. A client can connect and ask what is available.

That is what makes it useful for anything above the controller, where the consumer was not designed alongside the machine.

Where it does not belong

Cyclic I/O. It is too heavy for updating a hundred bits every millisecond, and that is not what it is for.

The rule of thumb: fieldbus below the controller, OPC UA above it.

The security footgun

OPC UA has real security: certificates, encryption, authentication. It also has a None mode, which is faster to get working during commissioning and has a way of staying enabled forever.

If you are auditing a plant, this is worth checking first. It is common and it is a genuine exposure.

Common questions

Is OPC UA a replacement for PROFINET or EtherNet/IP?
No. Those are fieldbuses moving small amounts of I/O data on a fixed cycle with hard timing. OPC UA moves richer, self-describing data to systems above the controller, typically on demand or by subscription. They solve different problems and coexist on the same plant.
Is OPC UA secure by default?
It has strong security built in, including certificates, encryption and user authentication, but it is frequently deployed with security disabled because that is faster to commission. An OPC UA server running in None security mode is an open door, and this is a common finding in plant audits.

Keep reading