Federation and redundancy: site topology is not the same as active collection

A Site is an independent HQControl runtime. Local site is the current server, and Remote site is one that the current site explicitly joins. If A joins B, A may use only the capabilities that B exposes; B does not automatically join A. Use a stable site code and a reachable HTTPS address for every site.

Federation

Federation: Federation and redundancy: site topology is not the same as active collection

Federation establishes directional trust and capability boundaries between sites. Redundancy decides which node directly collects a PLC. Neither feature creates a second active PLC connection.

Federation is directional

A Site is an independent HQControl runtime. Local site is the current server, and Remote site is one that the current site explicitly joins. If A joins B, A may use only the capabilities that B exposes; B does not automatically join A. Use a stable site code and a reachable HTTPS address for every site.

  • Single-site projects only need a verified local site and node.
  • Configure each required direction separately in a multi-site project.
  • When a reverse proxy is used, enter the actual external HTTPS address.
  • Web, IO, alarm, and trend capabilities can be enabled independently.

Redundancy changes collection responsibility

Only one active IO Owner directly polls a PLC at a time. A standby node can become the new owner only after the takeover conditions are met; a non-owner does not open a second PLC connection. Changing owner cannot restore data when the PLC itself is offline.

Verify value, quality, and source together

Check System Status, Sites, Devices, and Tag Diagnostics in that order. Verify federation and IO module health, identify the current owner, then inspect the value, quality, source, and timestamp of critical tags. When the remote source is unavailable, quality must degrade explicitly; never treat a cached or persisted old value as current Good data.