# Ignition - Redundant / Self-Contained Architecture - Design Recommendations **URL:** \ **Category:** Ignition\ **Created:** [March 24, 2025, 4:00pm UTC](https://forum.inductiveautomation.com/t/ignition-redundant-self-contained-architecture-design-recommendations/104102 "2025-03-24T16:00:09Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Stratus](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/stratus/32/72673_2.png) [@Stratus](https://forum.inductiveautomation.com/u/Stratus)\ **Post date:** [March 24, 2025, 4:00pm UTC](https://forum.inductiveautomation.com/t/ignition-redundant-self-contained-architecture-design-recommendations/104102/1 "2025-03-24T16:00:09Z")
I am on the hunt for a SCADA package that would suit my needs, i.e. looking for a self-contained redundant supervisory system with some data handoff links to external historian / DCS (as required). The key here is redundancy: redundancy in the networks to the field device and redundancy in the communications link between the servers/external devices. - **Field Device Communications Links Redundancy** Most field devices will communicate using Modbus TCP or Modbus RTU-over-TCP. Each field device will have two network ports and will be connected to different networks (different subnets). As far as I can see Ignition does not support such a functionality out-of-the-box (redundant links to the same device). But I assume that with some scripted tag name manipulation, I would be able to switch between the tags from either of those links, based on the link status? Or is there a better way to do it? - **Server-to-Server Redundancy** I would like to run two network cables between the two Ignition Gateway nodes, each on its own dedicated subnet. But again, this does not appear to be supported? Do I have to use port teaming in this instance? Or could I still use two separate networks and then configure hosts file (on Windows) accordingly? Note that this system will not have a DNS server configured (unless absolutely necessary), hence why using hardcoded entries in a file. - **Database Server Redundancy** Assume that the easiest way of maintaining a redundant link to the SQL server is to implement two separate networks and then either use a DNS server or hardcoded hosts file entries. Or is SQL database link redundancy supported natively by Ignition? Just trying to determine what would the best approach be for maintaining redundancy with minimal hardware and/or effort. Since I have little experience with Ignition, I do not want to over-engineer anything. Essentially the system has to survive the loss of a single network and/or a single server. Would architecture similar to the one shown on the attached drawing work? Or is there a better/easier way to achieve it? ![Overview](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/4/44ee7692c99a6c7c78b239bb71ad6d9923bce750.jpeg) ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 24, 2025, 4:22pm UTC](https://forum.inductiveautomation.com/t/ignition-redundant-self-contained-architecture-design-recommendations/104102/2 "2025-03-24T16:22:15Z")
> [@Stratus](#): > > Field Device Communications Links Redundancy > .... > Or is there a better way to do it? My alternate Modbus module's client driver directly supports dual connections to devices. > [@Stratus](#): > > Server-to-Server Redundancy > I would like to run two network cables between the two Ignition Gateway nodes, each on its own dedicated subnet. Nope. Redundancy communications must happen on one subnet. Consider using multiple-VLAN aka Trunk connections to your servers, and include a trunk between your primary and secondary switches, with all trunks using Rapid Spanning Tree Protocol for failover. Do the same with your 3rd and 4th switches, too. > [@Stratus](#): > > Database Server Redundancy > .... > easiest way of maintaining a redundant link to the SQL server is to implement two separate networks No, use native DB clustering such that the IP address for the cluster is floating, assigned to whatever the current master instance happens to be. Make this the same subnet that the gateways use for redundancy, to avoid split brain scenarios. ---
**Author:** ![Stratus](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/stratus/32/72673_2.png) [@Stratus](https://forum.inductiveautomation.com/u/Stratus)\ **Post date:** [March 31, 2025, 1:07pm UTC](https://forum.inductiveautomation.com/t/ignition-redundant-self-contained-architecture-design-recommendations/104102/3 "2025-03-31T13:07:29Z")
> [@pturmel](#): > > Consider using multiple-VLAN aka Trunk connections to your servers, and include a trunk between your primary and secondary switches, with all trunks using Rapid Spanning Tree Protocol for failover. Do the same with your 3rd and 4th switches, too. Does this apply to both the end-device connections (Modbus), and server-to-server connections (server redundancy comms)? So in your Modbus driver, the two IPs have to be on the same subnet and I could not have for example 192.168.0.1/24 and 192.168.1.1/24? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 31, 2025, 1:15pm UTC](https://forum.inductiveautomation.com/t/ignition-redundant-self-contained-architecture-design-recommendations/104102/4 "2025-03-31T13:15:58Z")
> [@Stratus](#): > > Does this apply to both the end-device connections (Modbus), and server-to-server connections (server redundancy comms)? I'm not sure what you mean. If your redundant servers' network connections are trunks, then each carries multiple VLANs, presumably with separate subnets per VLAN. RSTP runs across the trunk, not per VLAN. > [@Stratus](#): > > So in your Modbus driver, the two IPs have to be on the same subnet No, they can be in separate subnets, and **should be** , to make your routes push them through different paths at the boundary between RSTP-driven redundant trunks and non-redundant access ports to devices. ---
**Author:** ![Stratus](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/stratus/32/72673_2.png) [@Stratus](https://forum.inductiveautomation.com/u/Stratus)\ **Post date:** [March 31, 2025, 1:30pm UTC](https://forum.inductiveautomation.com/t/ignition-redundant-self-contained-architecture-design-recommendations/104102/5 "2025-03-31T13:30:29Z")
OK, makes sense now, I misunderstood your original comment regarding trunks. Thanks for all the suggestions.