# When does the redundant gateway take over

**URL:** <https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981>\
**Category:** Ignition\
**Created:** [September 25, 2025, 5:29pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981 "2025-09-25T17:29:36Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Eugene49](https://avatars.discourse-cdn.com/v4/letter/e/c6cbf5/32.png) [@Eugene49](https://forum.inductiveautomation.com/u/Eugene49)\
**Post date:** [September 25, 2025, 5:29pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/1 "2025-09-25T17:29:36Z")

</div>

A client requires a system to be always up.  
Assuming we have a robust network infrastructure.

What are the scenarios, obvious and not, where redundant gateway will takeover?

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [September 25, 2025, 5:37pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/2 "2025-09-25T17:37:22Z")

</div>

My understanding is that the gateway will fail over when the master gateway fails. The backup gateway monitors the status of the master gateway to determine this, but even a network disconnection between the master and backup will look like a failure to the backup, so keep this in mind.

What scenarios are you trying to protect against? Loss of connectivity to devices for instance will not fail over to the other server even if the backup can connect to the device when the master cannot.

---

<div class="post-metadata">

**Author:** ![Eugene49](https://avatars.discourse-cdn.com/v4/letter/e/c6cbf5/32.png) [@Eugene49](https://forum.inductiveautomation.com/u/Eugene49)\
**Post date:** [September 25, 2025, 5:46pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/3 "2025-09-25T17:46:35Z")

</div>

> [@michael.flagler](#):
>
> What scenarios are you trying to protect against? Loss of connectivity to devices for instance will not fail over to the other server even if the backup can connect to the device when the master cannot.

Protect the MES. 100% uptime of backend gateway connecting to PLCs and front end gateway facing multiple operators.

Lost of device connection does not have something to do with gateway, exactly why I ask, when does the master gateway fail over to backup gateway.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [September 25, 2025, 6:00pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/4 "2025-09-25T18:00:52Z")

</div>

> [@Eugene49](#):
>
> when does the master gateway fail over to backup gateway.

> [@michael.flagler](#):
>
> The backup gateway monitors the status of the master gateway to determine this,

That's it. When communication from the inactive gateway to the active gateway is broken, the inactive gateway will promote itself (after a configurable delay--10 seconds by default).

If only the comm channel between them dies, you will have a split-brain situation (both gateways trying to run). It is important that the connections to devices and databases run over the same physical links as the gateway-to-gateway channel.

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [September 27, 2025, 12:05am UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/5 "2025-09-27T00:05:25Z")

</div>

> [@Eugene49](#):
>
> 100% uptime

This is fundamentally impossible to achieve. Uptime is measured by number of 9's as a percentage availability. Eg five 9's / 99.999% availability means ~5mins downtime allowed in a year. Even the most sosphicated cluster of servers cannot be guaranteed to be 100% available

---

<div class="post-metadata">

**Author:** ![RohanPalshikar](https://avatars.discourse-cdn.com/v4/letter/r/7ba0ec/32.png) [@RohanPalshikar](https://forum.inductiveautomation.com/u/RohanPalshikar)\
**Post date:** [January 21, 2026, 3:10pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/6 "2026-01-21T15:10:47Z")

</div>

Hi, We are facing a split brain situation, where both gateways are writing to the database and as a result we have duplicate records. Has anyone faced this before and any solutions to this? Thanks.

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [January 21, 2026, 3:15pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/7 "2026-01-21T15:15:09Z")

</div>

I've never had the issue, but make sure your gateways can see each other. Look at the redundancy status pages on the primary and backup. Are these gateways on the same network or are you trying to do redundancy across different VLANs or networks?

---

<div class="post-metadata">

**Author:** ![bschroeder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bschroeder/32/13260_2.png) [@bschroeder](https://forum.inductiveautomation.com/u/bschroeder)\
**Post date:** [January 21, 2026, 3:19pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/8 "2026-01-21T15:19:51Z")

</div>

To add on to what @michael.flagler is saying. If the gateways can each see the database, but cannot see each other, then you will have a split brain.

---

<div class="post-metadata">

**Author:** ![RohanPalshikar](https://avatars.discourse-cdn.com/v4/letter/r/7ba0ec/32.png) [@RohanPalshikar](https://forum.inductiveautomation.com/u/RohanPalshikar)\
**Post date:** [January 21, 2026, 4:45pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/9 "2026-01-21T16:45:56Z")

</div>

We are trying to fix the network issue. It seems to be with the PORT getting blocked on which the gateways talk. Thus the gateways cant see each other but can communicate with the database. So i wanted to see if there is some solution in case this happens again, as this is the 3rd time. And when this happens in the 3rd shift at night there is tons of duplicate data.

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [January 21, 2026, 4:50pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/10 "2026-01-21T16:50:51Z")

</div>

The solution sounds like it's a network problem, not an Ignition problem. Ignition servers are doing their job and if they can't see the other server they have no way of knowing the other server is running, so they assume control. Fix your network problem and the split brain problem should go away.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [January 21, 2026, 4:54pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/11 "2026-01-21T16:54:19Z")

</div>

_ **Document** _ the fix to your firewall problem so it doesn't recur. (Though there shouldn't **be** a firewall between them, because they should be co-located.)

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [January 21, 2026, 7:35pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/12 "2026-01-21T19:35:18Z")

</div>

I suspect they could be using a software firewall (Windows blocks those ports by default) and they just needed to open a port.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [January 21, 2026, 8:57pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/13 "2026-01-21T20:57:03Z")

</div>

> [@michael.flagler](#):
>
> Windows blocks those ports by default

Ah, well, y'all know how I feel about _that_.

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [January 21, 2026, 9:36pm UTC](https://forum.inductiveautomation.com/t/when-does-the-redundant-gateway-take-over/110981/14 "2026-01-21T21:36:07Z")

</div>

I mean, they could be using some distro of Linux and maybe IT locked them down with iptables or UFW, but my bet is they're running Windows and never opened the correct ports.
