Data Distribution Service (DDS)

DDS eliminates the need for a message broker by establishing a virtual Global Data Space (GDS) . Publishers simply write data to this logical space, and subscribers with matching Quality of Service (QoS) policies automatically receive it.

• Decentralized Discovery: Nodes locate each other via the Real-Time Publish-Subscribe (RTPS) wire protocol without a central registry.
• Schema-First Design: Data types are defined using Interface Definition Language (IDL) , ensuring strict type safety across heterogeneous systems.

Unlike stateless messaging protocols, DDS offers over 20 fine-grained QoS policies that govern every aspect of data flow, allowing engineers to explicitly define non-functional contracts.

• Reliability: Configurable from 'Best Effort' for high-speed sensor telemetry to 'Reliable' for critical protection commands.
• Durability: 'Transient Local' durability ensures late-joining subscribers receive the last known state, crucial for state estimation initialization.
• Deadline & Liveliness: Automatically detect failed nodes or missed data updates within microseconds.

The RTPS wire protocol, standardized as IEC 61158, is the physical transport layer of DDS. It maps the logical Global Data Space onto standard multicast and unicast transports.

• Peer-to-Peer Architecture: Direct node-to-node communication eliminates single points of failure and minimizes latency.
• Automatic Discovery: Two-phase participant and endpoint discovery allows dynamic plug-and-play for Intelligent Electronic Devices (IEDs) .
• Transport Agnostic: Operates over UDP/IP, TCP/IP, and shared memory, adapting to both LAN and WAN topologies.

DDS maintains a local cache of the global data state in each participant, enabling true data-centricity. Applications interact with the cache, not the network, ensuring immediate read access.

• Zero-Copy Reads: Subscribers access data directly from the local history cache without deserialization overhead.
• Conflict Resolution: The Ownership QoS policy determines which publisher's data takes precedence when multiple sources write to the same topic.
• Partitioning: Logical isolation of data flows using string-based partitions prevents information leakage between distinct control domains.

The DDS Security specification provides a pluggable, decentralized security framework without relying on a central certificate authority for runtime enforcement.

• Authentication: X.509 certificates and Pre-Shared Keys verify the identity of every participant.
• Access Control: Per-topic read/write permissions are enforced cryptographically via signed governance documents.
• Cryptography: Built-in plugins for AES-GCM and AES-GMAC provide confidentiality and integrity for data-in-motion, essential for substation automation.

For large-scale Wide-Area Monitoring Systems (WAMS) , the DDS Routing Service bridges isolated DDS domains across firewalls and WAN links without breaking the data model.

• Transformation Engine: Routes can filter, aggregate, and transform data on the fly to reduce bandwidth over constrained links.
• WAN Optimization: Compresses and batches updates to maintain real-time guarantees over high-latency connections.
• Protocol Bridging: Connects DDS domains to legacy SCADA protocols or cloud ingestion points via modular adapters.