Inferensys

Glossary

OPC UA Pub/Sub

An extension of the OPC Unified Architecture that enables scalable, connectionless data distribution using a publish-subscribe pattern, often combined with TSN for deterministic field-level communication.
Data scientist building training data pipeline on laptop, data preprocessing visible, technical workspace.
INDUSTRIAL COMMUNICATION

What is OPC UA Pub/Sub?

OPC UA Pub/Sub is an extension of the OPC Unified Architecture that enables scalable, connectionless data distribution using a publish-subscribe pattern, often combined with TSN for deterministic field-level communication.

OPC UA Pub/Sub is a communication model within the OPC Unified Architecture framework that decouples data producers from consumers using a publish-subscribe pattern, eliminating the point-to-point connection overhead of the traditional client-server model. It enables a single publisher to multicast messages to an arbitrary number of subscribers without prior session establishment, drastically improving scalability for Industrial IoT and sensor-to-cloud architectures.

The specification supports two transport protocols: UDP/IP for non-deterministic, wide-area distribution and Time-Sensitive Networking (TSN) for hard real-time, deterministic field-level communication. By mapping OPC UA data directly to Ethernet frames, Pub/Sub bypasses the TCP/IP stack latency, achieving microsecond-level synchronization required for motion control and high-speed manufacturing lines.

ARCHITECTURAL CAPABILITIES

Key Features of OPC UA Pub/Sub

OPC UA Pub/Sub decouples data producers from consumers, enabling scalable, connectionless communication for industrial IoT. These are the core mechanisms that differentiate it from client-server OPC UA.

01

Brokerless UDP Multicast

Enables direct, one-to-many communication on the local network without a central message broker. Publishers send UADP (UA Datagram Protocol) messages to a multicast group, and subscribers listen in.

  • Zero broker infrastructure: Eliminates a central point of failure and reduces latency.
  • Ethernet level efficiency: Uses standard Layer 2/Layer 3 multicast, ideal for high-speed machine-to-machine communication.
  • Best-effort delivery: No handshake overhead, suitable for cyclic telemetry where occasional packet loss is acceptable.

Example: A single drive controller publishing actual torque values every 1ms to 20 subscriber nodes on a machine cell network.

< 1 ms
Typical Cyclic Rate
02

Brokered MQTT Integration

Maps OPC UA data directly onto MQTT messages for cloud ingestion and wide-area distribution. Uses a central broker to manage subscriptions and ensure delivery.

  • JSON encoding: Standard JSON payloads for direct consumption by cloud services like AWS IoT Core or Azure IoT Hub.
  • UADP binary over MQTT: Compact binary encoding for bandwidth-constrained WAN links.
  • Topic structure: Configurable MQTT topic namespaces derived from the OPC UA information model.

Example: A remote oil well controller publishing wellhead pressure data via MQTT to a central SCADA system over a satellite link.

03

Time-Sensitive Networking (TSN) Convergence

Combines OPC UA Pub/Sub with IEEE 802.1 TSN to guarantee deterministic delivery over standard Ethernet. This is the foundation for real-time field-level control.

  • 802.1Qbv Scheduled Traffic: Time slots are reserved for Pub/Sub frames, preventing collision with best-effort traffic.
  • 802.1AS Precision Time Protocol: All publisher and subscriber clocks are synchronized to sub-microsecond accuracy.
  • Bumpless redundancy: TSN frame replication and elimination (802.1CB) provides seamless failover.

Example: A motion controller publishing setpoint commands to 50 servo drives with guaranteed 31.25µs cycle time on a converged network carrying video and TCP traffic.

31.25 µs
Minimum Cycle Time
04

DataSet & DataSetField Abstraction

Defines a structured payload model that decouples the published data from the underlying transport protocol. A DataSet is a collection of DataSetFields representing individual variable values.

  • DataSetMetaData: Describes the structure, names, and data types of the payload, enabling late-binding subscribers.
  • Field-level encoding: Each field can use different data types (Int32, Float, String) within a single message.
  • Versioned schema: DataSet versioning allows subscribers to detect and adapt to structural changes.

Example: A PublisherDataSet containing 'Temperature' (Float), 'Pressure' (Float), and 'ValveState' (Boolean) fields, with metadata published separately for dynamic discovery.

05

Security Model & Key Management

Implements message-level security independent of the transport, ensuring confidentiality and integrity across untrusted network segments.

  • JSON Web Token (JWT): Authenticates publishers and subscribers to MQTT brokers.
  • Sign & Encrypt: UADP messages can be signed for integrity and encrypted for confidentiality using asymmetric cryptography.
  • SecurityGroup concept: A logical grouping of publishers and subscribers sharing a common security policy and key set.
  • Push-based key rotation: Centralized Security Key Service (SKS) pushes new keys to all group members before the old key expires.

Example: A wind farm operator encrypting all turbine telemetry published over a shared carrier network, with keys rotated every 24 hours via SKS.

06

Connectionless Subscriber Model

Subscribers consume data passively without establishing a session with the publisher. This fundamentally changes the scalability equation compared to client-server OPC UA.

  • No session overhead: Publishers do not maintain state for each subscriber, enabling thousands of consumers.
  • Late joining: Subscribers can join an active data stream at any time without publisher reconfiguration.
  • Network decoupling: Publishers and subscribers do not need to know each other's IP addresses in brokered or multicast modes.

Example: Adding a new analytics dashboard that subscribes to an existing machine telemetry stream without any changes to the PLC publishing the data.

COMMUNICATION ARCHITECTURE COMPARISON

OPC UA Pub/Sub vs. Classic OPC UA Client-Server

A technical comparison of the two OPC UA communication patterns, highlighting the architectural shift from connection-oriented request-response to connectionless publish-subscribe for industrial data distribution.

FeatureOPC UA Pub/SubOPC UA Client-Server

Communication Pattern

Publish-Subscribe (one-to-many)

Request-Response (one-to-one)

Connection Model

Connectionless (multicast/broker)

Connection-oriented (TCP sessions)

Transport Protocols

UDP, MQTT, AMQP, TSN Ethernet

TCP/IP, HTTPS

Session Establishment Overhead

Minimal (no session required)

High (secure channel + session creation)

Network Scalability

Linear (subscriber count independent)

Degrades with concurrent client count

Deterministic Delivery

Time-Sensitive Networking (TSN) Integration

Data Encoding

UADP (binary), JSON

UA Binary, JSON

Security Model

Message-level signing/encryption

Session-level with X.509 certificates

Typical Use Case

Field-level, controller-to-controller, high-speed telemetry

SCADA, HMI, MES integration, supervisory control

Discovery Mechanism

Multicast DNS-SD, broker metadata

Local Discovery Server (LDS), GDS

Stateful Session Requirement

Bandwidth Efficiency (1:N)

High (single transmission per dataset)

Low (N individual responses)

Suitable for Wireless/Constrained Networks

Standardized in OPC UA Specification

Part 14

Part 4 (Services), Part 6 (Mappings)

OPC UA PUB/SUB

Frequently Asked Questions

Clear, technically precise answers to the most common questions about the publish-subscribe extension of OPC Unified Architecture, designed for engineers and system architects deploying scalable industrial communication.

OPC UA Pub/Sub is an extension of the OPC Unified Architecture that enables scalable, connectionless data distribution using a publish-subscribe pattern instead of the classic client-server model. Publishers send messages to a message-oriented middleware without establishing direct connections to subscribers, decoupling communication participants. The mechanism works by defining DataSetMessages—structured payloads containing key-value pairs of process variables—which are encoded in formats like UA Binary or JSON and transported over protocols such as UDP multicast, AMQP, or MQTT. Subscribers filter incoming messages based on DataSetClass IDs and WriterGroup IDs, consuming only relevant data. This architecture eliminates the point-to-point connection overhead of traditional OPC UA, enabling one-to-many and many-to-many communication patterns essential for large-scale industrial IoT deployments.

Prasad Kumkar

About the author

Prasad Kumkar

CEO & MD, Inference Systems

Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.

His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.