{"id":3464,"date":"2020-07-02T11:05:07","date_gmt":"2020-07-02T09:05:07","guid":{"rendered":"https:\/\/www.basyskom.de\/?p=3464"},"modified":"2020-07-02T12:25:40","modified_gmt":"2020-07-02T10:25:40","slug":"opc-ua-pubsub-with-open62541-and-azure-iot-hub","status":"publish","type":"post","link":"https:\/\/www.basyskom.de\/en\/opc-ua-pubsub-with-open62541-and-azure-iot-hub\/","title":{"rendered":"Connect OPC UA with open62541 to MS Azure IoT Hub"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\"open62541\" \"opcOPC UA PubSub is defined in part 14<\/a> of the OPC UA specification and introduces publish and subscribe capabilities in addition to the client server model. This article reviews the current state of PubSub in open62541 and shows how it can be used to connect an OPC UA server directly with an Azure IoT Hub.<\/p>

As always in OPC UA, the data mapping and transport mechanisms are very flexible. In case of PubSub, this means that messages can be transmitted directly into a network (for example as multicast via UDP or raw ethernet frames via TSN) or through a message broker using protocols like MQTT or AMQP.<\/p>

Having one-to-many messaging in OPC UA is interesting for use cases where data is only sent sporadically (sensors) or where large amounts of values must be sent with a high frequency or on a fixed schedule. The ability to reach multiple consumers with just one publish also reduces the processing power and network bandwidth required by the producer.<\/p>

The introduction of broker based messaging in combination with the JSON mapping is an important step in simplifying the integration of OPC UA with cloud based services.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

OPC UA PubSub support in open62541<\/h2>

The PubSub implementation<\/a> in open62541 is progressing rapidly.<\/p>

So far, open62541 supports UDP, raw Ethernet and MQTT transports with UADP (binary) or JSON encoding.<\/p>

Publishers can publish values of node attributes. If the publisher application is also an OPC UA server, it can optionally provide clients with meta information on the data it publishes.<\/p>

A subscriber can receive messages. If the subscriber application is also an OPC UA server, it is able to expose the most recent received values in its address space.<\/p>

The implementation is also\u00a0real time<\/a>\u00a0capable.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Publishing to Azure IoT Hub via MQTT<\/h2>

In our “basysKom industrial automation showcase”, we use an open62541 based OPC UA server to provide data to different clients like HMIs or the cloud connector. The current cloud connector reads the data from the OPC UA server\u00a0and then sends them to an IoT Hub using the Azure IoT SDK.<\/p>

As mentioned in our\u00a0IoT Hub article<\/a>, an IoT Hub can also be used directly via MQTT.\u00a0 This requires a TLS capable MQTT client. For authentication, it must be able to login at the MQTT broker using username and password. Iot Hub Devices with X.509 certificate authentication must present a client certificate. In this case, only the username must be used during login. An exact description of the credentials, client id and topics the client must use are described\u00a0here<\/a>.<\/p>

After a basic evaluation of the PubSub implementation in open62541, we wanted to replace the current cloud connector by publishing PubSub messages with JSON mapping directly to the MQTT broker of our IoT Hub.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/path><\/svg>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Our contribution to open62541<\/h2>

TLS and login support were not available in the current implementation of the MQTT transport, so we decided to contribute\u00a0username\/password<\/a>\u00a0and\u00a0TLS<\/a>\u00a0support to open62541.<\/p>

The MQTT transport plugin has been extended with five new connection options:<\/p>
Option<\/th>Use<\/th><\/tr>
mqttUseTLS<\/td>Set this to true to use TLS for the connection<\/td><\/tr>
mqttCaFilePath<\/td>The path to the file containing CA certificates in PEM format<\/td><\/tr>
mqttCaPath<\/td>The path to a directory containing CA certificate files in PEM format<\/td><\/tr>
mqttClientCertPath<\/td>The path to the client certificate in PEM or DER format<\/td><\/tr>
mqttClientKeyPath<\/td>The path to the private key for the client certificate in PEM or DER format<\/td><\/tr><\/tbody><\/table>

If neither\u00a0mqttCaFilePath<\/code>\u00a0nor\u00a0mqttCaPath<\/code>\u00a0are available, the system’s default location will be used. To use a client certificate, both of the mqttClientCertPath<\/code> and mqttClientKeyPath<\/code> options must be specified.<\/p>

TLS support has only been implemented for OpenSSL for now. It is activated by building open62541 with the CMake option\u00a0UA_ENABLE_MQTT_TLS<\/code>\u00a0set to\u00a0ON<\/code>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Conclusion<\/h2>\n

With this implementation, we were able to publish telemetry data directly to the IoT Hub using the username \/ password as well as the client certificate approach. We were able to remove the external Azure IoT Hub client from our “industrial automation showcase” resulting in a more streamlined implementation. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

The open62541 OPC UA stack with its Pub-Sub extension now supports MQTT over TLS as well as MQTT-brokers requiring a login (contributed by basysKom). This allows the direct communication between open62541 and the Azure IoT Hub and therefore highly simplifies the connection of OPC UA based IoT Devices to the cloud.<\/p>","protected":false},"author":4,"featured_media":3575,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[1,2,134,183],"tags":[139,137,124,122,184],"class_list":["post-3464","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-allgemein","category-blog","category-cloud","category-open62541","tag-azure","tag-cloud","tag-opc-ua","tag-open62541","tag-opensource"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/posts\/3464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/comments?post=3464"}],"version-history":[{"count":34,"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/posts\/3464\/revisions"}],"predecessor-version":[{"id":3894,"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/posts\/3464\/revisions\/3894"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/media\/3575"}],"wp:attachment":[{"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/media?parent=3464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/categories?post=3464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.basyskom.de\/en\/wp-json\/wp\/v2\/tags?post=3464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}