Virtualisation
Virtualisation is a technology in which physical hardware resources are abstracted so that multiple virtual systems can run simultaneously on the same physical infrastructure. Within OT and Industrial Automation, virtualisation is increasingly applied to SCADA, Historian systems, MES, HMI, Soft PLC platforms, engineering stations and industrial edge environments.
Where Industrial Automation was traditionally based on dedicated hardware, modern OT architectures are shifting more and more towards software-defined infrastructures. This produces closer integration between IT and OT platforms within IT OT Convergence.
Virtualisation delivers benefits such as:
- hardware consolidation
- Scalability
- Redundancy
- faster provisioning
- Snapshot Recovery
- Lifecycle Management
- Disaster Recovery
- test and simulation environments
At the same time, virtualisation introduces new challenges around real-time behaviour, availability, Cybersecurity and operational complexity.
⚙️ Basic principles of virtualisation
In virtualisation, physical hardware is logically divided into multiple virtual environments.
Key components:
| Component | Function |
|---|---|
| Hypervisor | Virtualisation layer |
| Host | Physical hardware |
| Guest OS | Virtual operating system |
| VM | Virtual machine |
| Virtual Switch | Virtual network |
| Shared Storage | Central storage |
A Hypervisor manages:
- CPU scheduling
- memory allocation
- storage access
- network virtualisation
- hardware abstraction
This allows multiple systems to run independently on the same hardware.
🏗️ Types of virtualisation
Type 1 hypervisor
Bare-metal hypervisors run directly on hardware.
Examples:
- VMware ESXi
- Microsoft Hyper-V
- KVM
- Xen
Advantages:
- high performance
- better isolation
- lower overhead
- suitable for production environments
Within OT, Type 1 hypervisors are dominant.
Type 2 hypervisor
Runs on top of a standard operating system.
Examples:
- VMware Workstation
- VirtualBox
Used for:
- test environments
- OT labs
- engineering
- simulation
Not ideal for production processes due to additional Latency and dependency on the host OS.
Containerisation
Containers virtualise applications rather than entire operating systems.
Examples:
- Docker
- Podman
- Kubernetes
Advantages:
- low overhead
- fast deployment
- scalability
- cloud-native architectures
Applications within OT:
- edge analytics
- MQTT brokers
- protocol gateways
- OT monitoring
- microservices
Containers are becoming increasingly important within Edge Computing.
🧠 Virtualisation within OT
Within industrial automation, various OT workloads are virtualised.
Frequently virtualised systems
| System | Suitable for virtualisation |
|---|---|
| SCADA | Yes |
| Historian | Yes |
| MES | Yes |
| HMI | Yes |
| Engineering Station | Yes |
| Domain Controller | Yes |
| OPC UA servers | Yes |
| Soft PLC | Limited — depends on real-time requirements |
⚡ Real-time challenges
OT systems often require Deterministic Behaviour.
Virtualisation, however, introduces additional layers:
Application │Guest OS │Hypervisor │Physical Hardware
Each extra layer can influence:
Problems arise particularly with:
- Motion Control
- Safety systems
- turbine control
- high-speed IO
- real-time Fieldbuses
For this reason, some systems remain dependent on dedicated hardware.
🔌 Industrial communication and virtualisation
Virtualised OT systems often use:
Virtualisation affects network behaviour:
| Factor | Possible impact |
|---|---|
| Virtual switches | Additional latency |
| CPU contention | Packet delays |
| Shared NICs | Congestion |
| Hypervisor scheduling | Timing variation |
Real-time protocols such as EtherCAT are often difficult to virtualise fully due to strict timing requirements.
🖥️ Virtual SCADA environments
Virtualisation is widely applied to SCADA systems.
Advantages:
- central hosting
- easier management
- snapshots
- fast recovery
- redundancy
- hardware independence
Typical Architecture:
Virtual SCADA Servers │Virtual Historian │Virtual OPC Servers │Industrial Network
Many SCADA platforms now officially support:
- VMware
- Hyper-V
- KVM
☁️ Hyperconverged OT infrastructure
More and more OT environments use hyperconverged infrastructure.
This combines:
- compute
- storage
- networking
- virtualisation
Advantages:
- scalability
- redundancy
- centralised orchestration
- simpler management
Typical technologies:
- VMware vSAN
- Nutanix
- Azure Stack HCI
Applied in:
- power plants
- water treatment
- production environments
- data centres
🔒 Cybersecurity implications
Virtualisation significantly changes the OT attack surface.
New risks
| Risk | Impact |
|---|---|
| Hypervisor compromise | Entire environment compromised |
| VM escape | Lateral movement |
| Snapshot leakage | Data theft |
| Shared infrastructure | Cross-system impact |
| Virtual network attacks | Segmentation issues |
Virtualisation creates additional attack surfaces:
- management interfaces
- orchestration layers
- APIs
- storage fabrics
- virtual switches
🛡️ Hardening of virtualised OT
Key controls:
- Network Segmentation
- Industrial Firewall
- dedicated management VLANs
- MFA
- RBAC
- hypervisor hardening
- encrypted storage
- secure snapshots
- Logging
- Security Monitoring
In addition, strict separation is important between:
- production OT
- management environments
- engineering
- Backup infrastructure
🔄 High Availability and redundancy
Virtualisation enables advanced redundancy.
Frequently used techniques
| Technique | Function |
|---|---|
| Live Migration | Move an active VM |
| Failover Clustering | Automatic recovery |
| Snapshot Recovery | Fast restore |
| Replication | Data copies |
| HA Scheduling | Automatic restart |
Within critical infrastructures, HA solutions are essential.
🧪 Test, OTAP and simulation environments
Virtualisation is ideal for:
- OTAP
- FAT tests
- SAT tests
- simulation
- cyber ranges
- training
- Digital Twin environments
Advantages:
- fast provisioning
- reproducible configurations
- rollback capability
- safe test isolation
OT engineers can simulate complete process environments without physical hardware.
📦 Storage virtualisation
OT systems generate large amounts of data.
Examples:
- historians
- trends
- alarms
- audit logs
- video
- process data
Virtualisation often uses:
- SAN
- NAS
- vSAN
- software-defined storage
Key considerations:
| Aspect | Relevance |
|---|---|
| IOPS | Historian performance |
| Latency | Real-time data |
| Redundancy | Availability |
| Snapshot policy | Recovery |
| Backup integration | Continuity |
⚠️ Operational risks
Single point of failure
Consolidation increases risks.
Failure of a single host can impact:
- multiple SCADA systems
- historians
- OPC servers
- engineering stations
The following are therefore needed:
- redundant hosts
- cluster architectures
- failover mechanisms
- backup strategies
Resource contention
Virtual systems share hardware.
Issues:
- CPU starvation
- memory pressure
- storage congestion
- network saturation
Consequences:
🏭 Practical applications
Manufacturing industry
Virtualisation for:
Energy supply
Applications:
- substation servers
- EMS systems
- central monitoring
- analytics
Water sector
Use cases:
- remote telemetry
- pumping station monitoring
- redundant SCADA
Building Automation
Virtual:
📡 Edge virtualisation
Within Edge Computing, micro-virtualisation is growing strongly.
Edge nodes combine:
Technologies:
- lightweight hypervisors
- containers
- Kubernetes edge
- K3s
This produces flexible OT edge platforms.
🛠️ Lifecycle management
Virtualisation simplifies management processes.
Key advantages:
- template deployment
- central patching
- Version Control
- automated backups
- provisioning automation
Integration with:
🛡️ Relevant standards and guidelines
Key standards:
| Standard | Relevance |
|---|---|
| IEC 62443 | OT security |
| NIST SP 800-82 | ICS virtualisation security |
| ISO 27001 | Information security |
| NIST CSF | Cybersecurity governance |
| IEC 61508 | Functional safety |
For safety-critical workloads, additional restrictions often apply.
📈 Trends and developments
Key developments:
- software-defined OT
- containerised SCADA
- virtual PLCs
- cloud-native OT
- edge orchestration
- Kubernetes in OT
- hyperconverged infrastructure
- AI-enabled infrastructure
Virtualisation forms a fundamental building block for modern digital industrial architectures.
🎯 Conclusion
Virtualisation has fundamentally changed Industrial Automation by decoupling OT systems from dedicated hardware. This produces more flexible, scalable and efficiently managed OT infrastructures.
Within modern IT OT Convergence environments, virtualisation forms the basis for Edge Computing, software-defined automation, High Availability and modern data integration.
At the same time, virtualisation introduces new challenges around real-time behaviour, Cybersecurity, availability and operational complexity. Successful implementation therefore requires a careful balance between IT flexibility and OT reliability.
