A gateway is a hardware device, software service, or embedded component that connects two or more different networks, protocols, or systems so they can exchange data in a controlled and structured way. In industrial and manufacturing environments, gateways commonly sit between OT equipment and higher-level IT or cloud systems.
Core characteristics
In regulated manufacturing and industrial operations, a gateway commonly:
- Bridges different communication protocols (for example, OPC UA to MQTT, Modbus to OPC UA, or proprietary fieldbus to Ethernet)
- Connects separate networks (such as a plant-floor OT network to a corporate IT network or DMZ)
- Performs data mapping or transformation (converting raw tags or registers into structured data models)
- Implements security and access controls (authentication, encryption, basic filtering of what data can pass)
- Provides a single aggregation point for multiple devices or systems
A gateway can be:
- Physical: an industrial PC, edge device, or dedicated appliance mounted in a panel or rack.
- Virtual or software-based: a service running on a server or in the cloud that exposes one interface to the plant and another to enterprise applications.
Operational use in manufacturing
Gateways appear in many layers of a manufacturing stack, for example:
- Connecting PLCs and DCS controllers to an OPC UA server so MES, historian, or analytics tools can read standardized data
- Exposing legacy serial or fieldbus equipment through modern Ethernet-based protocols
- Acting as an edge gateway that sends filtered production data to cloud services
- Separating OT and IT networks, sometimes as part of a demilitarized zone (DMZ) architecture
Relation to OPC UA
In an OPC UA context, a gateway often:
- Connects non-OPC devices and protocols to an OPC UA server or client
- Maps vendor-specific tag structures into an OPC UA information model
- Acts as a secure boundary where OPC UA security settings, certificates, and access policies are enforced
What a gateway is not
To avoid confusion, a gateway is not:
- Just a switch or hub: those forward traffic at lower network layers without protocol translation or data modeling.
- Necessarily a firewall: some gateway products include firewall capabilities, but a firewall focuses on traffic filtering, not protocol bridging or data transformation.
- Always an OPC UA server: a gateway may host an OPC UA endpoint, but "gateway" refers to the bridging role, not a specific standard.
Common confusion
The term "gateway" is sometimes used interchangeably with:
- Protocol converter: a type of gateway focused narrowly on converting one protocol to another.
- Edge device: an edge device may perform gateway functions, but it can also handle local analytics, buffering, or control.
In industrial and regulated environments, it is useful to specify what a gateway actually does: which protocols it bridges, what security functions it provides, and how it integrates with control systems, MES, historians, and enterprise IT.