If you’ve ever tried to connect industrial equipment from different vendors, you know how frustrating it can be, a mess of incompatible protocols, proprietary software, and confusing drivers. Your Siemens PLC speaks one language, your Allen-Bradley controller another, and that Modbus sensor? Yet another protocol entirely.
OPC UA changes that.
OPC UA (Open Platform Communications Unified Architecture) is the industry-standard protocol that eliminates this chaos. Also known as OPC Unified Architecture or IEC 62541, it provides a universal language for secure communication between PLCs, SCADA systems, HMIs, and enterprise applications ,regardless of the manufacturer.
This hands-on guide walks you through building your first OPC UA integration using Node-RED and FlowFuse:
Connect to any OPC UA server—Kepware, MatrikonOPC, or built-in PLC servers
Browse available tags and discover Node IDs from your equipment
Read real-time values from PLCs, sensors, and industrial devices
Write control signals and setpoints back to your systems
If you have worked with industrial equipment, you know the pain. Every PLC vendor uses a different protocol. Your Siemens S7-1500 requires TIA Portal and PROFINET drivers. The Allen-Bradley ControlLogix needs RSLinx and EtherNet/IP. A Modbus temperature sensor needs yet another tool. Before long, you are juggling a dozen different software packages—each with its own licensing, training, and maintenance overhead.
OPC UA eliminates this fragmentation. Instead of relying on vendor-specific protocols, it provides a universal language for all your equipment. Here is why it is becoming the industry standard:
Connect to any modern PLC using a single protocol. Leading manufacturers like Siemens, Rockwell, Schneider, and ABB now embed OPC UA servers directly into their controllers. One client, all your equipment.
Reading a temperature value from OPC UA does not just give you "42.5"—it gives the full context: 42.5 °C, measured at 14:32:15.625 with "Good" quality, from "Tank_01/Temperature", and includes alarm limits (10 °C / 80 °C). This context reduces guesswork and helps prevent costly mistakes.
While protocols like Modbus transmit everything in plain text, OPC UA uses enterprise-grade security. It supports X.509 certificates, 256-bit encryption, and robust user authentication to safeguard critical infrastructure from cyber threats.
OPC UA is the foundation of Industry 4.0 initiatives around the world. It is not just another protocol—it is the one major vendors are standardizing on. Choosing OPC UA today ensures long-term compatibility and ROI.
Before diving into the flow-building process, make sure you have the following:
An OPC UA server (like Kepware, MatrikonOPC, or built into your PLC)
A FlowFuse Node-RED instance running on your edge device.
For production OPC UA deployments, we recommend using FlowFuse. When connecting to industrial systems, you need more than just Node-RED—you need team collaboration so multiple engineers can work on flows safely, audit logs for compliance tracking, high availability to prevent downtime, and remote device management for edge deployments.
FlowFuse provides these enterprise features plus automatic backups, one-click rollbacks, environment variables for different sites, and DevOps pipelines for testing changes before they reach production.
To begin accessing industrial data, create a client connection using the OPC UA Client node.
Drag an OPC UA Client node onto the canvas.
Double-click to configure it.
Click the + icon to create a new endpoint configuration.
Enter your OPC UA server address, for example: opc.tcp://192.168.0.10:4840
Set the security mode to None (you can add security later).
Security Note: This tutorial uses "None" for the security setting to keep things simple. In production environments, always use appropriate security—typically "Sign & Encrypt" with certificates.
Click Add, then Done.
OPC UA endpoint configuration
With the connection now defined, you’re ready to explore what tags are available.
Drag an Inject node onto the canvas (this will trigger the read operation).
Add an OPC UA Item node and configure:
Node ID: Enter the tag’s identifier (e.g., ns=3;i=1003)
Data Type: Select the appropriate type (e.g., Boolean)
Connect the output of the Inject node to the input of the Item node.
Add an OPC UA Client node and set its Action to read.
Select the endpoint configuration you created earlier.
Connect the output of the Item node to the input of the Client node, then connect the Client node's top output to a Debug node.
The OPC UA Client node has three outputs: the top carries the data payload, the middle indicates connection status, and the bottom provides raw responses for debugging.
Deploy the flow and click the Inject button to trigger the read.
You should see the tag value appear in the debug panel. This confirms that communication is working correctly.
You can also pass the Node ID dynamically using msg.topic from the Inject node if you prefer not to use an Item node.
You’ve now mastered the fundamentals of OPC UA integration—connecting to servers, browsing tags, and reading or writing data. These core building blocks lay the foundation for powerful industrial automation.
In real deployments, you will want more than Inject nodes and debug panels. With FlowFuse Dashboard 2.0, you can build full operator interfaces—live gauges, control buttons, trend charts—fully connected to your OPC UA data.
This guide covered the basics, but OPC UA offers far more. In the next article, we will explore:
Subscriptions for real-time monitoring without polling
Events and alarms directly from equipment
Historical data queries for trend analysis
Method calls to execute functions on your devices
When it is time to move beyond prototypes, FlowFuse delivers what industrial systems truly need—remote device management, instant rollbacks with full version control, built-in team collaboration, and high availability you can trust.
If you’re ready to simplify your OPC UA integration and scale industrial workflows with Node-RED, start your free trial of FlowFuse today.
Frequently Asked Questions
How do I connect Node-RED to an OPC UA server?
Install the node-red-contrib-opcua package from the Node-RED Palette Manager. Then, drag an OPC UA Client node onto your flow, configure the endpoint URL (typically opc.tcp://[IP]:4840), set security to None for testing, and connect it to OPC UA Item nodes to read or write specific tags.
What is the default OPC UA port number?
The default OPC UA port is 4840 for standard TCP connections and 4843 for secure connections. However, these can be configured differently in your OPC UA server settings. Always check your server documentation for the correct port.
Can Node-RED connect to a Kepware OPC server?
Yes, Node-RED can connect to Kepware using the OPC UA protocol. Kepware includes a built-in OPC UA server interface. Use the endpoint URL from Kepware’s OPC UA Configuration in your Node-RED OPC UA Client node.
How do I find an OPC UA Node ID?
Use the OPC UA Browser node in Node-RED to explore the server’s address space. Start with ns=0;i=85 (root Objects folder) and navigate through the hierarchy. Each tag will show its Node ID in the format ns=[namespace];i=[identifier] or ns=[namespace];s=[string identifier].
What is the difference between OPC UA and MQTT?
OPC UA is designed for industrial automation with built-in information modeling, security, and complex data types. MQTT is a lightweight publish-subscribe protocol ideal for IoT. OPC UA provides richer context and methods, while MQTT excels at simple, efficient message transport. Many systems use both—OPC UA for equipment integration and MQTT for cloud connectivity.
Is OPC UA free to use?
The OPC UA specification is open and free to implement. Many open-source clients and servers are available at no cost. However, commercial OPC UA servers (like Kepware or MatrikonOPC) and some certified stacks require licenses. OPC Foundation membership is optional unless you need certification.
Can OPC UA work without internet?
Yes, OPC UA works perfectly on local networks without internet access. It is commonly deployed on isolated industrial networks for security. OPC UA only requires network connectivity between the client and server—this can be a local LAN, industrial network, or even a direct connection.
How do I test an OPC UA connection?
Use free tools like UaExpert or Prosys OPC UA Browser to test connections before implementing them in Node-RED. These tools let you browse the address space, read values, and verify security settings. In Node-RED, use the Browser node with a Debug node to test connectivity.
What causes the OPC UA BadNodeIdUnknown error?
This error means the Node ID you are trying to access does not exist on the server. Common causes include an incorrect namespace index (ns=), invalid identifier format, or a tag that was removed or renamed. Use the Browser node to verify the exact Node ID format from the server.
Can multiple clients connect to one OPC UA server?
Yes, OPC UA servers support multiple simultaneous client connections. The exact number depends on the server implementation and licensing. Most industrial OPC UA servers handle 10–100+ concurrent clients. Each client maintains its own session and can have different security levels and access rights.
About the Author
Sumit Shinde
Technical Writer
Sumit is a Technical Writer at FlowFuse who helps engineers adopt Node-RED for industrial automation projects. He has authored over 100 articles covering industrial protocols (OPC UA, MQTT, Modbus), Unified Namespace architectures, and practical manufacturing solutions. Through his writing, he makes complex industrial concepts accessible, helping teams connect legacy equipment, build real-time dashboards, and implement Industry 4.0 strategies.