Embedded computers
NXP QorIQ processors from one family. One hypervisor design partitions each board into a Linux host and real-time guests, so a legacy control computer's functions move to current silicon without changing what the plant sees.
NXP T4240RDB
NXP's reference design board for the T4240 (12 e6500 cores, 24 threads). RTEMS real-time operating system is implemented on it; the hypervisor partitions, drivers and EPICS controller are developed and proven here first.
2. ProductionX-ES XCalibur1931
6U VME production board with the T2080 (4 e6500 cores, 8 threads), same processor family as the reference design. The same software moves over: Linux host, MAC-less real-time guests, one hypervisor design.
3. 20 years: 4FX-ES XCalibur1935
X-ES's refresh of the XCalibur1931: obsolete components replaced, same functions and features, same T2080. Form, fit and function held constant; the fourth F, rapid restore to the chain-of-trust software baseline, carries the system through its 20-year life. Each refresh is proven on the Taurus Digital Twin before installation.
The three boards
| XCalibur1931 | XCalibur1935 | XCalibur1832 | |
|---|---|---|---|
| Form factor | 6U VME | 6U VME (refresh of the XCalibur1931) | See X-ES datasheet |
| Processor | NXP QorIQ T2080 | NXP QorIQ T2080, up to 1.8 GHz | NXP QorIQ T4240 |
| Cores and threads | 4 e6500 cores, 8 threads | 4 e6500 cores, 8 threads, AltiVec on each core | 12 e6500 cores, 24 threads |
| Frame managers (packet engines) | 1 | 1 | 2 |
| Memory | 8 GiB DDR (Taurus configuration) | Up to 8 GB DDR3 ECC; up to 512 MB redundant NOR flash | 24 GiB DDR (Taurus configuration) |
| Mezzanine sites | See X-ES datasheet | Two XMC/PrPMC | See X-ES datasheet |
| Board support | VxWorks, Linux and INTEGRITY board support packages (X-ES, XCalibur1935); Taurus hypervisor: 1 Linux host + 6 guests on the T2080 | ||
| Development reference | NXP T4240RDB reference design board, with RTEMS real-time operating system implemented on it | ||
How the partitions are used
Owns the network controllers and acts as the shared-MAC proxy and firewall. All outside traffic stops here first.
Run the control functions. They have no network controller of their own (MAC-less) and reach storage over IPv6 NFS through the host.
Each partition image is a known baseline. A change, including a board refresh, is proven on the Taurus Digital Twin first; after a cyber incident the partition is restored to its baseline.
Public product facts (X-ES XCalibur1935 datasheet) and the Taurus configuration. Concept-level design; not a measured result.