4 ms·
The issue is likely the general purpose potentially network attached computer should not be trusted for the safety critical portion of the system such as power
by hughrr 5y ago
The issue is likely the general purpose potentially network attached computer should not be trusted for the safety critical portion of the system such as power control and monitoring. That should be a fully isolated computer with a light weight communications protocol with the host over SPI/I2C etc. The isolated processor can run an RTOS with some deadline guarantees as well then. If the host is compromised, the physical hardware cannot be controlled past trivial (audited) requests issued to the isolated processor.
Also on top of that, not joking but the Pi hardware, even the compute model, is not very good quality compared to typical industrial computers assigned to or designed for these tasks.
The only reason people do this with the pi is to trade safety for cost savings which is a stupid idea when you’re playing with hundreds of amps.