Aevus Learn · SCADA Fundamentals · 7 min read

What is an RTU? The unsexy box that keeps the field alive.

Remote Terminal Units don't get press. No one writes glowing reviews of an RTU. But every pipeline, every water utility, every electric substation, and every offshore platform with telemetry has them — usually dozens, sometimes thousands. They're the boxes that read the field and report back. Here's the practical version of what they are, what's inside them, and why they still exist in 2026.

Aevus / Intrepid LogicBeginnerFor engineers · techniciansUpdated 2026-05-21

The 30-second version

An RTU (Remote Terminal Unit) is a ruggedized field controller that reads sensors, optionally drives outputs, and reports the data back to a central SCADA system over a long-haul comms link — radio, cellular, satellite, leased line, or fiber.

It is a telemetry-first device. Its primary job is to get data out of remote places. Local control is secondary. That's what separates it from a PLC, which is a control-first device whose primary job is to make decisions in the millisecond range right next to the equipment it's controlling.

If you remember nothing else:

PLC = control device that also reports telemetry.
RTU = telemetry device that may also do light control.

Almost every other distinction follows from those priorities.

What an RTU actually is

An RTU is a self-contained industrial computer designed for one mission: live in a harsh, unattended location, watch some sensors, and faithfully report what they say back to a central operator — over whatever comms link is available, however bad that link is.

Origin story: in the 1960s-80s, utilities needed to monitor substations and pump stations that were too far apart to staff. The first generation of RTUs were dedicated hardware that could read analog and discrete I/O, store-and-forward values, and talk over leased telephone lines or microwave back to a master station. The original protocols (Conitel, IEC 60870-5-101, eventually DNP3) were designed around 1200-baud links and tiny report-by-exception messages — every byte mattered.

That heritage still shapes RTUs today. The defining characteristics are notspeed or compute horsepower. They are: environmental ruggedness, comms flexibility, low-bandwidth-protocol fluency, and unattended operation for months or years.

RTU vs PLC vs IED — the practical distinction

Three terms that get conflated. Here's the working definition each:

DevicePrimary jobWhere it livesComms style
RTURead sensors, report telemetry, occasional controlRemote, unattended (pump stations, substations, well pads)Long-haul (radio, cell, satellite); report-by-exception
PLCFast scan, ladder logic, real-time controlInside or adjacent to the equipment it controlsLocal field bus (Ethernet/IP, Modbus, ProfiNet); polled
IEDProtective relay, fault recording, breaker controlSubstations (electrical)IEC 61850, DNP3; high-precision time-stamped events

Modern boxes blur these — a "SCADAPack" from Schneider or an "RTU/PLC hybrid" from Bedrock can do all three jobs at different scan rates. The classification is by what job dominates in deployment, not by what the box could theoretically do.

For a deeper read on the PLC side, see PLC vs RTU — Scan cycles, ladder logic, and where each belongs.

Inside an RTU — the anatomy

Open up an RTU and you'll find roughly the same six subsystems regardless of vendor, though they're often physically integrated into one or two boards in modern units:

RTU INTERNAL SUBSYSTEMS
CPU
Processor & firmware
Typically ARM or low-power x86. Runs a real-time OS (often a stripped Linux or proprietary RTOS). Slow by laptop standards, deliberately so for power and reliability.
I/O
Analog & discrete inputs / outputs
4-20mA loops, 0-10V signals, dry contacts, pulse counters, RTDs (for temperature). Modular — you buy I/O cards for what the site needs. Outputs (relay or solid-state) drive local actuation.
COMMS
Long-haul communication
Serial (RS-232/485), Ethernet, cellular modem, radio (licensed VHF/UHF or unlicensed 900MHz/2.4GHz/5GHz mesh), satellite. Often two-of-three redundant — primary + failover.
POWER
Power conditioning & backup
Solar + battery for off-grid sites. Wide-input DC for grid sites. UPS / capacitor bank for ride-through. Designed to keep reporting through line drops.
CASE
Environmental enclosure
IP-rated (typically IP66+), -40°C to +70°C operating range, vibration-rated. Often Class I Div 2 or ATEX/IECEx-certified for hazardous locations.
CRYPTO
Security & identity (modern RTUs)
TLS, certificate-based device identity, secure boot, signed firmware. A growing expectation for IEC 62443 Level 2+ compliance. Older RTUs in the field lack this.

The protocols an RTU actually speaks

RTUs are protocol-first devices because their job is to talk to a SCADA host efficiently. Common protocols on the wire, in approximate order of how often you'll still see them in production:

  • Modbus (RTU and TCP) — the lowest common denominator. Polling-based. Old, simple, plaintext, no security. Still everywhere because every PLC and RTU vendor speaks it. (A future Aevus Learn article dives deep into Modbus.)
  • DNP3 — the standard for North American electric utilities and many water districts. Report-by-exception, time-stamped events, supports unsolicited responses. Secure Authentication v5 adds modern security.
  • IEC 60870-5 (101 serial / 104 TCP) — the European utility equivalent of DNP3. Same problem space, different lineage.
  • IEC 61850 — the substation automation standard. More than a protocol — an entire object model for electrical equipment. RTUs in modern substations speak it.
  • OPC UA — the modern industrial interop layer. Higher-bandwidth, secure by design. Newer RTUs and edge gateways increasingly speak it natively.
  • MQTT / Sparkplug B — the IIoT pattern. Pub/sub instead of poll/response, broker-mediated, ideal for cellular/satellite links where the RTU phones home. Increasingly common on next-generation deployments.
  • Proprietary protocols — Conitel, Quad4, Allen-Bradley DH+, etc. Still alive in legacy installations. Sunsetting, slowly.

Where you actually find RTUs

Water & wastewater

Every remote pump station, lift station, elevated tank, well, and chlorination point. An RTU reads pressure, level, flow, and chlorine residual, and reports back. Often the only intelligent device on site. Solar-powered, cellular-connected, runs for years with one annual visit.

Oil & gas (upstream + midstream)

Well pads (artificial-lift control, tank levels), compressor stations (suction/discharge pressure, temperature, vibration), pipelines (mainline valve actuators, pressure transmitters every few miles), gas measurement (AGA-3 flow calculations). The midstream industry is one of the largest RTU markets in the world.

Electric utility

Substations (breaker positions, relay status, transformer monitoring), distribution switching (recloser controllers, capacitor banks), distributed generation (solar/wind farm SCADA). DNP3 dominates here. IEC 61850 inside the substation walls.

Industrial & manufacturing

Less common than PLCs in factory settings — but RTUs appear in large-site logistics (rail yards, port terminals, mining), facility energy monitoring (sub-metering, peak-demand tracking), and remote outbuildings of large industrial campuses.

Federal & defense

Military installations (energy management, base utility monitoring), USACE navigation locks and dams, federal water and dam projects. RTUs at federal sites often require NIST-aligned cybersecurity hardening and supply-chain provenance (e.g., Trusted Foundry, TAA compliance).

How RTUs are changing

Two trends are reshaping the RTU market in 2026:

1. The edge-compute RTU

Modern RTUs (Schneider SCADAPack 470i, Bedrock OSA, ABB RTU560 series) ship with real Linux, container support, and enough CPU to run local analytics. They can detect equipment degradation, run anomaly models, and only send "interesting" data back — slashing comms-link bandwidth and battery consumption. The line between "RTU" and "edge gateway" is blurring fast.

2. The intelligence layer above the RTU fleet

What's harder than upgrading 4,000 RTUs scattered across a service territory? Almost anything. So the industry is converging on a pattern: leave the RTUs where they are, and add an intelligence layer above them that ingests the existing telemetry stream and gives operators predictive insight.

That second pattern is exactly what Aevus is. We sit above your SCADA. We read what your RTUs are already reporting. We tell you which radio is degrading two weeks before it fails, which compressor is trending toward a trip, which alarm storm is real and which is a sensor drift.

And our AI is architecturally incapable of writing back to any of your RTUs — by AWS Organization boundary, not by policy. See the IL-9000 brief.

That's RTUs in one read.

If your organization runs an RTU fleet and wants to know what's failing before it fails — without ripping out a single field device — Aevus is the conversation.