Chapter 75 Β· Examples
Power Resiliency β Worked Examples
The summer brownout that justifies line-interactive UPS, why offline UPS failed a trading desk, the generator startup gap in action, surge damage on a clear day, and a full data center power architecture walkthrough.
Example 1: Summer Brownout β Why Line-Interactive UPS Matters
Two identical small server rooms in the same city experience the same summer heat-wave brownout. Utility voltage drops to 88V (normal is 120V) for 45 minutes during peak afternoon demand. One room has offline UPS devices; the other has line-interactive UPS devices.
Server Room A β Offline (Standby) UPS
The offline UPS monitors the incoming voltage. At 88V, the voltage is low but above the switch-over threshold (typically around 80V). The offline UPS does nothing β it passes the 88V through to the servers. Over 45 minutes at reduced voltage, three servers exhibit instability: one reboots unexpectedly, losing in-progress work; another develops a filesystem inconsistency requiring manual fsck at next boot; the third's power supply unit fails after the event, likely due to thermal stress from running outside rated voltage for an extended period. One PSU replacement and two hours of recovery work.
Server Room B β Line-Interactive UPS
The line-interactive UPS detects the voltage drop to 88V within seconds. Its autotransformer boosts the output to the connected servers back to 120V β without switching to battery. For the entire 45-minute brownout, the servers receive clean, regulated 120V power. No reboots, no instability, no hardware stress. The battery was never touched β it remains fully charged, ready for an actual outage. When utility voltage returns to normal, the autotransformer ceases boosting and the UPS returns to pass-through mode. Total impact: zero.
Offline UPS passes brownouts through unless the voltage drops below the hard switch-over threshold. In a brownout-prone environment, line-interactive UPS's active voltage regulation protects equipment without touching the battery β preserving battery life for actual outages.
Example 2: The Generator Startup Gap β 75 Seconds That Matter
A regional hospital's data center has a diesel generator for backup power. A utility failure occurs at 2:15 AM on a Tuesday. The generator is tested monthly and in good condition.
Scenario A β No UPS (Generator Only)
2:15:00 AM β Utility power fails. All servers, storage arrays, and network equipment lose power instantly.
2:15:05 AM β Generator detects the outage. Engine begins cranking.
2:15:45 AM β Generator engine reaches operating speed. Output voltage is stabilizing.
2:16:15 AM β Generator voltage is stable. Transfer switch connects generator to building circuits.
During those 75 seconds: 12 servers experienced uncontrolled shutdowns. 3 active database transactions were written partially β those tables require fsck and transaction log replay. The network switches lost configuration from RAM that wasn't saved. IT staff spend 2.5 hours on recovery work before all systems are confirmed clean.
Scenario B β UPS + Generator (Standard Architecture)
2:15:00 AM β Utility power fails. UPS (online double-conversion) detects nothing different β equipment has always been running from the battery/inverter. For offline/standby UPS: battery kicks in within milliseconds.
2:15:00 to 2:16:15 AM β UPS battery provides power to all critical systems. Generator starts in the background.
2:16:15 AM β Generator stable. Transfer switch connects. UPS transitions load to generator power. Battery begins recharging.
During those 75 seconds: all 12 servers ran continuously. No transactions interrupted. No configuration lost. Network connectivity maintained. The incident is completely transparent to systems and users. IT staff are notified by the monitoring system but no recovery is needed.
The UPS does not replace the generator β it bridges the gap that the generator cannot cover during startup. 75 seconds of battery power prevents hours of recovery work. This is why UPS and generator are always deployed together rather than as alternatives.
Example 3: Surge Damage on a Clear Day
On a clear, dry afternoon with no storms, a small accounting firm's server experiences a catastrophic power supply failure. The failure damages the motherboard and requires a full server replacement. The cause: a utility company switching operation two blocks away changed which transformer fed the street, creating a brief voltage spike of approximately 250V on the 120V circuit.
Firm A β No Surge Protection
The 250V spike travels directly through the building wiring to the server's power supply. The power supply's internal components, rated for 120V input, are instantly damaged. The overvoltage propagates partially into the motherboard, burning a voltage regulator. The server is dead. Cost: $3,200 for server replacement, $800 for emergency data recovery from the damaged drive, 2 days of reduced operations. The firm had no idea a utility switching operation even occurred β the lights didn't flicker.
Firm B β UPS with Surge Suppression
The same 250V spike arrives at the building. The UPS's surge suppression circuitry detects the overvoltage and diverts the excess energy to ground (through a metal oxide varistor). The spike is absorbed by the UPS β the equipment behind it receives clean 120V. The server continues running normally. The UPS monitoring software logs a "surge event detected" entry at 2:47 PM. An IT administrator reviews the log the next morning. No hardware was damaged. The UPS varistor may have absorbed some of its rated surge capacity and will eventually need replacement β at $40 per UPS unit.
Power surges are not always preceded by visible warnings (storms, flickering lights). Utility switching operations, motor transients, and nearby lightning can send spikes through the grid on otherwise ordinary days. Surge suppression in a UPS absorbs these events before they reach sensitive equipment.
Example 4: Choosing the Right UPS Type β Three Scenarios
Three organizations evaluate their power protection needs. Each has different requirements and constraints.
Organization A: 10-Person Law Office, Stable Urban Power Grid
Needs: Protect 10 workstations and a small NAS from power outages; budget-constrained; power quality is generally good in their building.
Decision: Offline/standby UPS on each workstation ($80β$120 each). The brief transfer delay is acceptable for office workstations. The stable power grid means brownout regulation isn't needed. The auto-shutdown feature will gracefully shut down workstations if the office is empty during an outage.
Correct choice. Online UPS would be over-engineered and cost 5Γ more for no meaningful benefit in this environment.
Organization B: Regional ISP, Network Closet in Industrial Area
Needs: Protect network switches, routers, and a small server rack; the industrial neighborhood has frequent voltage sags when nearby factories start large motors.
Decision: Line-interactive UPS for the rack equipment. The autotransformer handles the frequent voltage sags without touching the battery, preventing the instability that offline UPS would pass through. Cost: $400β$800 for the rack UPS. Battery remains charged for actual outages.
Correct choice. Online UPS would work but is unnecessary given that the power quality issues are brownouts, not total outages β line-interactive handles them more efficiently.
Organization C: Financial Trading Firm, 40-Server Data Center
Needs: Protect 40 servers running live trading systems; even a 50-millisecond interruption could cause a trading error or network disconnect; regulatory requirements for near-zero downtime.
Decision: Online/double-conversion UPS arrays with N+1 redundancy. Equipment always runs from the battery/inverter β zero transfer time, fully isolated from utility power quality. Multiple UPS units in parallel ensure that one failing doesn't cause an outage. Cost: $15,000β$40,000 for the UPS infrastructure.
Correct choice. Any UPS with a transfer delay is unacceptable for this environment. The premium cost is justified by the consequence of even a brief interruption.
The right UPS type is determined by the power environment, the criticality of connected equipment, and budget constraints. Offline for stable environments with non-critical loads; line-interactive for brownout-prone environments; online/double-conversion for mission-critical infrastructure where no interruption is acceptable.
Example 5: Complete Data Center Power Architecture
A mid-size enterprise data center designs its full power resiliency architecture from the ground up. The data center hosts 200 servers, primary network infrastructure, and storage arrays for 2,000 employees.
Layer 1 β Utility Power (Primary)
Dual utility feeds from two different utility substations enter the building on separate paths. If one substation fails, the other continues. The two feeds enter an automatic transfer switch that normally runs both feeds in parallel and fails over to the surviving feed instantly if one fails.
Layer 2 β Online Double-Conversion UPS (Immediate)
All server racks are powered through online (double-conversion) UPS arrays sized for 10 minutes of full-load runtime. All equipment always runs from the UPS/inverter output. Zero transfer time for any event. The 10-minute runtime covers both brief outages (where utility restores before generators are needed) and generator startup plus some margin. Auto-graceful-shutdown configured at 15% battery level as the last-resort safeguard.
Layer 3 β Diesel Generators (Extended)
Two diesel generators, each capable of powering the full data center (N+1 configuration: one is sufficient, two provide redundancy). Automatic start on utility failure detection. Startup time: approximately 60 seconds. Fuel tanks hold 500 gallons each β approximately 72 hours of continuous operation at full load. Fuel supply contract guarantees emergency refueling within 12 hours. Generators tested monthly under load.
What Each Layer Covers
β’ Brief outages (<10 minutes): UPS handles entirely, generator never needed
β’ Generator startup gap (60 seconds): UPS covers the gap seamlessly
β’ Outages up to 72 hours: Generator sustains, UPS recharged from generator
β’ Extended disaster (>72 hours): Fuel refueling maintains generator; UPS continues cycling
β’ Brownouts: Online UPS provides clean power regardless of input quality
β’ Surges: Online UPS completely isolates output from utility input
A fully layered power architecture addresses every outage scenario across the full duration spectrum β from milliseconds to days β with no single point of failure. No single layer handles all scenarios; each is designed for its specific time horizon, and together they provide continuous coverage.