1. Modbus Protocol Overview and Evolution

The Modbus protocol was released by Modicon in 1979 and is one of the most widely used serial Communication Protocols in industrial automation. It is currently maintained by Modbus Organization and has been incorporated into the IEC 61158 fieldbus standard. The Modbus protocol defines a master-slave (Peer-to-Master/Slave) communication model where the master initiates requests and slaves respond, with three transmission modes: Modbus RTU (Remote Terminal Unit), Modbus ASCII, and Modbus TCP. RTU uses a binary compact frame format with CRC16 checksum, transmitted via RS232/RS485 serial bus, offering high communication efficiency and low cost; ASCII uses readable characters with LRC checksum, convenient for debugging but inefficient, and is rarely used in actual engineering; TCP is based on Ethernet and the TCP/IP protocol stack, using the MBAP (MODBUS Application Protocol) header, supporting multi-master concurrency and long-distance communication.

2. Frame Structure Comparison

A Modbus RTU frame consists of slave address (1 byte) + function code (1 byte) + data (N bytes) + CRC16 (2 bytes), with inter-frame spacing ≥3.5 character times. At 9.6kbps baud rate, 3.5 characters is approximately 4ms; at 115.2kbps, approximately 0.4ms. RTU frames are compact and efficient, with typical frame lengths of 8-256 bytes. A Modbus TCP frame removes the CRC16 from the RTU frame (guaranteed by the TCP/IP link layer) and prepends a 7-byte MBAP header: transaction identifier (2 bytes) + protocol identifier (2 bytes, fixed 0x0000) + length (2 bytes) + unit identifier (1 byte). The transaction identifier in the MBAP header supports parallel processing of multiple requests, allowing the master to initiate requests to multiple slaves simultaneously, improving network throughput. The FEXLINK CW edge computing gateway supports up to 16 concurrent TCP connections, achieving 1200 points/second polling throughput on a 100M industrial Ethernet, meeting the data acquisition needs of medium-sized substations.

3. Addressing Methods and Address Space

Modbus defines four data types: Coils (address 0x0000-0xFFFF, function codes 01/05/15), Discrete Inputs (1x, function code 02), Input Registers (3x, function code 04), and Holding Registers (4x, function codes 03/06/16). In RTU mode, slave addresses range from 1-247, with address 0 as the broadcast address (all slaves respond but do not upload data); in TCP mode, dual addressing via IP address + unit identifier (1-247) supports a larger address space. The FEXLINK SFA multi-element controller exposes 260+ electrical parameters in its Modbus mapping, using segmented mapping with holding registers: basic parameter area 40001-40064 (voltage/current/power/frequency), harmonic parameter area 40065-40192 (2nd-31st harmonics), and event record area 40193-40260 (SOE timestamp + event type), facilitating on-demand batch reads by the master.

4. Real-Time Performance and Networking Cost Comparison

RTU offers the best cost in scenarios with low node counts (≤32), short distances (≤1200m), and slowly changing parameters (second-level): single-bus RVVP twisted pair cable + terminal resistor, with single-point access cost below 50 yuan and typical response time of 50-100ms@9.6kbps. TCP performs better in scenarios with medium-to-high node counts (>32), long distances, and strong concurrency: industrial Ethernet switches + Cat5e/6 shielded twisted pair, with single-point access cost around 150-300 yuan, response time of 10-50ms@100M, and support for ring/star redundant topologies with failover time <50ms. In a 10kV distribution monitoring project, FEXLINK's comparative testing found: the RTU solution had an average response latency of 78ms at 32 nodes with a 2.4-second polling cycle; the TCP solution had an average response latency of 32ms at 64 nodes with a 1.1-second polling cycle, with RTU costing 60% less overall, but TCP offering better scalability at high node counts. In safety-critical scenarios such as electrical fire monitoring, TCP's link-layer retransmission and congestion control provide higher reliability and are recommended as the preferred choice.

5. FEXLINK Product Selection and Deployment Recommendations

The FEXLINK CW edge computing gateway simultaneously supports Modbus RTU/TCP dual protocols, with 4 RS485 interfaces + 2 Ethernet ports, and built-in Modbus Poll/Slave bidirectional proxy functionality, enabling transparent conversion between RTU and TCP protocols to reduce engineering complexity. Typical deployment recommendations: small scenarios (single distribution room, ≤16 devices) should prioritize RTU solutions with star topology + 120Ω terminal matching; medium scenarios (multiple distribution rooms, 17-64 devices) should adopt RTU+TCP hybrid solutions with smart lightning protection modules on RTU and smart meters and protection devices on TCP; large scenarios (substation-level, >64 devices) should fully adopt TCP solutions with ring network redundancy + SNMP management and dual-link backup for critical circuits. The CW gateway simultaneously hosts 60+ edge AI algorithms, identifying arc faults and lightning events at the 1μS transient scale, upgrading Modbus from a "passive data channel" to an "active decision node."

6. Industry Standards and Compliance Requirements

Modbus engineering implementation should comply with the following standards: IEC 61158 "Industrial communication networks - Fieldbus specifications," IEC 61784 "Industrial communication networks - Profiles," GB/T 25919 "Modbus protocol conformance test specification," and GB/T 33591 "Industrial Ethernet switch technical specifications." FEXLINK's 40+ product series have all passed Modbus-IDA certification and CCC/CE certification, validating the reliability of the dual-protocol solution across 200+ customer deployments. The 408 national standard rules have been built into the CW edge computing gateway, monitoring Modbus communication compliance in Real-Time and automatically generating Modbus Poll/Slave diagnostic reports covering 15 key indicators including frame error rate, timeout statistics, and CRC check failure rate, providing O&M with an end-to-end communication health profile.