A tube rupture exposes the low-pressure side of a heat exchanger to a pressure source that can exceed its allowable limit faster than the relief system can respond. A pressure safety valve (PSV) can protect the low-pressure side when it passes the calculated rupture flow and the pressure transient remains acceptable; a rupture disc is not automatically required. The number that matters is the maximum transient pressure at the protected equipment, including valve opening behavior, inlet losses, backpressure, and the location of the device.
Pressure-rise symptom
The initiating event is a breach between the high-pressure and low-pressure sides. Fluid enters the low-pressure volume until the pressures equalize, the source inventory is isolated, or a relief device discharges enough flow to arrest the rise. If the 10/13 rule is not credited, size and analyze the protection system without relying on that rule to justify the low-pressure side against the high-pressure pressure source.
Read the symptom as a rate problem, not merely a set-pressure problem. A PSV may have enough steady-state capacity yet still allow an excessive initial pressure peak if the receiving volume is small, the source differential is high, or the valve and connecting piping cannot establish relief flow quickly enough. This is pressure, force, and stored energy—not logic.
| Quantity or condition | Why it matters | Where to obtain it |
|---|---|---|
| High-side pressure and inventory | Define the available driving pressure and how long inflow can continue | Process design basis and upstream system model |
| Low-side allowable pressure | Sets the pressure limit for the transient | Exchanger nameplate, datasheet, and governing design records |
| Tube-rupture flow | Sets the required relieving load | Approved rupture-flow calculation |
| Low-side fluid phase and volume | Control compressibility and pressure-rise rate | Operating cases, exchanger geometry, and connected-volume model |
| Relief-device response | Controls flow during the opening transient | Certified device data and manufacturer documentation |
| Inlet and outlet pressure losses | Change the pressure at the vessel and at the PSV | Relief-system hydraulic calculation |
| Pressure differential above 1000 psi | For high-pressure gas entering a liquid-filled low-pressure side, this condition warrants transient analysis | Maximum coincident operating and upset pressures |
Tube-rupture mechanism
The breach behaves as a restriction between two pressure systems. Initial flow depends on the pressure differential, opening area, fluid properties, phase behavior, and downstream pressure. The inflow itself changes those conditions: the low side pressurizes, flashing or condensation may occur, and the high-side source may depressurize.
A spring-loaded safety-relief valve begins to lift when pressure reaches its set point. Disc and nozzle geometry create fluid reaction forces that drive the valve toward a larger opening. That pop action can be rapid, but it is not instantaneous. The protected equipment continues accumulating mass while pressure travels through the inlet piping and the valve moves through its opening response.
A rupture disc opens by membrane failure rather than a moving valve mechanism. Its value in a fast event is the absence of a conventional valve-opening stroke, but burst-pressure tolerance, temperature, backpressure, installation orientation, and fragment behavior still affect performance. Device type alone does not prove that the transient pressure stays below the allowable limit.
Diagnostic decision path
Start with the process phases. High-pressure gas entering a liquid-filled low-pressure side can produce a steep pressure rise because the receiving liquid has little compressible volume. A differential greater than 1000 psi in that arrangement is a clear trigger for dynamic analysis. Other phase combinations still require evaluation when the static sizing calculation cannot demonstrate an acceptable pressure response.
- Confirm the governing code basis, including how ASME Section VIII applies and whether the project permits a PSV, rupture disc, or combination assembly for this service.
- Define the credible rupture opening and calculate the inflow as upstream and downstream pressures change.
- Model the low-pressure equipment and all connected volumes that participate before isolation occurs.
- Represent the relief device with its actual opening characteristic, certified capacity basis, inlet piping, discharge piping, and backpressure.
- Compare the calculated pressure-time history at the exchanger with the applicable allowable pressure criterion.
- Repeat the analysis for credible operating states, including the condition that produces the fastest pressure rise rather than only the largest final flow.
The analysis also decides location. Long inlet piping adds volume, friction, and dynamic lag between the exchanger and the device. A relief device that works on connected piping in a steady calculation may need to be mounted at the vessel when the local exchanger pressure rises too quickly.
Protection-device procedure
Select a PSV alone when its opening response, certified capacity, materials, and piping arrangement keep the complete transient within the pressure limit. Include the tube-rupture load in the sizing case; matching the calculated mass flow at one pressure is not enough if the valve reaches that capacity only after an unacceptable peak.
Select a rupture disc alone when rapid opening or process compatibility favors a one-time device and the operating organization can tolerate shutdown and disc replacement after activation. Confirm that the downstream system can accept the discharge and that fragments cannot obstruct the relief path or damage downstream equipment.
A combination arrangement can place a nonfragmenting rupture disc beneath a PSV. The disc isolates the valve internals from process fluid during normal service; after the disc bursts, the PSV opens and can reseat when the event ends. Provide a connection or device in the space between the disc and valve for burst indication and valve testing. Treat the assembly as a system: trapped pressure between the devices changes the differential pressure across the disc and can alter its burst behavior.
Maintenance consequences belong in the selection. A rupture disc requires replacement after operation. A PSV usually reseats, but contamination or mechanical damage can leave it leaking or stuck open. Exotic valve materials may make isolation by a rupture disc economically attractive, while frequent pressure events may make repeated disc replacement operationally unacceptable.
Transient verification
Verify the selected design with a pressure-versus-time result at the exchanger, not just a relief-area worksheet. The calculation must show the initial pressure, rupture onset, inflow history, relief-device activation, peak pressure, and subsequent decay or equalization. Review the pressure at both the protected equipment and the PSV inlet because they can differ during a rapid event.
Check the installed arrangement against the model: device type, set or burst pressure, bore, inlet length, fittings, discharge routing, and interspace instrumentation. For a disc-and-PSV assembly, verify that the disc is nonfragmenting for the application, the cavity can indicate leakage or bursting, and the PSV remains testable without defeating the protective function.
Acceptance requires more than a nominal set-point match. Confirm that the peak equipment pressure satisfies the governing code basis, the relief path remains open throughout the event, and the final disposition is stable: the PSV reseats as intended, or the rupture-disc discharge is isolated by the operating procedure.
Recurring design pitfalls
A common error is treating the tube-rupture flow as constant. The driving pressure and phase state evolve during the event, so a single steady-state value can miss the initial peak or exaggerate the later load. Another error is locating the device for piping convenience while ignoring the pressure wave and hydraulic resistance between the exchanger and the relief inlet.
Using the PSV set pressure as proof of protection also fails. Set pressure marks the start of valve action; it does not describe the full lift response or the vessel pressure during discharge. Likewise, installing a rupture disc does not by itself solve an undersized outlet, excessive backpressure, or an obstructed relief path.
For combination assemblies, leaving the interspace unmonitored can hide a failed disc or trapped pressure. Selecting a fragmenting disc can also introduce downstream blockage risk. Finally, decide before commissioning who replaces a burst disc, who inspects a PSV after operation, and what condition permits restart.
Frequently asked questions
What happens if a PSV is sized for tube-rupture flow?
It can provide acceptable protection when its dynamic opening response and the complete relief system keep the exchanger pressure within the governing limit. Confirm this with a pressure-time analysis, not capacity alone.
What happens if the PSV does not open fast enough?
The low-pressure side can exceed its allowable transient pressure before full relief flow develops. Reduce hydraulic lag, relocate the device closer to the exchanger, revise the relief arrangement, or evaluate a rupture disc through the same transient model.
What happens if pressure becomes trapped between a rupture disc and PSV?
Interspace pressure reduces the differential pressure across the disc and can change when it bursts. Fit the required indication and test connection, then include credible interspace pressure in the device review.
What happens if the transient analysis cannot demonstrate an acceptable peak pressure?
Stop the design release and escalate to the relief-device manufacturer and the responsible official engineering or code-support channel. Provide the exchanger limits, phase conditions, pressure differential, rupture-flow model, piping geometry, and calculated pressure-time trace so they can review the device selection and location.