Skip to content

Flight Termination Configuration

The Flight termination failsafe action may be triggered by a safety check (e.g. RC Loss, geofence violation, etc. on any vehicle type or in any flight mode), or by the Failure Detector.

INFO

Flight termination may also be triggered from a ground station or companion computer using the MAVLink MAV_CMD_DO_FLIGHTTERMINATION command. This is sent, for example, when you call the MAVSDK Action plugin terminate() or terminate_async() methods.

When Flight termination is activated, PX4 simultaneously turns off all controllers and sets all PWM outputs to their failsafe values.

Depending on what devices are connected, the PWM failsafe outputs can be used to:

  • Deploy a parachute.
  • Extend retractable landing gear.
  • Move a PWM-connected gimbal to a safe orientation (or retract it) in order to protect the camera.
  • Trigger an inflatable device like an airbag.
  • Trigger an alarm.

There is no way to recover from flight termination. After triggering you should unplug the battery as soon as possible. You will need to reboot/power cycle the vehicle before it can be used again.

TIP

PX4 does not know what safety devices are attached - it just applies a predefined set of PWM values to its outputs.

TIP

Failsafe values are applied to all outputs on termination. There is no way to configure independent time-based (or other) triggering of the motors or specific safety devices.

INFO

This is not an independent Flight Termination System. If power is lost or if the autopilot crashes completely, the failsafe devices will not be triggered.

Hardware Configuration

Any safety device(s) (e.g. a parachute) that can be triggered by changing a PWM value can be used, and may be connected to any free PWM port (both MAIN and AUX).

INFO

If you're using Pixhawk-series board you will have to separately power the servo rail (i.e. from a 5V BEC, which is often also available from your ESC).

Software Configuration

The Safety topic explains how to set the flight termination as the failsafe action to be performed for particular failsafe check.

The Failure Detector can also (optionally) be configured to trigger flight termination if the vehicle flips (exceeds a certain attitude) or if failure is detected by an external automatic trigger system (ATS):

For each MAIN output to which a safety device is attached, where "n" is the PWM port number, set:

For each AUX output to which a safety device is attached, where "n" is the PWM port number, set:

Finally, set the PWM_AUX_FAILn and PWM_MAIN_FAILn PWM values for any motors.

Logic Diagram

The diagram below shows the logical flow around flight termination.

Logic diagram