A transport aircraft’s flight controls, landing gear, brakes, nose-wheel steering, thrust reversers and high-lift devices may all require forces far beyond what a pilot or electric motor could supply directly at each surface. Hydraulic power solves that problem by transmitting energy through pressurised fluid. A relatively small control input can command an actuator capable of moving a heavily loaded rudder, extending a multi-wheel landing gear or applying enormous braking force.
Modern airliners do not rely on one hydraulic circuit. They use multiple independent systems, separate pumps, isolation valves and emergency power sources so that a single leak or component failure does not remove control of the aircraft. The exact architecture differs between aircraft types, but the engineering principles are consistent: generate pressure, store and condition fluid, distribute it safely, convert pressure into movement and preserve essential functions after failures.
Pascal’s principle in an aircraft system
Hydraulics use the fact that pressure applied to a confined fluid is transmitted throughout the fluid. Force at an actuator equals pressure multiplied by piston area. A system operating at several thousand pounds per square inch can therefore create a very large linear force from a compact actuator.
Pressure is not the same as flow. Pressure provides the potential to create force; flow determines how quickly an actuator moves. A pump must provide enough flow for simultaneous demands such as landing-gear extension, flap movement and braking. If several users operate together, system pressure may remain near normal while movement rate changes according to available flow and priority logic.
Aircraft designers select operating pressure as a compromise. Higher pressure allows smaller actuators and lighter pipes for a given force, but increases sealing, temperature, leakage and material demands. Many established transport aircraft systems operate around 3,000 psi, while some newer designs use approximately 5,000 psi to reduce component size and weight. The approved pressure is specific to the aircraft and should never be generalised into a maintenance limit for another type.
The main components
A hydraulic system begins with a reservoir. The reservoir stores fluid, allows thermal expansion, provides a place for entrained air to separate and supplies the pump. Many transport-aircraft reservoirs are pressurised, often using regulated engine bleed air or another pneumatic source, to reduce the risk of pump cavitation at altitude.
Pumps convert mechanical or electrical power into hydraulic flow. Engine-driven pumps provide high continuous capacity while the engines are running. Electric motor-driven pumps support ground operation, backup or peak demand. Some aircraft use air-driven pumps or power-transfer units. Check valves prevent reverse flow, while pressure-regulating or compensating mechanisms control output.
Filters remove particles that could damage valves or servo components. Heat exchangers control temperature, sometimes using fuel as a heat sink. Accumulators store pressurised fluid and gas, smoothing pressure fluctuations and providing limited emergency energy. Manifolds, fuses and shutoff valves distribute and isolate the system.
Actuators convert fluid pressure into mechanical movement. A linear actuator moves a piston and rod. A rotary actuator produces angular motion. Servo valves meter fluid according to a flight-control or system command. Position sensors report movement to the controlling computer.
Why the fluid matters
Hydraulic fluid must lubricate components, remain stable over a wide temperature range, resist foaming and protect against corrosion. Transport aircraft commonly use fire-resistant phosphate-ester fluids, while other aircraft may use mineral- or synthetic-hydrocarbon fluids. These families are not automatically compatible.
Using the wrong fluid can damage seals, hoses and coatings. Maintenance organisations control containers, servicing equipment and identification to prevent cross-contamination. Technicians also protect fluid from water, dust and fibres because servo-valve clearances can be extremely small.
Fluid appearance alone does not prove serviceability. Samples may be analysed for particle count, moisture, acidity or evidence of component wear. A system that repeatedly generates contamination may have an internal failure even if pressure remains normal.
Multiple independent systems
A large airliner commonly has two or three main hydraulic systems, sometimes identified by colours, letters or numbers. They use separate reservoirs, pumps and pipe routes. Critical functions are divided so that loss of one system leaves another means of control.
A single flight-control surface may have actuators powered by more than one hydraulic system. Alternatively, different surfaces provide aerodynamic redundancy: one system powers an inboard aileron, another an outboard aileron and both contribute through spoilers. The architecture is designed through a system-safety assessment that examines single and combined failures.
Physical separation is essential. Two systems routed together through the same vulnerable area could be severed by one event. Designers separate pipes, install shields and use shutoff or hydraulic-fuse devices to limit fluid loss after a rupture. Absolute separation is impossible because systems must reach common regions such as wings and tails, so the design considers likely damage zones.
Engine-driven pumps
An engine-driven pump is normally connected to the engine accessory gearbox. It produces flow whenever the engine operates, subject to system controls. Variable-displacement pumps can reduce output when demand is low while maintaining pressure.
If an engine stops, its pump stops. The remaining systems must carry the essential loads. On a twin-engine aircraft, designers avoid placing all primary control capability on the pump associated with one engine. An electric backup pump may pressurise the affected system, or another system may power alternate actuators.
Pump health is monitored through pressure, temperature and sometimes case-drain flow. Rising case-drain flow can indicate internal wear. Low pressure may result from pump failure, reservoir depletion, an open valve or a major leak, so crews use multiple indications rather than assuming the pump itself is faulty.
Electric pumps and ground operation
Electric pumps allow hydraulic operation without the corresponding engine. Ground crews may use them to open cargo doors, test controls or operate brakes. In flight, they provide backup or supplement engine-driven pumps during high-demand phases.
An electric pump creates a substantial electrical load and heat. Procedures may limit continuous ground operation when cooling airflow is low. The pump’s power source also matters during failures: a backup pump is only useful if the electrical bus feeding it remains available.
Some aircraft automatically start an electric pump after low pressure or during take-off and landing. Others require crew selection. Automatic logic reduces response time, but indication must show the crew which source is operating and whether the underlying fault remains.
Power transfer units
A power transfer unit, or PTU, transfers mechanical power between hydraulic systems without transferring their fluid. A hydraulic motor powered by one system drives a pump in another. This preserves fluid independence while allowing a healthy system to help pressurise one with an unavailable pump.
The PTU does not create energy. If the supplying system is heavily loaded, assisting another system can reduce its margin. Control logic starts the unit only under defined pressure differences or aircraft configurations. The characteristic sound heard on some aircraft during ground operation comes from PTU cycling.
Because the fluids remain separate, contamination or leakage in one system is not normally carried into the other through the PTU. Mechanical shaft seals and interfaces still require maintenance, and a failed PTU can become unavailable just when redundancy is needed.
Ram air turbines and emergency generation
A ram air turbine, or RAT, is a small turbine deployed into the airstream after major power loss. Airflow spins the turbine, which drives a hydraulic pump, an electrical generator or both depending on aircraft design.
RAT output depends on airspeed. It provides enough power for essential control and instruments, not normal full-system capability. Landing-gear, flap or brake operation may be slower or use alternate methods. Crews follow a dedicated procedure because the aircraft’s energy budget becomes limited.
Some aircraft deploy the RAT automatically after loss of selected electrical or hydraulic sources; others allow manual deployment. Once deployed, it is usually not retracted in flight. Ground testing uses special procedures because the turbine and deployment mechanism can be hazardous.
Accumulators
An accumulator normally contains hydraulic fluid separated from compressed nitrogen by a piston, bladder or diaphragm. When system pressure rises, fluid compresses the gas and stores energy. When demand exceeds pump flow or the pump stops, the gas pushes fluid back into the system.
Accumulators damp pressure pulsations, support rapid transient loads and can provide limited brake applications. They are not an unlimited backup. Available fluid volume falls as pressure drops, and gas pre-charge must be correct for useful performance.
Maintenance checks nitrogen pre-charge with hydraulic pressure removed according to the manual. Loss of pre-charge reduces energy storage and may cause rapid pump cycling. Fluid entering the gas side indicates internal separation failure.
Flight-control actuation
On a fly-by-wire aircraft, pilot or autopilot commands reach flight-control computers. The computers send electrical commands to actuator control electronics or servo valves. Hydraulic pressure then moves the surface. Position feedback closes the control loop.
A surface may use conventional servo-hydraulic actuators, electrohydrostatic actuators or electrically backed hydraulic units. Electrohydrostatic designs generate local hydraulic pressure with an electric motor and pump, reducing dependence on central pipework while retaining hydraulic force density.
Actuators include damping and failure-isolation features. A failed actuator must not jam the surface or oppose healthy actuators with excessive force. Bypass modes, pressure-off braking and active-monitoring logic differ by design.
Landing gear and high-lift systems
Landing gear requires high force but operates only during limited phases. Hydraulic actuators unlock doors, move the gear and engage downlocks or uplocks. Sequence valves ensure doors and gear move in the correct order. If normal pressure is lost, gravity extension, free-fall, alternate electric power or stored pressure may be available.
Flaps and slats often use central hydraulic motors connected to mechanical transmission shafts, or individual powered actuators with synchronisation. Skew and asymmetry detection stop movement before structural damage. A system may use two hydraulic motors so one can continue at reduced speed after a failure.
Because these systems change aircraft configuration, position indication is independent enough to detect disagreement. Crews need to know not only whether pressure exists but whether the surfaces actually reached the commanded position.
Brakes, steering and thrust reversers
Main-wheel brakes are commonly hydraulic. Pilot pedal input or an autobrake command is converted into metered pressure. Anti-skid computers reduce pressure at individual wheels approaching lock. Alternate braking may use another hydraulic system or accumulator.
Nose-wheel steering uses hydraulic actuators commanded by a tiller, rudder pedals and automatic rollout systems. Steering authority is limited at higher speed. Loss of hydraulic pressure may leave free-castering or restricted steering depending on type.
Thrust reversers use hydraulic or electrical actuation. Where hydraulic, isolation and locking systems prevent uncommanded deployment. The reverser normally requires weight-on-wheels and other conditions before pressure can move the translating structure or blocker doors.
Leak detection and hydraulic fuses
Hydraulic leaks are dangerous because fluid loss can disable multiple users and hot fluid can create smoke or fire hazards. Some leaks are detected by reservoir quantity, pump pressure or temperature trends. Others become visible during inspection.
A hydraulic fuse senses excessive flow and closes to isolate a downstream rupture. It protects the rest of the system but also removes the affected user. Fuses are placed where preserving fluid is more important than retaining one component.
Shutoff valves can isolate engine-driven pumps or fire zones. Pulling an engine fire handle may close hydraulic, fuel and bleed-air valves associated with that engine. The resulting loss of one pump is accepted to reduce fire risk.
What crews see after a failure
A hydraulic failure may produce low pressure, low quantity, pump fault, high temperature or flight-control messages. The correct response depends on whether the problem is source loss or fluid loss. Starting a backup pump can restore pressure after a pump failure, but it can worsen a leak by pumping the remaining fluid overboard.
Procedures therefore use quantity and pressure together. A stable quantity with low pressure suggests a source problem; falling quantity indicates leakage. The aircraft’s electronic checklist may automatically identify affected systems and landing-distance penalties.
Handling changes can include heavier controls, slower flap movement, reduced spoiler availability, loss of nose-wheel steering or alternate braking. Modern designs aim to keep the aircraft controllable, but controllable does not mean operationally normal.
Combined failures and common causes
Certification requires assessment of combinations whose probability and consequences are significant. A burst tyre can damage nearby hydraulic lines. An uncontained engine failure can affect more than the engine’s own system. Fire, structural damage or maintenance error can defeat physical separation.
History has shown that nominally independent systems can share vulnerable routes or be damaged by the same event. Designers use zonal safety analysis, common-cause analysis and particular-risk assessment to identify those weaknesses. Service experience may lead to shields, rerouting, improved clamps or revised inspections.
Maintenance actions are also a common-cause risk. Connecting lines incorrectly, leaving a valve closed or contaminating two systems with the same servicing rig can defeat redundancy. Independent inspections and functional tests are therefore required for critical tasks.
Temperature control
Hydraulic power is not perfectly efficient. Pumps, restrictions and actuators convert some energy into heat. High temperature reduces fluid life and can damage seals. Very low temperature increases viscosity and may slow operation.
Heat exchangers transfer energy to fuel or ambient air. Reservoir quantity and pressurisation help prevent aeration and cavitation. Crews may be instructed to reduce pump use or delay a high-demand operation after a temperature warning.
On the ground, repeated flight-control movement with electric pumps can overheat fluid because there is little cooling airflow. Maintenance manuals define duty cycles and cooling periods.
Maintenance and condition monitoring
Technicians inspect reservoirs, filters, pipes, hoses, actuators and pump interfaces. Leaks are classified by location and rate according to the maintenance manual; not every trace of fluid has the same dispatch consequence.
Filter differential-pressure indicators show when contamination is restricting flow. Magnetic plugs or debris analysis can identify pump or actuator wear. Reliability programmes track removals and faults across the fleet to detect emerging trends.
After a major component failure, flushing may be required to remove debris. Simply replacing the failed pump without cleaning the system can damage the replacement. Approved procedures define which lines, filters and actuators must be inspected.
Why hydraulics remain dominant
More-electric aircraft replace some central hydraulic functions with electrical actuators, but hydraulics remain attractive where very high force, compact size and established reliability are required. A hydraulic actuator can tolerate severe transient loads and hold position without continuously consuming the same electrical power as some alternatives.
The disadvantage is a network of fluid, pipes, seals and pumps that can leak and requires maintenance. Future aircraft may use more local electrohydrostatic or electromechanical actuation, reducing central systems. The transition will depend on actuator weight, thermal management, fault tolerance and certification evidence.
Conclusion
Aircraft hydraulics are not a single pump pushing fluid around the airframe. They are a layered power architecture designed to remain useful after failures. Reservoirs, pumps, accumulators, valves, filters, actuators, PTUs and emergency turbines work together to provide force where the aircraft needs it.
Redundancy comes from independent systems, physical separation, alternate actuators and emergency sources. It is preserved by maintenance discipline and system monitoring. When a pilot moves a control or selects the landing gear, the visible response may appear simple. Behind it is a carefully managed flow of pressurised fluid carrying enough energy to move some of the most heavily loaded structures on the aircraft.
Editorial Notice: This article was prepared using information considered reliable and publicly available at the time of publication. Every reasonable effort has been made to ensure accuracy; however, aviation news can develop rapidly, and subsequent information may alter the facts or context reported. If you believe any material is inaccurate, misleading, improperly attributed or should be reviewed for amendment or removal, please contact us with the article title, the specific passage concerned and supporting evidence. We will assess legitimate requests promptly and, where appropriate, correct, clarify, update or remove the material.