Furnace Puff-Back on Light-Off After a Short Shutdown
A standard boiler burning natural gas through a forced-draught burner has been shut down for 40 minutes for a filter change on the fuel train. The burner management system has a pre-purge timer set to 30 seconds at high fire, a flame scanner, and a pilot proving period. The operator restarts the boiler, opens the manual gas valve, and presses start. During the pre-purge the operator notices the draught gauge reading is lower than normal but attributes it to the cold boiler. The burner lights with a dull roar and a visible puff of flame escapes from the furnace access door, tripping the flame scanner and shutting off the fuel. No one is injured. The plant wants the boiler back on line within the hour.
1. Explain the likely sequence of events that produced the puff-back, and identify the safety functions that should have prevented it.
Read the worked answer
The likely sequence is that unburnt fuel accumulated in the furnace before ignition. If the pre-purge was ineffective, either because the purge timer was too short for the furnace volume or because the draught was insufficient to clear the furnace, then gas left in the furnace from the previous shutdown or from the pilot and main flame trial for ignition ignited as a body. A dull roar and flame at the access door are classic signs of delayed ignition of an accumulated fuel-air mixture. The safety functions that should have prevented it are: an adequate pre-purge at the correct air flow, proven by an air-flow switch and timed to give several furnace volume changes; a furnace purge that cannot be bypassed; a flame scanner that proves the pilot before the main valve opens; and a draught or air-flow interlock that prevents light-off if draught is low. The low draught reading during purge is the key clue: if draught was below the interlock setpoint, the purge was not effective and the burner should not have been allowed to light.
2. Describe the checks you would carry out before any attempt to relight, and explain why simply pressing start again is unacceptable.
Read the worked answer
Before any relight I would close the manual gas valve and allow the furnace to ventilate fully, then investigate why draught was low: check the flue and stack for obstructions, check the forced-draught fan and its damper linkage, check the air-flow switch and draught gauge calibration, and check the purge timer setting against the manufacturer's specified purge time for the furnace volume. I would check the flame scanner for cleanliness and correct sighting, check the pilot and main gas valves for leakage, and verify the burner management system sequence with a dry run if the controls allow. Simply pressing start is unacceptable because the furnace may still contain unburnt gas, and a second ignition could produce a much larger explosion. The burner management system is designed to require a full purge before each light-off; overriding or short-circuiting that requirement defeats the primary protection against furnace explosions. Relighting should only proceed once draught is proven normal, the purge is effective, and the cause of the low draught has been found and corrected.
3. The production manager asks whether the pre-purge timer can be shortened to speed up restart. How do you answer?
Read the worked answer
I would refuse to shorten the purge timer. The purge time is set to ensure a sufficient number of furnace volume changes to clear any combustible gas before ignition, and it is a safety-critical setting. Shortening it to save a few minutes increases the risk of exactly the puff-back that just occurred, and a larger accumulation could cause a furnace explosion with fatal consequences. If restart time is a genuine production issue, the correct approach is to investigate why the draught was low and fix that, not to reduce the purge. Any change to the burner management system must be authorised by the manufacturer or a competent engineer, documented, and justified by a calculation of furnace volume changes, not by production pressure. I would record the request and my refusal in the log and raise it with the site's duty holder.