Viewing a single comment thread. View all comments

Hiddencamper t1_jc1ir2b wrote

The design of the RBMK is fundamentally backwards. It’s all about the relative values of reactivity.

Coolant (water) goes in the bottom of the RBMK and boils as it goes up. Because this is a graphite moderated reactor, water has less moderation capability than the graphite. This is important because liquid water will reduce your neutron mean free path distance (how far the neutron travels before it is absorbed by something or lost from the reactor). As the water boils, it’s density drops significantly and the mean free path length for neutrons increases.

So let’s put this together. At the bottom of the reactor, you have neutrons which are more or less struggling to find graphite, get moderated, and get back into the fuel, before leaking out or being absorbed without causing fission.

At the top of the reactor, your neutrons have a very easy time getting to the graphite to get moderated and cause fission.

This also means the power generated at the bottom of the reactor is less than the top of the reactor (axial flux tilt is top peaked).

But the top of the reactor has less coolant (because much of the water has already boiled to steam). So the top of the reactor has a tendency to produce more power, with less coolant, which is inherently a risk to exceeding critical power ratio. While the bottom of the reactor, even with all control rods out, has little power production, and is also very sensitive to emergencies which cause rapid voiding since there are typically no control rods down there just to keep the bottom of the core running.

As a result, the RBMK has control rods which come in from the top. Backwards for a boiling type reactor but a necessity.

So what’s the problem here? Where the bottom of the reactor is going to not only barely have any power output, the fuel is going to be wasted down there, it’s more sensitive to certain transients, so what did they do? They put graphite followers on the rods. To help boost the reactivity in the bottom of the core. Yes this is a dumb idea, but on its own it’s not terrible. With the followers inserted in the core, they no longer have positive reactivity to add. They already have “done their damage” so to speak. So if you had a power spike, as the rods inserted, the graphite followers would be pushed down out of the core and be replaced with control rods.

This was a “win win” for this dumb backwards reactor.

Except….. if you ever find yourself pulling the followers out of the reactor, especially if you also have low reactor coolant flow and pressure and other conditions which could cause rapid boiling, and you have low control rod density, then the effect of a scram is to push the followers back into the core and cause a power spike.

Why there weren’t mechanical limits on the control rods equipped with followers or other system interlocks is beyond me. This design “feature” should never have existed without something in place to ensure those followers cannot be removed beyond a certain position. Or better yet, don’t build backwards reactor designs.

1,151

BrightCharlie t1_jc1xudx wrote

>Why there weren’t mechanical limits on the control rods equipped with followers or other system interlocks is beyond me

To be fair to the designers, they did have to override a bunch of automatic and safety features that existed precisely to avoid accidents like that.

I'd argue that what happened in Chernobyl wasn't exactly an accident, because they deliberately put the reactor in a state where bad things would definitely happen -- as they did.

423

BullockHouse t1_jc23dm0 wrote

It's definitely a mix of poor design and operator error. In general, if the reactor is beginning to show behavior you don't understand, that's an emergency and you need to execute a safe shutdown immediately. When they got into the xenon pit behavior and didn't know what was going on, trying to power through it without actually understanding what was happening was idiotic.

265

Shadeauxmarie t1_jc2rlc1 wrote

“Back away from the reactor. It’ll save itself.” Navy nuclear power program.

97

BullockHouse t1_jc3ltwc wrote

The naval reactors are rad. Some very neat architectures on both the US and Russian side, and extremely good service records.

32

Stillwater215 t1_jc5caks wrote

Passively safe reactors should be the future of electricity generation. Modern reactors are designed so that the job of the operators is to “fight” the reactor to make it more reactive. If they walk away or are incapacitated, the reactor brings itself into a steady, low-power state. But whenever people think of nuclear power, they only think of Chernobyl…

13

Shadeauxmarie t1_jc5hki7 wrote

Common question for Navy nuclear watchstanders: “Everyone dies on the ship. How long will the reactor run and what will cause the shutdown?”

3

ThatOtherGuy_CA t1_jc2aq85 wrote

The biggest issue with Chernobyl, which was also showcase in the show, wasn’t that the reactors had a potentially dangerous design, it’s that the Soviet Government hid the flaw from the reactor operators. So to their understanding an RMBK reactor couldn’t possibly blow up. Because the boron control rods would kill any reaction. And they either weren’t aware of the carbon tips, or at least the risks they posed.

So yes, the operators intentionally cooked the Chernobyl reactor to a point where it was a bomb, but they felt safe doing it because they had complete confidence that AZ-5 would kill the reaction. Not act as a detonator.

201

Somnif t1_jc2td2d wrote

Yeah, something the show didn't really mention was that Chernobyl Unit 1 had actually suffered a similar (but much less severe) incident a few years earlier. It was not just a known issue, it was a known issue on site! And still, hushed up and hidden.

74

Hiddencamper t1_jc2mhcl wrote

Exactly.

Today if you say the words “reactor safety limit”, that’s an inviolable parameter. If a reactor safety limit is exceeded the plant cannot restart without approval (10cfr50.36). And if there is a potential to exceed one, you are in a reportable event (for example is a safety system was found degraded such that it would actuate too late to protect the safety limit).

As reactor operators we are required to know them from memory.

The same level of deliberate caution around those limits likely did not exist with the USSR and the RBMK design, as evidenced by them withdrawing rods as much as they did. When rods are they far out in the RBMK, you not only get a positive reactivity spike on a scram, but you also magnify your positive void coefficient.

73

RexStardust t1_jc27u7l wrote

Yes but they did so with the understanding that they had the ability to pull the plug with AZ-5. The designers and/or the overall operating authority knew that you needed to use AZ-5 earlier because of the initial reactivity of those graphite tips, but plant operators had not been informed.

64

Y34rZer0 t1_jc4muxv wrote

That sounds fairly Soviet… “Let’s keep the reactor operators as in the dark as possible”

10

[deleted] t1_jc231jr wrote

[removed]

17

[deleted] t1_jc2bg0n wrote

[removed]

78

[deleted] t1_jc2cdqt wrote

[removed]

14

[deleted] t1_jc2pjsj wrote

[removed]

14

Sythix6 t1_jc3eo36 wrote

I'd agree with that argument, everyone was warned, everyone still followed bad orders, all because Russia cannot look weak at any time, Soviet era Russia was rampant with these types of accidents, not as globally impactful though, most stemming from lack of quality materials caused by embezzlement from generals and other higher ups.

4

pzerr t1_jc4ut9j wrote

Every time I read the events that led up to this I want to yell 'don't do it'. Even though I know the outcome I just feels if I yell loud enough they will hear me.

There were so many steps that led up to this. Had they stopped at any of them, this could have been averted. That design was just a disaster to happen all the same.

2

PHATsakk43 t1_jc2698d wrote

You’re leaving out the xenon precluded startup conditions which allowed them to pull rods out farther than they should have.

It’s a pretty good design, economically speaking, as it’s the one reactor design that doesn’t require fuel enrichment or a fancy moderator like heavy water to function.

37

Hiddencamper t1_jc2ms2l wrote

That’s true. They wouldn’t have attempted to do what they did if they weren’t flooded with xenon.

To be fair though, all light water reactors can overcome xenon except for the very end of the operating cycle. So you avoid issues related to xenon in most reactors out there which eliminates risk of potential power spikes. And the CANDU design simply doesn’t have enough reactivity to pull through a xenon peak (which is why their reactor protection systems will try to stabilize the reactor at 60% or 2% power when it is safe to do so, to allow the operators an opportunity to keep the unit running).

22

PHATsakk43 t1_jc33vnn wrote

You’re answering your own question.

The low reactivity of the RBMK is why the moderator tipped control rods existed. The xenon-precluded startup is inherent in any reactor, regardless of enrichment as the xenon is from fission of U-235 and is a function of time at power (equilibrium xenon) or for a startup, time after shutdown (peak shutdown xenon.)

Repetitive startup/shutdowns that were being performed at Chernobyl would create the same xenon problems with any reactor, at any point in operating cycle if done excessively.

8

Hiddencamper t1_jc35h9s wrote

BWRs never are xenon precluded. They always, at all parts of the operating cycle, have sufficient hot excess reactivity to have xenon override capability. They also naturally stabilize spatial and axial xenon tilt based on their design and the boiling boundary effect.

Pwr plants have total xenon override until the last 5-8% of cycle, when they are essentially at max dilution. They do not have natural flux tilt stabilization so the operator has to manually make adjustments to control tilt within limits.

I have personally started up a commercial BWR in peak xenon. It was very weird to have the reactor go critical moving a corner rod from 00 to 04, not see the criticality (power actually appeared to be going down at the time we notched it out), then as xenon burnout started happening we saw only one SRM period on scale. The PPC displays, when you have period in trend mode, you can see an inflection when critical occurs, and we saw the signature only on one instrument which didn’t make much sense. So we stopped pulling rods to watch, as a minute or two later the second SRM started to come on scale, then the third and fourth, as xenon burnout reduced shielding around the SRMs and allowed the core to finally couple. Then reactor period advanced over the next 12-15 minutes to about 82 seconds, when we finally hit point of adding heat and everything stabilized. Not a common evolution and I can see where other operators pulled too far and tripped their units, because you don’t see the core go critical on peripherals for quite a while.

23

PHATsakk43 t1_jc3bqm4 wrote

I've worked around BWRs but never been an operator at one (my fleet had a two unit station BWR, while the rest were PWRs.)

I stand corrected in that case. Does make perfect sense when you game it out, as you can basically put a shitload of positive reactivity into a BWR.

I have heard of situations similar to Chernobyl at naval plants (all rods out, waiting on xenon decay, below POAH), but again, that was all stories as I only operated new naval plants as well.

4

Hiddencamper t1_jc3czqr wrote

A full power BWR has a void defect around 40% of your total reactivity. When you scram, those voids go away, and you recover all of that reactivity. Voids are dominant in a BWR. The rule of thumb is Doppler 10^-5, moderator temp 10^-4, void coefficient 10^-3. So you always have enough to start back up in a BWR. And actually, especially if it’s a fast restart, more xenon helps a lot with getting to target rod pattern as it’s one of the things that impacts thermal limits and PCIOMR.

5

LudSable t1_jc2pnng wrote

After the Chernobyl disaster all the current active RMBK were fitted with safety features and actual shielding in the walls. Better late than ever...

>Following the accident at Chernobyl, all remaining RBMK reactors were retrofitted with a number of updates for safety. The largest of these updates fixed the RBMK control rod design. The control rods have 4.5-metre (14 ft 9 in) graphite displacers, which prevent coolant water from entering the space vacated as the rods are withdrawn. In the original design, those displacers, being shorter than the height of the core, left 1.25-metre (4.1 ft) columns of water at the bottom (and 1.25 metres [4.1 ft] at the top) when the rods were fully extracted.[3] During insertion, the graphite would first displace that lower water, locally increasing reactivity. Also, when the rods were in their uppermost position, the absorber ends were outside the core, requiring a relatively large displacement before achieving a significant reduction in reactivity.[40] These design flaws were likely the final trigger of the first explosion of the Chernobyl accident, causing the lower part of the core to become prompt critical when the operators tried to shut down the highly destabilized reactor by reinserting the rods. The updates are:

>* An increase in fuel enrichment from 2% to 2.4% to compensate for control rod modifications and the introduction of additional absorbers.

  • Manual control rod count increased from 30 to 45.
  • 80 additional absorbers inhibit operation at low power, where the RBMK design is most dangerous.
  • AZ-5 (emergency reactor shutdown or SCRAM) sequence reduced from 18 to 12 seconds.
  • Addition of the БАЗ or BAZ* system,[41] (rapid reactor emergency protection) which would insert 24 uniformly distributed rods into the reactor core via a modified drive mechanism within 1.8 to 2.5 seconds.
  • Precautions against unauthorized access to emergency safety systems.

>In addition, RELAP5-3D models of RBMK-1500 reactors were developed for use in integrated thermal-hydraulics-neutronics calculations for the analysis of specific transients in which the neutronic response of the core is important.[42]

>*BAZ button is intended as a preemptive measure to bring down reactivity before AZ-5 is activated, to enable the safe and stable emergency shutdown of a RBMK.

25

Guilherme_Sartorato t1_jc4jg8k wrote

The control rod modifications and additional absorbers reduced the positive void coefficient from +4.5 (far higher than any architecture other than RMBK) to +0.7, hence the need for enriching the uranium a bit more.

5

Cthulhu625 t1_jc2sptq wrote

Most of the reactor control rods are inserted from above; 24 shortened rods are inserted from below and are used to augment the axial power distribution control of the core. With the exception of 12 automatic rods, the control rods have a 4.5 m (14 ft 9 in) long graphite section at the end, separated by a 1.25 m (4 ft 1 in) long telescope (which creates a water-filled space between the graphite and the absorber), and a boron carbide neutron absorber section. The role of the graphite section, known as "displacer", is to enhance the difference between the neutron flux attenuation levels of inserted and retracted rods, as the graphite displaces water that would otherwise act as a neutron absorber, although much weaker than boron carbide; a control rod channel filled with graphite absorbs fewer neutrons than when filled with water, so the difference between inserted and retracted control rod is increased. When the control rod is fully retracted, the graphite displacer is located in the middle of the core height, with 1.25 m of water at each of its ends. The displacement of water in the lower 1.25 m of the core as the rod moves down could cause a local increase of reactivity in the bottom of the core as the graphite part of the control rod passes that section. This "positive scram" effect was discovered in 1983 at the Ignalina Nuclear Power Plant. The control rod channels are cooled by an independent water circuit and kept at 40–70 °C (104–158 °F). The narrow space between the rod and its channel hinders water flow around the rods during their movement and acts as a fluid damper, which is the primary cause of their slow insertion time (nominally 18–21 seconds for the reactor control and protection system rods, or about 0.4 m/s). After the Chernobyl disaster, the control rod servos on other RBMK reactors were exchanged to allow faster rod movements, and even faster movement was achieved by cooling of the control rod channels by a thin layer of water between an inner jacket and the Zircaloy tube of the channel while letting the rods themselves move in gas.

​

To answer the question of why they didn't have more safety features, likely money.

10

Blaizzzzzed t1_jc2oyak wrote

Man. All you need are those blue and red cards and it’s like the series. ;)

8

Hiddencamper t1_jc35kpz wrote

My wife was watching Chernobyl with me and she said the red and blue cards were the first time it made sense…… she doesn’t like hearing me talk I guess : )

They did a great job in the show with the cards. There’s a little more nuance to the what and why but it was a great explanation that incorporated a lot of technical details.

13

chronoboy1985 t1_jc3scp2 wrote

What would the fundamentally correct way to design the reactor if the RBMK was backwards?

3

Hiddencamper t1_jc4gdls wrote

I would have preferred to make it a pressurized water reactor similar to a CANDU. Or minimize boiling in the fueled region similar to the ESBWR. The issue is you are voiding your coolant in the reactor. If you never let it boil you don’t have the strong positive void coefficient (and you can design around loss of pressure transients like the CANDU design). Then it doesn’t matter as much if rods go in the top or the bottom.

Honestly the CANDU design is a far better answer. You still have some positive void coefficient but you can design around it.

4

Y34rZer0 t1_jc4mn8h wrote

What a comprehensive answer, thank you.
One thing I remember hearing, and I’ve always wondered if it was true, is that water is such a good ‘insulator’ for radiation that you could actually swim around in the water at the top of a modern reactor and not be harmed?

2

Hiddencamper t1_jc4sknq wrote

So there are a few different things that we use water for.

Water is a great coolant.

It also makes a good moderator in many designs.

It is an effective shield for radiation sources. About 7 feet of water will reduce the lethal radiation levels in nuclear fuel down to levels we can work under. The spent fuel is typically under 23 feet of water to act as a buffer in case a fuel rod leaks or splits open to act as a dissolving agent for radioisotopes that leak out.

The last part though, is the water can have radioactive material dissolved in it. So yeah it would shield you from the radiation from fuel rods 23 feet deep. But if there are dissolved fission products in the fuel, when you jump in the water those products are now coated on your skin, causing direct radiation impact. If you ingest it or your body absorbs it, you can have internal effects.

So while it’s not going to be lethal like hugging a fuel rod, it’s still harmful and we need to decontaminate you to not only protect you, but keep it from getting out of the plant.

6

Y34rZer0 t1_jc4sqey wrote

thank you for your response, sounds like I need to rethink my summer vacation next year 😁

3

galqbar t1_jc4lgm7 wrote

What a superb and informative comment. I thought I knew a fair bit about RBMK reactors and the accident but there was a lot of interesting new information here.

Boiling coolant inside of the vessel seems like a Bad Idea when one of the effects is to vary the amount of moderation at different depths in the core.

1

Hiddencamper t1_jc4rz0u wrote

We do that in a boiling water reactor. But in that case the water is the coolant and the moderator, so as you boil, you get less moderation, which protects the upper portion of the core. We also “shape” the flux profile by adjusting enrichment and gadolinium content (burnable poisons) in the fuel.

Normally in a BWR, power leaks in the bottom 1/4 of the core, and as you deplete the fuel in the bottom later in the cycle, the water is able to “climb” further up the core before boiling, which improves the moderator in the upper portion of the core. By the end of core life, the power peak is in the top 1/3rd of the core.

So it can work when designed right.

But yeah in nearly all other cases, you want to keep your coolant and moderator in a single phase (for the most part)

2

tauofthemachine t1_jc4ravu wrote

>Why there weren’t mechanical limits on the control rods equipped with followers or other system interlocks is beyond me.

I believe the answer to that is in the book "Atomic accidents" By James Mahaffey. Apparently there actually were safety systems like that, but in preparation for the safety test they had a special switch installed which disabled them.

1

Hiddencamper t1_jc4rk1f wrote

They disabled the reactor trip system. But still typically with actual reactivity controls you have some other interlocks.

1

Ridley_Himself t1_jce1e0z wrote

So, if I'm reading this correctly, the design flaw is that, if you need to insert the control rods to kill a reaction, the graphite tips have to move past the portion of the fuel with the highest rate of reaction?

1

Hiddencamper t1_jcewc2g wrote

The “design flaws” are:

Reactor design with active boiling and positive void coefficient, such that your power profile is essentially inverse to your normal control rod position. Additionally you are severely impacted by things like trips of a reactor coolant pump.

No mechanical limits on location of the graphite followers (not just control system limits, but a physical hard stop)

The graphite followers having to move past the fuel is the result of the two above plus the operators making some very dumb decisions.

If those graphite followers were never removed as much as they were, if they essentially stayed in the lower portion of the core, they would have been fine. But when you pull them out far enough, then during the reactor trip they will initially add reactivity.

1