Designing a Cathodic Protection System for a Buried Pipeline

A buried steel pipeline is protected by two lines of defence working together: the coating, which is the primary barrier, and cathodic protection, the backstop that mops up corrosion wherever the coating is breached. Neither is sufficient alone. A perfect coating is impossible to install and impossible to keep perfect over a design life, so CP exists to protect the small fraction of steel the coating inevitably exposes — which is why CP current demand is driven almost entirely by coating quality and its degradation over time, not by the bare surface area of the pipe.

CP works by shifting the steel's potential negative enough that the anodic — metal-dissolving — reaction is suppressed and the surface behaves cathodically. You deliver that shift in one of two ways: by sacrificing a more-active metal (galvanic anodes), or by forcing current from an external power source (impressed current). The whole of the design that follows is about doing that reliably, for the full design life, without overdoing it.

01Design basis — gather before you calculate

CP design is only as good as its inputs. Before any number is produced, assemble the following:

Pipe data — outside diameter, wall thickness, total length, and longitudinal electrical resistance per unit length.
Coating type and specified breakdown — FBE, 3LPE, coal-tar and so on. Initial and aged breakdown factors dominate current demand: a 3LPE line and a coal-tar line of identical geometry can differ in current demand by an order of magnitude.
Soil resistivity profile — measured along the route (Wenner four-pin), ideally seasonally. This is the single most important environmental parameter; it sets anode-to-earth resistance, groundbed feasibility and corrosivity. Soils below 10 Ω·m are aggressive and favour ICCP; high-resistivity soils may make galvanic systems impractical.
Design life — typically 25 to 40 years. Drives anode mass.
Foreign structures and interference sources — parallel and crossing pipelines, HVAC powerlines (AC interference), DC traction systems (stray current), and shared rights-of-way.
Electrical continuity — confirm the line is electrically continuous and isolated at terminals via monolithic isolation joints, so protection current stays on the structure being protected.

02Protection criteria

The design target is a recognised protection criterion measured against a reference electrode — copper/copper-sulphate (CSE) for buried onshore. The common criteria are a potential of −850 mV (CSE) with the protection current applied and corrected for IR drop; the same −850 mV (CSE) measured instant-off, immediately after interrupting the current to eliminate IR drop; or 100 mV of cathodic polarisation, the shift between native and polarised potential.

The IR-drop issue is the recurring trap. An "on" potential reading includes the ohmic voltage drop through the soil and overstates how protected the steel actually is. Instant-off and coupon techniques exist precisely to separate true polarisation from IR drop, and in high-resistivity soil or near a groundbed the IR component can be large.

Design trap — overprotection Potentials more negative than roughly −1.1 to −1.2 V (CSE) risk cathodic disbondment of the coating and hydrogen-related issues on higher-strength steels. CP is a window, not "more is better."

03Current demand

Protection current demand is the product of surface area, current density and the coating breakdown factor:

Current demand

$$ I = A \times i \times f_c $$

where A is the total external surface area (π × OD × length), i is the protection current density for the soil — the current per unit bare area needed to meet criteria — and f_c is the coating breakdown factor, the fraction of surface effectively bare.

The coating breakdown factor is where the design lives. It is modelled as growing over life, commonly as a linear function:

Coating breakdown over life

$$ f_c(t) = a + b\,t $$

with a an initial defect allowance and b an annual degradation rate set by coating type and soil.

You evaluate current demand at three points: initial, which sets the rating needed to achieve early polarisation; mean, which sizes total anode mass as the charge integrated over life; and final (end-of-life, highest f_c), which sets the current the system must still deliver in its worst year.

Design trap — under-sizing Size current capacity on the final demand and anode consumable mass on the mean demand integrated over life. Designing only to initial demand is the classic error — the system passes commissioning and then starves a decade later.

04Sacrificial vs impressed current

Galvanic vs ICCP selection
Factor	Galvanic anodes	ICCP
Current source	Anode self-potential, fixed (~0.85 V net driving voltage for Mg)	External T/R — adjustable, high driving voltage
Soil resistivity	Best in low resistivity (below ~30–50 Ω·m)	Works across a wide range, including high resistivity
Current output	Low per anode	High; one station protects many km
Power / maintenance	None; no external power	Needs AC power, monitoring, maintenance
Interference risk	Low	Can cause interference on foreign structures
Typical use	Short or well-coated lines, no power, congested areas	Long cross-country transmission lines

A short, well-coated buried line in moderate soil with no available power is a natural galvanic candidate. A long cross-country transmission line is almost always ICCP, often as a small number of stations covering long sections by attenuation.

05Galvanic anode design

Anode-to-earth resistance governs how much current a single anode can push. For a single vertical anode, Dwight's equation applies:

Dwight — single vertical anode resistance

$$ R = \frac{\rho}{2\pi L}\left[\ln\!\frac{4L}{d} - 1\right] $$

ρ is soil resistivity, L the anode length, and d the effective diameter including the backfill column for packaged anodes — the low-resistivity gypsum/bentonite backfill is what makes a packaged Mg anode work. For multiple anodes, use parallel-anode treatments (McCoy) with a spacing factor; anodes placed too close interfere, and their combined resistance exceeds the simple parallel value.

Anode current output is the driving voltage divided by the circuit resistance:

Anode output

$$ I_a = \frac{E_{\text{anode(oc)}} - E_{\text{pipe(pol)}}}{R_{\text{anode}} + R_{\text{pipe}} + R_{\text{cable}}} $$

For magnesium, open-circuit potential is about −1.5 to −1.75 V (CSE) against a polarised pipe at −0.85 V — a net driving voltage well under 1 V. That small driving voltage is exactly why galvanic systems need low soil resistivity to deliver useful current.

Anode mass for life follows from Faraday's law, expressed here via capacity:

Anode life

$$ \text{Life (yr)} = \frac{\text{Capacity} \times \text{Mass} \times \text{Utilisation}}{I \times 8760} $$

Capacity in A·h/kg: practical magnesium ≈ 500–550, zinc ≈ 780 — use practical, efficiency-included values, not theoretical. Utilisation ≈ 0.85–0.90, since the anode loses contact before it is fully consumed. 8760 is hours per year.

On material choice, use magnesium for higher driving voltage in higher-resistivity soil, and zinc where soils are very low resistivity or saline, or where Mg would over-drive. The two outputs you size against — enough anodes for current (final-year demand divided by per-anode output) and enough mass for life (mean demand over design life) — must both be satisfied. Take the governing case.

06ICCP design

Transformer-rectifier sizing takes its current rating from the final-year demand plus a design margin — commonly 1.5 to 2× — for future coating degradation. The voltage rating comes from the circuit resistance:

Transformer-rectifier voltage

$$ V = I \times \left(R_{\text{groundbed}} + R_{\text{pipe}} + R_{\text{cable}} + \text{back-EMF}\right) $$

Groundbed resistance usually dominates, so that is where the design effort goes.

There are three groundbed configurations to choose between:

Remote (surface) bed — anodes spread at a distance so the pipe sits in "remote earth"; simple, but footprint and interference need managing.
Distributed bed — many small anodes close to the line; good for congested areas and tight potential control, with lower interference.
Deep-well bed — a vertical borehole reaching low-resistivity strata; minimal surface footprint and low interference, ideal where surface soil is high-resistivity. Resistance via Sunde's equation.

For anode material, mixed-metal-oxide (MMO) titanium is the modern default — low consumption rate, high current density, long life. Graphite and high-silicon cast iron are older alternatives. ICCP anode life is set by consumption rate (kg/A·yr), not by self-potential.

Design trap — cable integrity Anode lead and header cables must be fully insulated and kept intact: any cable defect in the anodic field corrodes catastrophically and fast. Cable failure, not anode consumption, is the usual ICCP killer.

07Attenuation — the long-line problem

On a long pipeline, protection potential is most negative at the drain point and decays with distance, because the pipe steel has longitudinal resistance and the coating leaks current to earth all along the route:

Potential attenuation along the line

$$ \Delta E(x) = \Delta E_0\, e^{-\alpha x}, \qquad \alpha = \sqrt{\frac{r_L}{R_c}} $$

r_L is the longitudinal pipe resistance per unit length and R_c the coating (leakage) resistance per unit length. A well-coated line has high R_c, small α and slow attenuation — so a single station protects a long section.

This is the design link that ties coating quality directly to station count and spacing. Set the drain-point potential negative enough that the most-distant point still meets criteria, but keep the drain point inside the overprotection limit; that bracket sizes your station spacing.

Every CP economic argument for better coating runs through the attenuation constant α.

08Interference and interaction

A buried line rarely exists alone, so a real design has to manage its neighbours:

DC stray current (foreign ICCP, DC traction) — current that enters the pipe and discharges elsewhere causes severe localised corrosion at the discharge point. Mitigate with bonds, drainage, or coordinated CP between owners.
AC interference from parallel HVAC powerlines — induces AC on the pipe, causing AC corrosion and a personnel touch-voltage hazard. Mitigate with gradient-control mats and decoupling devices (DC-decoupling, AC-grounding) per the relevant AC-interference standard.
Foreign-structure interaction — your CP can throw foreign structures into corrosion, and theirs can disturb yours. Resolve with bonds, test-station coordination, and interaction testing at commissioning.
Isolation joints at terminals and stations confine current to the intended structure; verify they are not shorted.

09Monitoring and commissioning

Designed-in monitoring is part of the deliverable, not an afterthought. Provide test stations at regular intervals and at all crossings, casings, isolation joints and bonds; coupons and permanent reference electrodes for IR-free instant-off measurement and coupon current density; ER probes for direct corrosion-rate trending; and interrupters to enable instant-off surveys across the system. Commissioning includes a close-interval potential survey (CIPS) baseline and DCVG/ACVG coating-defect surveys, followed by periodic re-survey through life.

This monitoring layer is also where an indirect, online-monitoring concept plugs in — SCADA-fed potential trending and coupon-data fusion. CP test-station and coupon data are a natural input to a wider pipeline integrity intelligence layer.

REFStandards map

Confirm the current revision of each against your project's specification:

ISO 15589-1 — cathodic protection of onshore pipelines (the core international design standard).
NACE / AMPP SP0169 — control of external corrosion on buried or submerged metallic systems.
NACE / AMPP SP0286 — interference (stray current) and related practices.
SAES-X-400 / SAES-X-600 (Saudi Aramco) — CP design and materials, where applicable to the project.
Coating-breakdown and current-density figures should come from the project design basis, not generic tables, wherever measured soil and coating data exist.

Professional note Design intent and worked numbers must be produced and signed by a qualified, certified CP engineer. This guide is methodology for engineering understanding — it is not a substitute for a stamped CP design.

More working guides for piping & pipeline engineers

Standard-referenced, drawn from real project work — the same discipline applied to stress, integrity and pipeline design.

Browse all guides → PipingPro Academy · practical engineering, not theory