When Does External Pressure Govern?
Most API 650 storage tanks are designed purely for internal hydrostatic pressure — the hoop tension in the shell caused by the stored liquid. External pressure (vacuum) is considered an unusual load case and is often omitted entirely from the engineering package. This creates a gap: a shell that is comfortably thick for internal loading can buckle suddenly and catastrophically under a modest vacuum.
There are three operating scenarios where external pressure becomes the governing load condition:
- Nitrogen-blanketed fixed roof tanks: Tanks that operate with a nitrogen blanket to exclude oxygen often run at a slight sub-atmospheric pressure. If the blanketing system supply fails or if the nitrogen is consumed faster than it is replaced, the vapour space pressure drops below atmospheric, imposing an external differential pressure on the shell and roof.
- Pressure-vacuum vent valve failure during emptying: When a fixed roof tank is emptied by pump-out, air must enter through the vent to replace the liquid volume. If the pressure-vacuum (PV) vent valve fails in the closed position, air cannot enter and the falling liquid level creates an increasing vacuum. Even a modest pump-out rate can build up a vacuum sufficient to buckle a thin shell within minutes.
- Steam cleaning and condensation: Tanks that are steam-cleaned after product removal can develop a significant vacuum when the steam condenses after the cleaning is complete. If all vents are closed or inadequate for the condensation rate, the resulting vacuum can be equivalent to several hundred millimetres of water column — well above the design limit of many standard shells.
In each case, the failure mode is not yielding or tearing — it is elastic buckling. The shell suddenly deforms into a wave pattern around the circumference, and the deformation is largely irreversible. Repair typically requires cutting out and replacing the affected shell courses.
API 650 Appendix V: Scope and Design Basis
API 650 Appendix V (External Pressure — Supported Cone Roof Tanks) is the normative section that governs external pressure design for the shell and supported cone roof. Its scope covers tanks with supported cone roofs where the operating conditions include a design external pressure greater than zero.
The key principle of Appendix V is that the shell must be checked for two entirely different failure modes simultaneously:
- Hoop tension from internal hydrostatic loading — governed by the one-foot or variable-design-point methods in the main body of the standard (§5.6). This is a stress-based check.
- Buckling from external pressure — governed by Appendix V. This is a stability check. The two checks are independent, and the shell thickness must satisfy both.
Appendix V relies on the classical Windenburg and Trilling analysis for cylindrical shells under external pressure, adapted for the geometry ratios typical of API 650 tanks. The critical buckling pressure is a function of the shell geometry (D/t and L/D ratios), the elastic modulus of steel, and the unsupported length between stiffening elements — which is where ring stiffeners enter the calculation.
One aspect engineers sometimes overlook: Appendix V also covers the cone roof under external pressure. A supported cone roof must be checked for buckling under the design external pressure, and the rafter-to-shell connection must be verified to transfer the resulting compressive ring force without instability.
Additional Shell Thickness for External Pressure
Unlike the hoop tension check, where required thickness scales linearly with diameter and hydrostatic head, the external pressure buckling check is nonlinear. The critical buckling pressure of a cylindrical shell depends on the square of the t/D ratio and inversely on the L/D ratio. This means:
- Doubling the shell thickness increases the buckling resistance by roughly four times, not two.
- Halving the unsupported panel length (by adding a stiffening ring at mid-height) also approximately doubles the buckling resistance.
- A shell that is marginally adequate for internal pressure — with a thickness chosen close to the minimum — may have essentially zero margin against buckling at full atmospheric vacuum.
For large-diameter tanks (D > 30 m), designing the shell thickness purely to resist external pressure without stiffening rings is usually uneconomical. The required thickness can be several millimetres above the internal pressure requirement, adding substantial plate weight. In practice, stiffening rings are nearly always the preferred solution for external pressure in large tanks.
For small-diameter tanks (D < 10 m) with moderate height, the additional thickness required for external pressure may be only 1–2 mm above the internal pressure requirement, making the thicker-plate-without-rings approach economical and constructionally simpler.
Stiffening Ring Design and Spacing
Stiffening rings work by reducing the unsupported panel length L — the distance between effective restraints against radial displacement. A ring at mid-height of the shell splits the effective panel into two shorter panels, each with a significantly higher critical buckling pressure than the full-height panel.
Appendix V requires the stiffening ring to be continuous around the full circumference. This is a hard requirement: gapped, intermittent, or partial stiffeners do not count as effective restraints because they cannot carry the circumferential ring compression that develops when the shell is under external pressure. Any opening or discontinuity in the ring must be bridged with a welded splice of equivalent or greater section modulus.
The ring itself must be checked for ring compression under the design external pressure. The required moment of inertia of the ring (including an effective width of shell plate acting with the ring) is determined from Appendix V formulae. Standard flat bar or angle stiffeners are usually sufficient for operating partial vacuum; full atmospheric vacuum may require a T-bar or built-up section on larger tanks.
Practical guidance on ring spacing:
- Full vacuum (101.3 kPa): Typical ring spacing is 2–4 m for most tank geometries, with rings at the top and bottom of each unstiffened panel. The closer the rings, the thinner the shell plate can be.
- Operating partial vacuum (< 1 kPa): A single intermediate ring, or no ring at all, is often sufficient for partial vacuum at typical API 650 tank geometries — provided the PV valve setpoint is accurately used as the design vacuum.
- Ring location: Rings placed at equal spacing intervals are the most common approach; however, if the internal pressure shell thickness varies by course, it may be more economical to position rings where the thinnest shell courses occur.
Full Vacuum vs Operating Partial Vacuum
The single most consequential design decision in an external pressure analysis is the choice of design vacuum magnitude. API 650 Appendix V permits either a full vacuum or partial vacuum design basis, and the choice dramatically affects the shell and ring requirements.
Full vacuum design basis uses the full atmospheric pressure differential of 101.3 kPa (approximately 10.3 m of water column, or 10,300 mm WC) as the design external pressure. This is the conservative case: it assumes that under some credible failure scenario — PV valve closed during emergency drain-down, or complete loss of inert gas supply — the shell could be exposed to full atmospheric pressure while the interior is at vapour pressure. Some owner and operator standards (particularly in the petrochemical sector) mandate full vacuum design on all fixed roof tanks as a blanket policy, irrespective of Appendix V's more permissive allowances. The result is a robust shell that will not buckle under any practically achievable vacuum, at the cost of heavier plate or closer ring spacing.
Operating partial vacuum design basis uses the actual design vacuum, typically the PV valve setpoint plus an appropriate overpressure margin. If the PV valve is set at −5 mm WC (−50 Pa), the design vacuum might be specified as −10 mm WC or −25 mm WC to account for valve response time and instrument uncertainty. This results in a far smaller design pressure — often two to three orders of magnitude less than full atmospheric — and correspondingly slender shells with fewer or no stiffening rings. However, this approach is only defensible if:
- The PV valve is independently specified, sized, and tested for the maximum emptying rate and maximum condensation rate.
- The valve setpoint is permanently documented in the tank datasheet and operator procedures.
- The valve is subject to a periodic inspection and test program — a seized or corroded PV valve that fails closed is the most common route to a vacuum collapse incident in practice.
- An interlock or alarm is provided to detect abnormal vacuum conditions before they reach the design limit.
When the design basis is partial vacuum, a footnote in the tank datasheet should explicitly state the maximum allowable internal vacuum and reference the Appendix V calculations. Operations teams must understand that the tank is not rated for full atmospheric vacuum and must not steam-clean the tank with all vents closed, for example.
Practical Tips and Venting Interlock
External pressure checks are straightforward once the design vacuum is established, but several practical issues arise consistently in project work:
1. Size the PV vent valve before finalising Appendix V. The design vacuum used in the buckling check is directly derived from the PV valve setpoint. If the valve is sized and specified late in the project, the Appendix V calculations may need to be revised. Establish the design vacuum early, lock it in the vessel datasheet, and transmit it formally to the mechanical design team before shell thickness finalisation.
2. Retrofit nitrogen blanket systems require an Appendix V check. It is common for existing tanks to be retrofitted with a nitrogen blanketing system to reduce product oxidation or vapour emissions. The existing shell was almost certainly designed without any external pressure check. Before commissioning the blanket system, an Appendix V analysis of the existing shell — with its actual plate thicknesses, measured ring geometry (if any), and corrosion allowance consumed — must be performed. If the shell is inadequate, a stiffening ring can often be retrofitted with minimal disruption to the tank structure.
3. Document the maximum allowable vacuum on the datasheet. The design vacuum (in mm WC or Pa) must appear explicitly on the tank datasheet, nameplate, and operations manual. Operations personnel must be able to answer the question "what is the maximum vacuum this tank can withstand?" without resorting to an engineering review. Loss-of-containment incidents have occurred because this number was buried in a calculation report and not communicated to the control room.
4. Consider the roof-to-shell junction under external pressure. When the shell deflects inward under external pressure, the roof rafters experience increased compressive load at the shell connection. This junction should be checked for adequate stiffness and weld capacity under the combined dead load plus vacuum case, particularly for older tanks where rafter sizing may have been based on internal pressure alone.
5. Steam cleaning procedure control. If the operating procedure includes steam cleaning, the procedure must specify that at least one vent of adequate size must remain fully open throughout the steam cleaning cycle and during the cool-down period that follows. A procedural control alone is insufficient for a partial vacuum design basis tank; a hardware interlock that positively confirms vent-open status before the steam supply is enabled provides a far stronger safeguard.
A tank designed only for internal hydrostatic pressure may buckle under as little as −25 mm WC (245 Pa) of vacuum if the shell is thin and unsupported. Always check Appendix V whenever a nitrogen blanket, steam cleaning procedure, or submerged pump system is specified.
Related reading: Continue with Fixed Cone Roof Design, Wind Stability During Construction, and API 650 14th Edition Changes to keep the full API 650 design workflow connected.
External pressure checks alongside the standard design
TankCode 650 flags when your operating conditions require an Appendix V check and supports stiffening ring sizing.