How the 747 works
A guide to 747 systems, starting with the fuel system and its eight tanks and in-flight transfer.
A 747 is not one machine but a set of overlapping systems, most of which are quadruple-redundant because the aircraft was designed to keep flying with a lot of them broken.
In this section
The systems are covered in five groups: the airframe services every 747 needs, the controls that make it fly, the crew's interface with it, the engines that power it, and what happens when the freight comes aboard.
Airframe systems
- Fuel system - the tanks, in-flight transfer and the jettison system
- Hydraulic systems - four systems, one per engine, and why they are split that way
- Electrical system - four 90 kVA generators running in parallel
- Pneumatic and bleed air - the hot air tapped from the engines that runs much of the aircraft
- Pressurisation and air conditioning - bleed air, and why cycles matter more than hours
- Ice and rain protection - anti-icing, de-icing and the windshield
- Oxygen system - crew and passenger oxygen, and when it deploys
- Water and waste system - potable water, drains and the lavatories
- Fire detection and extinguishing - engine, APU and cargo-hold protection
- Auxiliary power unit - the APU that supplies air and power on the ground
- Cabin systems - entertainment, connectivity and seat power, and why almost none of it was Boeing's
- Flutter and load alleviation - how the wing unbends itself, deliberately
Flight controls, gear and structure
- Flight controls - split ailerons, spoilers, triple-slotted flaps and Kruegers
- Landing gear - eighteen wheels, and the body gear steering nobody notices
- Brakes, autobrake and anti-skid - how a 400-tonne aircraft stops
- Doors and emergency exits - the door types and the evacuation system
- Control redundancy and backup modes - what the controls do when a hydraulic system is gone, and why the 747 has no manual reversion
Flight deck and avionics
- Flight deck - from three crew to two
- Classic flight-engineer station - the third seat, and everything it managed
- 747-400 EICAS - the engine and crew alerting system that replaced the engineer
- Navigation and avionics - inertial navigation to satellite-based systems
- 747-8 systems differences - what changed between the -400 and the -8
- Flight guidance and autopilot - three AFDS channels, the mode control panel and autoland
- Alerting and collision avoidance - TCAS, GPWS, windshear alerting and the stall warning shaker
- Weather radar - the dish in the nose, and the two things it cannot see
- Flight recorders and data acquisition - the two black boxes and how the QAR fits in
Engines
- Engines - JT9D to GEnx-2B, and why engine choice sold aeroplanes
- Pratt & Whitney JT9D - the original 747 engine
- Pratt & Whitney PW4000 - a 747-400 mainstay
- General Electric CF6 - the classic-era option that outlived the JT9D
- General Electric GEnx-2B - the 747-8's only engine
- Rolls-Royce RB211-524 - the British option on the -200, -300 and -400
- Engine thrust ratings - the number that is not fixed, and why a higher rating costs engine life
Freight and reference
- Cargo-loading system - powered rollers, and how a freighter is loaded
- Weight and balance and loading - MZFW, and why a freighter cannot load a pallet anywhere it likes
- Freighter specifications - factory freighter weights, fuel and cargo volume with planning assumptions
- Specifications - every variant compared side by side
The design principle
The 747 was certified in 1969 to standards that assumed things would fail, and the answer nearly everywhere was redundancy through separation rather than duplication in one place.
There are four hydraulic systems, each driven by a different engine, so losing an engine does not lose a system. Flight controls are split so no single hydraulic failure takes out an entire axis of control. Electrical generation is per engine, with an auxiliary power unit as backup on the ground and in flight.
The landing gear carries the same philosophy: four main gear legs plus the nose gear, eighteen wheels in total, arranged so the aircraft can land safely with some of them unavailable.
That layout has a second benefit nobody designed for. Because the wing and body gear are spread fore and aft, a 747 is stable enough to have heavy freight loaded into the rear fuselage without sitting back on its tail - which is what made the Combi possible.
Where redundancy ran out
Two accidents show the limits. Japan Air Lines Flight 123 lost all four hydraulic systems when a rear pressure bulkhead failed and destroyed the tail section - the systems were separated, but all four ran through the same place. National Airlines Flight 102 lost hydraulics and the stabiliser jackscrew when unrestrained cargo broke loose.
In both cases the redundancy was real; the failure was common-mode, taking out every redundant path at once.
Related
Sources
Facts on this page are checked against the primary and institutional references below.












