A submersible borehole pump is one of the most reliable pieces of equipment in a water supply system — when it is correctly protected and controlled. Left to run without proper control, the same pump that could serve a property for a decade can destroy itself in a matter of minutes by running dry, or can silently over-pump a borehole into permanent aquifer depletion.
The pump controller — also called the pump control panel or motor control panel — is the component that stands between a correctly operating pump and those failure modes. It is not optional. It is not a luxury add-on. It is the minimum responsible protection for any borehole pump installation, and understanding what it does is essential for any property owner operating a borehole water supply system.
This article explains every major function of a borehole pump control panel, in plain language, and covers the specific case of solar-powered borehole systems where the controller architecture is different but the protective functions are just as critical.
What Is a Pump Controller / Control Panel?
A borehole pump control panel is an electrical enclosure that houses all the switching, protection, and control circuitry for the borehole pump. It is the interface between the mains power supply (or solar array) and the submersible pump at the bottom of the borehole.
In its most basic form, a control panel for a single-phase submersible pump contains:
- A main circuit breaker — the primary isolation point for the pump circuit
- A motor starter contactor — the heavy-duty relay that switches mains power to the pump motor
- A run capacitor — required for single-phase submersible motors to start and run correctly
- A dry-run protection relay — monitors the pump motor current and shuts down on loss of water
- An overcurrent relay or thermal overload — shuts down if the motor draws excessive current
- Terminal blocks for wiring connections to the pump cable, float switch, flow switch, and mains supply
- An indicator light and alarm output — to show operational status and signal fault conditions
More sophisticated panels add a soft-start module, a variable speed drive, GSM remote monitoring, or a solar MPPT controller in place of the motor starter. The enclosure is rated for outdoor installation (typically IP54 or IP65) and is mounted at the wellhead or at the property's main electrical distribution point.
Dry-Run Protection
Shuts the pump off instantly when water level drops below the pump inlet. The most critical protection function in any borehole system.
Float Switch Control
Starts the pump when the tank needs filling; stops it when the tank reaches full level. Automates the entire fill cycle.
Overcurrent Protection
Trips the circuit if the motor draws excessive current — protecting against stuck pump impellers, short circuits, and phase faults.
Soft-Start
Reduces the current spike at motor startup, extending motor, capacitor, and cable life over thousands of start cycles.
Dry-Run Protection: The Most Critical Function
Dry-run protection is the single most important function of a borehole pump control panel. It addresses the most common and most destructive failure mode for submersible borehole pumps: running without water.
A submersible pump is cooled by the water flowing through it. The pump motor — which sits at the bottom of the borehole, fully immersed — relies on the passage of borehole water around the motor housing to carry away the heat generated by normal operation. When there is no water — when the borehole has been pumped faster than the aquifer can recharge, or when the water level has dropped seasonally below the pump inlet — the pump continues to run but now generates heat with no cooling. Motor windings overheat and fail within minutes. Mechanical seal faces run dry and crack. Impeller bearings seize. A pump that burns out from dry-running is typically unrecoverable and must be replaced entirely.
How dry-run protection works: The dry-run protection relay monitors the electrical current flowing through the pump motor. When the pump is lifting water, the motor works against a hydraulic load and draws a corresponding level of current. When the pump runs dry, there is no water load — the impellers spin freely in air — and the motor current drops sharply, often to 40–60% of its normal running current.
The dry-run relay detects this current drop and applies a short time delay — typically 3 to 10 seconds, adjustable — before tripping the pump. The delay is necessary to prevent nuisance tripping during normal water level fluctuations at the pump inlet. After tripping, the relay enters a lockout period (or a retry cycle with an increasing wait period) before allowing the pump to restart. This prevents the pump from repeatedly attempting to run in a dry borehole during a recovery period.
The lockout or retry interval is important: a pump that trips on dry-run and immediately restarts will simply run dry again if the water level has not recovered. A properly set retry interval — 15 to 60 minutes is common — gives the aquifer time to recharge before the next pump start is attempted.
A note on alternative dry-run detection methods: Some installers use a flow switch in the rising main rather than a current-sensing relay. The flow switch detects whether water is physically moving through the pipe — if flow stops while the pump is running, the switch triggers a shutdown. Flow switches are a valid addition to a control system, but they are not a complete substitute for current-sensing dry-run protection: a flow switch can give a false reading if the water column has not yet drained from the rising main, briefly masking a dry-run condition. Current-sensing dry-run protection is the primary defence; a flow switch is a useful secondary layer.
Float Switch Integration: Automating the Fill Cycle
The float switch in the overhead storage tank is the primary signal that tells the control panel when to start and stop the borehole pump. A standard installation uses two float switches — a low-level float switch and a high-level (full) float switch — to create a simple and reliable automatic fill cycle.
The logic works as follows:
- When the tank level drops to the low-level float switch position (typically set at 20–30% of tank capacity), the float switch triggers the control panel to start the borehole pump.
- The pump runs and water flows up through the rising main and into the tank.
- When the tank reaches the high-level float switch position (typically set at 90–95% of capacity), the float switch signals the panel to stop the pump.
- The tank draws down again through normal property consumption until the low-level switch triggers the next fill cycle.
This two-float arrangement means the pump runs in longer, less frequent cycles — which is far better for pump longevity than short, frequent starts. Each pump start involves a current spike (the starting inrush current) that stresses the motor windings, capacitor, and connections. Fewer starts per day means fewer stress cycles per year, directly translating to longer pump life.
Float switches are typically mechanical ball floats on a cable, suspended inside the tank at the required water levels. Some modern installations use electronic level sensors or ultrasonic level transmitters in place of float switches, which have no moving parts and are more accurate — but mechanical floats remain the most common and most cost-effective choice for residential and small commercial installations.
The float switch wiring runs from the tank to the control panel through a surface conduit. It is low-voltage signal wiring — the float switch does not carry pump power, only a control signal to the relay in the panel.
Pressure Switches: Useful Elsewhere, Problematic for Boreholes
A pressure switch is a control device that starts a pump when system pressure drops below a set threshold and stops it when pressure reaches an upper threshold — creating a pressurised water supply without a storage tank. Pressure-switch-controlled systems are common in domestic pressure pump applications and in shallow well systems.
For borehole pump control, however, pressure switches as the primary control mechanism are not recommended. The reason is straightforward: a pressure switch triggers the pump every time a tap is opened on the property. For a domestic pressure pump drawing from a large river or dam, this is acceptable — the source is effectively unlimited and the pump starts are frequent but brief. For a submersible borehole pump drawing from a finite aquifer, frequent starts create two problems:
- Pump wear: Each start cycle involves a high-current inrush. A pump controlled by a pressure switch may start and stop dozens of times per hour on a busy property, accumulating thousands of additional stress cycles per year compared to a float-switch-controlled system.
- Aquifer over-pumping: A pressure-switch system has no mechanism to account for aquifer recharge rate. If demand on the property exceeds the sustainable yield of the borehole, the pump will run continuously until the borehole runs dry — and the only protection is the dry-run relay, which trips and retries on a cycle, repeatedly stressing the pump.
The correct configuration for a borehole system is: float switch control from an overhead storage tank, with dry-run protection as the safety backstop. The tank acts as a buffer between the pump's fill cycles and the property's demand. The pump runs in controlled, appropriately spaced cycles. The aquifer is never pulled faster than the pump's sustained yield (set at or below the yield test result). The pressure switch, if used at all, belongs on the downstream booster pump that supplies pressure to the property from the tank — not on the borehole pump itself.
Soft-Start: Protecting Motor and Capacitor
Every time an electric motor starts from rest, it draws a surge of current — the inrush current — that is typically five to eight times the normal running current. For a submersible borehole pump drawing 5 amps at full running speed, the starting inrush may be 25 to 40 amps for the fraction of a second it takes the motor to reach operating speed.
This inrush current stresses four components with every start: the motor windings (thermal and mechanical stress), the start and run capacitor (which is directly exposed to the inrush), the pump cable (which must carry the surge current along its full length), and the contactor in the control panel (which switches the motor on against the full inrush).
A soft-start module — inserted between the contactor and the motor — ramps the voltage up gradually over 2 to 5 seconds, limiting the peak inrush current to typically 1.5 to 3 times the running current. The motor takes slightly longer to reach full speed, but the stress on all components is dramatically reduced. Over a pump life of 50 000 or 100 000 starts, the reduction in per-start stress translates to significantly longer component life — particularly for the capacitor, which is statistically one of the most common failure points in single-phase submersible pump systems.
Soft-start is available as a discrete module that fits inside a standard control panel, and it is a particularly worthwhile addition for properties with long cable runs (where the cable resistance amplifies inrush stress) or where the pump starts many cycles per day.
Overcurrent Protection: The Last Line of Defence
Overcurrent protection in a pump control panel trips the pump circuit if the motor draws more current than its rated maximum. This protects against:
- Mechanical seizure: If pump impellers jam due to sand ingress, foreign matter, or bearing failure, the motor works against a locked rotor — drawing many times its normal running current. Overcurrent protection trips the circuit before the motor burns out.
- Winding fault: A partial short circuit in the motor windings causes elevated current draw. Overcurrent protection detects this and trips the circuit before the fault progresses to complete winding failure.
- Incorrect pump selection: A pump operating outside its designed head range may draw excessive current. Overcurrent protection prevents this from becoming a burnout.
In single-phase systems, overcurrent protection is typically provided by a thermal overload relay — a bimetallic device that heats up in proportion to current draw and trips when it exceeds the set threshold. In three-phase systems (used for larger commercial or agricultural pumps), an electronic motor protection relay is more common, offering faster response and additional features such as phase loss detection and phase imbalance protection.
The overcurrent trip threshold is set to the pump's full-load current rating (found on the pump motor nameplate) plus a small margin — typically 10–15% above the rated current. Setting it too close to the rated current causes nuisance tripping during normal starts; setting it too high reduces its protective effect.
Solar Pump Controllers: MPPT, DC vs AC, and Variable Speed
Solar-powered borehole pump systems have become the standard choice for farms, rural properties, and off-grid applications across South Africa. They eliminate Eskom dependency entirely for water supply — the pump runs on solar energy during daylight hours, filling the overhead tank, and gravity or a small battery-backed booster pump supplies the property through the night.
The control architecture of a solar pump system is fundamentally different from a grid-powered system. Instead of a motor starter contactor, the heart of the solar pump control is an MPPT controller (Maximum Power Point Tracker).
What an MPPT controller does: Solar panels produce power at a voltage and current that varies continuously with sunlight intensity, panel temperature, and shading. A simple direct connection between a solar panel and a pump motor would result in the pump running erratically — at low speed in partial shade, at high speed in full sun, and potentially outside the motor's safe operating voltage range. The MPPT controller constantly samples the solar panel output, calculates the maximum power point (the combination of voltage and current that extracts the most power from the panel at that instant), and converts that power to the voltage and current the pump motor needs to run optimally. The result is smooth, efficient pump operation across a wide range of sunlight conditions — including early morning, late afternoon, and lightly overcast days.
DC vs. AC pumps: Solar pump systems use either DC submersible pumps (designed specifically for direct solar power connection via an MPPT controller) or standard AC submersible pumps driven through a solar inverter or MPPT-to-AC converter. DC pumps tend to be more efficient at low power levels — important for operation during marginal sunlight — and DC MPPT controllers are simpler and lower-cost. AC pumps are more widely available, easier to source replacement parts for, and can run from both solar and grid power in a hybrid configuration. The choice between DC and AC depends on the system scale and the availability of grid backup.
Variable speed operation: MPPT-controlled solar pumps inherently operate at variable speed — the pump speed tracks the available solar power throughout the day. This means the pump produces more water during peak sun hours (typically 10 am to 3 pm) and less during morning and evening. Tank sizing must account for this variable production pattern. A well-designed solar pump system with adequate tank storage produces enough water during daylight hours to meet the property's full daily demand, stored in the tank for night-time and cloudy-day use.
Dry-run protection on solar systems: MPPT controllers for borehole pumps include dry-run detection built into the controller firmware. The controller monitors the pump's power draw relative to the solar panel output — a sudden drop in power consumption (pump spinning free without water load) triggers a shutdown and retry cycle. This is equivalent in function to the current-sensing dry-run relay in a grid-powered system, though implemented differently in the controller electronics.
Manual vs. Automatic Mode: When to Use Each
Every pump control panel includes a selector switch for manual and automatic operating modes. Understanding when to use each is important for both normal operation and fault-finding.
Automatic mode is the normal operating configuration. In automatic, the panel runs the pump in response to the float switch signals — starting when the tank needs filling, stopping when the tank is full, and stopping immediately on a dry-run or overcurrent fault. Automatic mode is how the system should operate day-to-day with no human intervention.
Manual mode overrides the float switch control and runs the pump continuously (subject to dry-run and overcurrent protection remaining active). Manual mode is used for:
- System commissioning: Running the pump manually after installation to check flow at the wellhead, confirm correct pump direction of rotation (three-phase pumps), and verify that the rising main is air-free and flowing correctly before switching to automatic.
- Yield testing: A controlled extended pump test requires running the pump at a steady rate regardless of tank level — manual mode achieves this.
- Fault diagnosis: If the pump is not starting in automatic mode, switching to manual and observing whether the pump runs identifies whether the fault is in the pump/motor circuit or in the float switch/control circuit.
- Tank bypass: If the float switch fails in the open position (the tank never signals "low"), manual mode runs the pump to fill the tank while the float switch is repaired or replaced.
Manual mode should never be left as the normal operating mode. Without float switch control, the pump will continue to run after the tank is full — causing overflow and wasting water — and will run continuously until either the borehole runs dry (triggering dry-run protection) or the operator manually stops it. The risk of forgetting to switch back to automatic after a maintenance task is significant; establish a clear protocol to return to automatic mode before leaving the site.
What Happens Without a Controller: The True Cost
Borehole installations without a proper pump control panel do exist — typically on older installations where a simple on/off switch or timer was used, or on new installations where a cost-saving shortcut was taken. The consequences are predictable and expensive.
Without dry-run protection: The first time the borehole water level drops below the pump inlet — whether from seasonal aquifer depletion, over-pumping, or reduced recharge — the pump burns out. A submersible pump extraction, pump replacement, and re-installation costs far more than a proper control panel. This is not a theoretical risk; it is the single most common cause of premature submersible pump failure across South African borehole installations.
Without float switch control, the pump must be started and stopped manually. In practice, this means the pump either runs continuously — over-pumping the borehole, wasting energy, and filling the tank until it overflows — or is started and stopped so frequently by the operator that the start-cycle stress on the motor accumulates rapidly.
Without overcurrent protection, a pump impeller that jams due to sand ingestion will draw locked-rotor current until the motor windings fail. With overcurrent protection, the circuit trips within seconds and the motor is saved. The difference in outcome between these two scenarios is typically "clean the pump and reset the relay" versus "extract the pump and order a replacement motor."
The cost of a properly specified and installed pump control panel is modest relative to the drilling cost, the pump cost, and the tank installation. Omitting it to reduce installation cost is a false economy that almost invariably costs more to correct than it saved.
Related Articles
Common Questions
Protect Your Pump Investment
Every Everest Drilling installation includes a correctly specified pump control panel — dry-run protection, float switch integration, overcurrent protection, and commissioning as standard. Contact us for a project-specific quotation.