GoodWe ESA ESS Network Requirements

Disclaimer: Unofficial article, use at your own risk.

DNS queries and IP+port connections are monitored through OpenWRT dnsmasq and conntrack (NAT table).

SEMS+ iOS app:

  • ali-stats.jpush.cn*
  • app-analytics-services.com*
  • app-measurement.com*
  • au-gateway.semsportal.com
  • au.mqtt.goodwe-power.com
  • ce3e75d5.jpush.cn*
  • clients3.google.com
  • config.jpush.cn*
  • firebaseinstallations.googleapis.com
  • firebaselogging-pa.googleapis.com
  • firebaseremoteconfig.googleapis.com
  • firebase-settings.crashlytics.com
  • gd-stats.jpush.cn*
  • hk-gateway.semsportal.com
  • o.alicdn.com
  • oversea-gops-hk.oss-cn-hongkong.aliyuncs.com
  • semsplus.goodwe.com
  • semsplus.oss-cn-hongkong.aliyuncs.com
  • sentry1.semsportal.com
  • sentry.io
  • sis.jpush.io*
  • status-ipv6.jpush.cn*
  • tsis.jpush.cn*

*Optional domains, commonly blocked by adblocker.

SEMS+ Web portal:

  • a1320.dscb.akamai.net
  • au-gateway.semsportal.com
  • au-semsplus.goodwe.com
  • cloudauth-device-dualstack.cn-shanghai.aliyuncs.com
  • g.alicdn.com
  • netty-wss-au.iot.goodwe-power.com:8885
  • o.alicdn.com
  • o.alicdn.com.w.cdngslb.com
  • popunify-large-dualstack-1.cn-shanghai.aliyuncs.com.vipgds.alibabadns.com
  • semsplus.oss-accelerate.aliyuncs.com
  • semsplus.oss-cn-hongkong.aliyuncs.com

If browser setting has WebGL enabled but NoScript is configured to restrict it, configure NoScript to allow WebGL on au-semsplus.goodwe.com, otherwise the page freezes in less than a minute. The portal actually works fine without WebGL, but it has to be disabled in the browser setting, which disables for every websites.

GoodWe ESA connected to wifi using WiFi/LAN Kit-20 dongle:

Hostname: GW_WIFILAN_2
MAC address: C0:CD:D6:xx:xx:xx (Espressif)

  • broker.goodwe-power.com:8883
  • iot-cn.oss-cn-hangzhou.aliyuncs.com:443
  • iot.goodwe-power.com:80
  • jiankong-hk.oss-accelerate.aliyuncs.com:80
  • www.goodwe.com (icmp)

There’s also DNS traffic to OpenDNS where router can intercept using port forwarding rule.

IPProtocolPort
208.67.222.222udp53

Xiaomi Mijia Mi Robot Vacuum-Mop 2 (MJST1S) Network Requirements

Disclaimer: Unofficial article, use at your own risk.

DNS queries and IP+port connections are monitored through OpenWRT dnsmasq and conntrack (NAT table).

Initial wifi SSID: ijai-vacuum-v2_miapxxxx
Hostname: rk3308_robot32
MAC address: 58:B6:23:xx:xx:xx (Beijing Xiaomi Mobile Software)
Xiaomi Home server: Chinese mainland

Mi Robot Vacuum-Mop 2:

  • cnbj2.fds.api.xiaomi.com:443
  • dlg.io.mi.com
  • ot.io.mi.com:8053*
  • ots.io.mi.com:443

Also these IPs without corresponding domains,

IPProtocolPort
36.156.49.91udp80
110.43.0.83tcp443
120.92.158.163tcp443
124.251.34.212tcp443
39.101.90.191udp8053*
120.52.181.238udp8053*
120.52.181.239udp8053*
120.92.146.6udp8053*
120.92.65.237udp8053*
120.92.65.254udp8053*
121.228.168.18udp8053*
123.125.102.216udp8053*
124.251.101.16udp8053*
220.181.106.199udp8053*
220.181.106.200udp8053*

*Optional port, I don’t notice any issue after blocking it.

Xiaomi Home Android app:

  • account.xiaomi.com
  • api.account.xiaomi.com
  • api.device.xiaomi.net
  • api.mijia.tech
  • api.miwifi.com
  • apm-rum.inf.miui.com*
  • app.chat.global.xiaomi.net
  • cdn.cnbj0.fds.api.mi-img.com
  • cdn.cnbj1.fds.api.mi-img.com
  • cdn.web-global.fds.api.mi-img.com
  • chat.kefu.mi.com
  • cnbj1.fds.api.xiaomi.com
  • core.api.mijia.tech
  • data.sec.miui.com*
  • firebase.googleapis.com
  • firebaseinappmessaging.googleapis.com
  • firebaseinstallations.googleapis.com
  • firebaselogging.googleapis.com
  • font.sec.miui.com
  • graph.facebook.com
  • home.mi.com
  • i.ai.mi.com
  • i.huodong.mi.com
  • iot-cdn0.io.mi.com
  • iot-cdn.io.mi.com
  • mcfe–account-static-legacy.cnbj1.mi-fds.com
  • m.mi.com
  • register.xmpush.global.xiaomi.com
  • resolver.msg.global.xiaomi.net
  • sdkconfig.xiaomi.com
  • shopapi.io.mi.com
  • ssl-cdn.static.browser.mi-img.com
  • static-verify.sec.xiaomi.com
  • stream.api.mijia.tech
  • sts.api.mijia.tech
  • stun.services.mozilla.com
  • tracking.miui.com*
  • tsmapi.pay.xiaomi.com
  • verify.sec.xiaomi.com
  • www.google-analytics.com*
  • www.googletagmanager.com

*Optional domains, commonly blocked by adblocker.