Analysis of WeChat Sync Protocol and Network Architecture

WeChat’s transmission protocol is sparsely documented by the official source, but analysis of internal PPTs and network captures reveals a hybrid SYNC‑based state‑synchronization mechanism derived from Microsoft ActiveSync.

The protocol distinguishes short HTTP (binary protobuf) and long TCP connections, both operating on port 8080. Short connections handle login, friend management, message sync, avatar retrieval, logout, and activity reporting, while long connections carry text, voice, image, and video messages.

Data packets follow a fixed 16‑byte header format:

4byte Packet Len (including the 4 bytes themselves)

2byte Head Len (fixed 0x10 = 16)

2byte Version (fixed 0x01)

4byte Operation

4byte SeqId

... (additional fields)

(Packet Len – Head Len) Body (encrypted)

Client‑server interaction uses a request‑response model identified by increasing SeqId, while server‑initiated notifications use SeqId = 0 and a specific operation code.

Synchronization relies on a version‑like SyncKey generated by the server; each successful exchange updates the SyncKey, enabling incremental, ordered data delivery. Issues include the cost of maintaining strong consistency for SyncKey generation, message subscription models, and latency introduced by the Notify‑Ack‑Get‑Message flow.

Web clients adopt a more standard SYNC protocol suitable for long‑polling, exchanging JSON‑encoded SyncKey structures and using separate GET requests for heartbeat checks and POST requests for data sync and message sending.

Multi‑device login is handled by treating the mobile client as the primary endpoint; web or Mac clients receive push notifications and can send messages but do not store full history, relying on the server to retain undelivered messages until the primary client acknowledges them.

Overall, the protocol combines binary, encrypted payloads with a lightweight, version‑based synchronization layer, achieving reliable cross‑platform messaging while allowing rapid backend changes without client updates.