Difference between revisions of "Network"

From Nintendo Switch Brew
Jump to navigation Jump to search
m (Hexkyz moved page Domains to Network: Re-designing network pages)
Line 1: Line 1:
−
This page documents the DNS domains used by Switch, and what they're used for. Only HTTPS is used with these domains unless noted otherwise.
+
This page documents DNS domains and lists information relevant to the online services used by the Switch.
  
−
* "[[NIM_services|sun.hac.lp1.d4c.nintendo.net]]": Used for checking whether a sysupdate is available, equivalent to NetUpdateSOAP from past systems.
+
= Domains =
−
* "[[NIM_services|atumn.hac.lp1.d4c.nintendo.net]]": CDN for system-titles.
+
Only HTTPS is used with these domains unless noted otherwise.
−
* "tagaya.hac.lp1.eshop.nintendo.net": VersionList for eShop titles going by 3DS.
+
 
−
* "dauth-lp1.ndas.srv.nintendo.net": Seems to break Nintendo-account related comms when blocked. This dauth domain seems to be the cause of the sysupdate-required 2124-3000 [[Error_codes|error]]?
+
== CDN ==
−
* "[[NIM_services|beach.hac.lp1.eshop.nintendo.net]]": Same result as dauth when blocked.
+
The URLs for content delivery network servers on the Switch usually follow this format:
−
* "consumer.lp1.npns.srv.nintendo.net": Same result as dauth when blocked.
+
{server_name}.hac.{environment}.{serverset}.nintendo.net
−
* "e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com": Used to handle account metadata. (friends, profile, etc)
+
 
−
* "api.accounts.nintendo.com": Appears to be used by Nintendo apps to get metadata for Switch user profiles.
+
Where:
−
* "api-lp1.znc.srv.nintendo.net": Used by the Switch Online app to get app data, like the list of game-specific services to display.
+
{server_name}: One of the registered server names.
−
Note: "break Nintendo-account..." is for "posting to social-media" in user-profile, results may vary with the eShop (for non-dauth).
+
{environment}: "lp1" (production), "dd1" (development) or "sp1" (production lottest staging).
 +
{serverset}: "eshop" (online shop) or "d4c" (content delivery).
 +
 
 +
=== Servers ===
 +
* "[[#sun|sun.hac.%.d4c.nintendo.net]]"
 +
* "[[#aqua|aqua.hac.%.d4c.nintendo.net]]"
 +
* "[[#atum/atumn|atum.hac.%.d4c.nintendo.net]]"
 +
* "[[#atum/atumn|atumn.hac.%.d4c.nintendo.net]]"
 +
* "[[#superfly|superfly.hac.%.d4c.nintendo.net]]"
 +
* "bugyo.hac.%.eshop.nintendo.net"
 +
* "[[#beach|beach.hac.%.eshop.nintendo.net]]"
 +
* "pushmo.hac.%.eshop.nintendo.net"
 +
* "[[#tagaya|tagaya.hac.%.eshop.nintendo.net]]"
 +
* [5.0.0+] "[[#pearljam|pearljam.hac.%.eshop.nintendo.net]]"
 +
 
 +
==== sun ====
 +
Used for checking whether a sysupdate is available. Equivalent to NetUpdateSOAP from past systems.
 +
 
 +
[[NIM_services|NIM]] sends a HTTP GET with the sun URL to get the title-listing of the latest system-titles, as .json. The deviceid in the URL is the same one in the above User-Agent section. HTTP header "Accept:application/json" is sent in the request.
 +
 
 +
The response is json with a "system_update_metas" block, containing "title_id" and "title_version" entries. The actual server response only contains 1 title.
 +
 
 +
Example, from 2.0 system:
 +
 
 +
<code>{"timestamp":REDACTED-TIMESTSAMP,"system_update_metas":[{"title_id":"0100000000000816","title_version":201327002}]}</code>
 +
 
 +
URLs:
 +
"<nowiki>https://sun.hac.%%.d4c.nintendo.net/v1/system_update_meta?device_id=%016llx</nowiki>"
 +
 
 +
==== aqua ====
 +
The following response is json from accessing the aqua URL:
 +
 
 +
<code>{
 +
"contents_delivery_required_title_id": "0100000000000816",
 +
"contents_delivery_required_title_version": 0
 +
}</code>
 +
 
 +
A while after [[3.0.0]] release, the above title-version was changed to the one for v3.0("Last-Modified: Thu, 29 Jun 2017 00:00:04 GMT").
 +
 
 +
URLs:
 +
"<nowiki>https://aqua.hac.%%.d4c.nintendo.net/required_system_update_meta?device_id=%016llx</nowiki>"
 +
 
 +
==== atum/atumn ====
 +
CDN for system-titles.
 +
 
 +
While "atumn" seems to be for system-titles and "atum" for eShop titles, the latter titles are accessible fine with atumn (with "/t/" for NCA-type0 at least).
 +
 
 +
'a' is used when an input u8 is not 0x3, otherwise 's' is used. A seperate function using the ".../c/" URL is hard-coded to use 'c'. This appears to match 's' usage attempts: the only URL that returned actual data with 's' was with titleID 0100000000000816.
 +
 
 +
As of June 30, 2017, accessing old content via the atumn "/c/" and "/t/" URLs works fine.
 +
 
 +
URLs:
 +
"<nowiki>https://%s.hac.%%.d4c.nintendo.net/t/%c/%016llx/%u?device_id=%016llx</nowiki>"
 +
Returns content like the below URL. First %s is atumn or atum. This is the content for [[NCA]]-type0. See below for %c. %016llx is titleID, %u is title-version.
 +
 +
"<nowiki>https://%s.hac.%%.d4c.nintendo.net/c/%c/%s</nowiki>"
 +
Used for downloading content. First %s is atumn or atum. %c is one of: 'c', 'a', or 's'. %s is just the hex-string NcaId. The server also returns two HTTP headers: "X-Nintendo-Content-Hash: {entire lowercase hex-string of the content SHA256 hash}" and "X-Nintendo-Content-ID: {lowercase hex-string for NcaId}"
 +
 
 +
==== superfly ====
 +
URLs:
 +
"<nowiki>https://superfly.hac.%%.d4c.nintendo.net/v1/t/%016llx/dv</nowiki>"
 +
%016llx is titleID, only for eShop titles it appears. Returns .json title-info.
 +
 +
"<nowiki>https://superfly.hac.%%.d4c.nintendo.net/v1/a/%016llx/dv</nowiki>"
 +
%016llx is titleID, only for eShop titles it appears. Output is similar to above URL.
 +
 
 +
==== tagaya ====
 +
VersionList for eShop titles.
 +
 
 +
URLs:
 +
"<nowiki>https://tagaya.hac.%.eshop.nintendo.net/tagaya/hac_versionlist</nowiki>"
 +
 
 +
==== beach ====
 +
URLs:
 +
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/rom_cards?application_id=%016llx&rom_card_cert=%s</nowiki>"
 +
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/rom_cards/register?application_id=%016llx&rom_card_cert=%s&expected_gold_point=%d</nowiki>"
 +
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/my/devices/hac/link?lang=en</nowiki>"
 +
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/my/virtual_account?lang=en</nowiki>"
 +
 
 +
==== pearljam ====
 +
URLs:
 +
[5.0.0+] "<nowiki>https://pearljam.hac.%.eshop.nintendo.net/sugar</nowiki>"
 +
[5.0.0+] "<nowiki>https://pearljam.hac.%.eshop.nintendo.net/civil</nowiki>"
 +
 
 +
== Shop API ==
 +
Domains for interacting with the online shop API.
 +
 
 +
=== Servers ===
 +
* "[[#ecs|ecs-%.hac.shop.nintendo.net]]"
 +
* "[[#ias|ias-%.hac.shop.nintendo.net]]"
 +
 
 +
==== ecs ====
 +
URLs:
 +
"<nowiki>https://ecs-%.hac.shop.nintendo.net/ecs/services/rest/AccountGetETickets</nowiki>"
 +
"<nowiki>https://ecs-%.hac.shop.nintendo.net/ecs/services/rest/GetAccountStatus</nowiki>"
 +
 
 +
==== ias ====
 +
URLs:
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/Register</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/GetChallenge</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/Unregister</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/GetRegistrationInfo</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/CompleteETicketSync</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/AccountTransfer</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/SyncRegistration</nowiki>"
 +
 
 +
== Services ==
 +
The URLs for general online service servers on the Switch usually follow one of these formats:
 +
{server_name}.{environment}.{service_name}.srv.nintendo.net
 +
{server_name}-{environment}.{service_name}.srv.nintendo.net
 +
 
 +
Where:
 +
{server_name}: One of the registered server names.
 +
{environment}: "lp1" (production), "dd1" (development) or "sp1" (production lottest staging).
 +
{service_name}: One of the various service names.
 +
 
 +
=== Servers ===
 +
* "[[#aauth|aauth-%.ndas.srv.nintendo.net]]"
 +
* "[[#dauth|dauth-%.ndas.srv.nintendo.net]]"
 +
* "[[#znc|api-%.znc.srv.nintendo.net]]"
 +
* "api-%.pctl.srv.nintendo.net"
 +
* "api-%.frs.srv.nintendo.net"
 +
* "app-b01.%.npns.srv.nintendo.net"
 +
* "broker.%.npns.srv.nintendo.net"
 +
* "consumer.%.npns.srv.nintendo.net"
 +
* "receive-%.dg.srv.nintendo.net"
 +
* "receive-%.er.srv.nintendo.net"
 +
 
 +
==== aauth ====
 +
Application authentication.
 +
 
 +
URLs:
 +
"<nowiki>https://aauth-%.ndas.srv.nintendo.net/v1/application_auth_token</nowiki>"
 +
"<nowiki>https://aauth-%.ndas.srv.nintendo.net/v1/time</nowiki>"
 +
 
 +
==== dauth ====
 +
Device authentication.
 +
 
 +
URLs:
 +
"<nowiki>https://dauth-%.ndas.srv.nintendo.net/v1/device_auth_token</nowiki>"
 +
CURLOPT_POSTFIELDS is set to the output from: snprintf(..., "system_version=%08x&client_id=%s", <byte-swapped first 3 bytes from [[System_Version_Title]] loaded via [[Settings_services|settings]] cmd>, "<hard-coded hex string>");
 +
 
 +
==== znc ====
 +
Used by the Switch Online app to get app data, like the list of game-specific services to display.
 +
 
 +
== Others ==
 +
Miscellaneous domains for various APIs and tests.
 +
 
 +
=== Servers ===
 +
Account metadata:
 +
* "e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com"
 +
* "api.accounts.nintendo.com"
 +
 
 +
News and game content:
 +
* "bcat-topics-%.cdn.nintendo.net"
 +
* "bcat-list-%.cdn.nintendo.net"
 +
* "service-status-%.cdn.nintendo.net"
 +
* "g<game_server_id>-%.s.n.srv.nintendo.net"
 +
 
 +
Connection:
 +
* "ctest.cdn.nintendo.net" (replaces "conntest.nintendowifi.net")
 +
* "nasc.nintendowifi.net"
 +
 
 +
= User-Agent =
 +
[[NIM_services|NIM]] generates two User-Agent strings:
 +
snprintf(..., "User-Agent: NintendoSDK Firmware/%s-%u (platform:%s; did:%016llx; eid:%s)", <string at [[System_Version_Title|sysver]]+0x68>, {u32 from [[System_Version_Title|sysver]]+4}, "NX", DeviceId, {[[Sockets_services#GetEnvironmentIdentifier|GetEnvironmentIdentifier]] output});
 +
 
 +
snprintf(..., "User-Agent: NintendoSDK Firmware/%s-%u (platform:%s; eid:%s)", <string at [[System_Version_Title|sysver]]+0x68>, {u32 from [[System_Version_Title|sysver]]+4}, "NX", DeviceId, {[[Sockets_services#GetEnvironmentIdentifier|GetEnvironmentIdentifier]] output});
 +
 
 +
Where the 64bit DeviceId is parsed from the 0x10-bytes at outbuf+0xC6 from [[Settings_services|set:cal]] GetEciDeviceCertificate (DeviceCert_certname+2, aka where the hex string for the DeviceId is).

Revision as of 21:03, 10 May 2018

This page documents DNS domains and lists information relevant to the online services used by the Switch.

Domains

Only HTTPS is used with these domains unless noted otherwise.

CDN

The URLs for content delivery network servers on the Switch usually follow this format: 

{server_name}.hac.{environment}.{serverset}.nintendo.net

Where: 

{server_name}: One of the registered server names.
{environment}: "lp1" (production), "dd1" (development) or "sp1" (production lottest staging).
{serverset}: "eshop" (online shop) or "d4c" (content delivery).

Servers

sun

Used for checking whether a sysupdate is available. Equivalent to NetUpdateSOAP from past systems.

NIM sends a HTTP GET with the sun URL to get the title-listing of the latest system-titles, as .json. The deviceid in the URL is the same one in the above User-Agent section. HTTP header "Accept:application/json" is sent in the request.

The response is json with a "system_update_metas" block, containing "title_id" and "title_version" entries. The actual server response only contains 1 title.

Example, from 2.0 system:

{"timestamp":REDACTED-TIMESTSAMP,"system_update_metas":[{"title_id":"0100000000000816","title_version":201327002}]}

URLs: 

"https://sun.hac.%%.d4c.nintendo.net/v1/system_update_meta?device_id=%016llx"

aqua

The following response is json from accessing the aqua URL:

{ "contents_delivery_required_title_id": "0100000000000816", "contents_delivery_required_title_version": 0 }

A while after 3.0.0 release, the above title-version was changed to the one for v3.0("Last-Modified: Thu, 29 Jun 2017 00:00:04 GMT").

URLs: 

"https://aqua.hac.%%.d4c.nintendo.net/required_system_update_meta?device_id=%016llx"

atum/atumn

CDN for system-titles.

While "atumn" seems to be for system-titles and "atum" for eShop titles, the latter titles are accessible fine with atumn (with "/t/" for NCA-type0 at least).

'a' is used when an input u8 is not 0x3, otherwise 's' is used. A seperate function using the ".../c/" URL is hard-coded to use 'c'. This appears to match 's' usage attempts: the only URL that returned actual data with 's' was with titleID 0100000000000816.

As of June 30, 2017, accessing old content via the atumn "/c/" and "/t/" URLs works fine.

URLs: 

"https://%s.hac.%%.d4c.nintendo.net/t/%c/%016llx/%u?device_id=%016llx"
Returns content like the below URL. First %s is atumn or atum. This is the content for NCA-type0. See below for %c. %016llx is titleID, %u is title-version.

"https://%s.hac.%%.d4c.nintendo.net/c/%c/%s"
Used for downloading content. First %s is atumn or atum. %c is one of: 'c', 'a', or 's'. %s is just the hex-string NcaId. The server also returns two HTTP headers: "X-Nintendo-Content-Hash: {entire lowercase hex-string of the content SHA256 hash}" and "X-Nintendo-Content-ID: {lowercase hex-string for NcaId}"

superfly

URLs: 

"https://superfly.hac.%%.d4c.nintendo.net/v1/t/%016llx/dv"
%016llx is titleID, only for eShop titles it appears. Returns .json title-info.

"https://superfly.hac.%%.d4c.nintendo.net/v1/a/%016llx/dv"
%016llx is titleID, only for eShop titles it appears. Output is similar to above URL.

tagaya

VersionList for eShop titles.

URLs: 

"https://tagaya.hac.%.eshop.nintendo.net/tagaya/hac_versionlist"

beach

URLs: 

"https://beach.hac.%.eshop.nintendo.net/v1/rom_cards?application_id=%016llx&rom_card_cert=%s"
"https://beach.hac.%.eshop.nintendo.net/v1/rom_cards/register?application_id=%016llx&rom_card_cert=%s&expected_gold_point=%d"
"https://beach.hac.%.eshop.nintendo.net/v1/my/devices/hac/link?lang=en"
"https://beach.hac.%.eshop.nintendo.net/v1/my/virtual_account?lang=en"

pearljam

URLs: 

[5.0.0+] "https://pearljam.hac.%.eshop.nintendo.net/sugar"
[5.0.0+] "https://pearljam.hac.%.eshop.nintendo.net/civil"

Shop API

Domains for interacting with the online shop API.

Servers

ecs

URLs: 

"https://ecs-%.hac.shop.nintendo.net/ecs/services/rest/AccountGetETickets"
"https://ecs-%.hac.shop.nintendo.net/ecs/services/rest/GetAccountStatus"

ias

URLs: 

"https://ias-%.hac.shop.nintendo.net/ias/services/rest/Register"
"https://ias-%.hac.shop.nintendo.net/ias/services/rest/GetChallenge"
"https://ias-%.hac.shop.nintendo.net/ias/services/rest/Unregister"
"https://ias-%.hac.shop.nintendo.net/ias/services/rest/GetRegistrationInfo"
"https://ias-%.hac.shop.nintendo.net/ias/services/rest/CompleteETicketSync"
"https://ias-%.hac.shop.nintendo.net/ias/services/rest/AccountTransfer"
"https://ias-%.hac.shop.nintendo.net/ias/services/rest/SyncRegistration"

Services

The URLs for general online service servers on the Switch usually follow one of these formats: 

{server_name}.{environment}.{service_name}.srv.nintendo.net
{server_name}-{environment}.{service_name}.srv.nintendo.net

Where: 

{server_name}: One of the registered server names.
{environment}: "lp1" (production), "dd1" (development) or "sp1" (production lottest staging).
{service_name}: One of the various service names.

Servers

aauth

Application authentication.

URLs: 

"https://aauth-%.ndas.srv.nintendo.net/v1/application_auth_token"
"https://aauth-%.ndas.srv.nintendo.net/v1/time"

dauth

Device authentication.

URLs: 

"https://dauth-%.ndas.srv.nintendo.net/v1/device_auth_token"
CURLOPT_POSTFIELDS is set to the output from: snprintf(..., "system_version=%08x&client_id=%s", <byte-swapped first 3 bytes from System_Version_Title loaded via settings cmd>, "<hard-coded hex string>");

znc

Used by the Switch Online app to get app data, like the list of game-specific services to display.

Others

Miscellaneous domains for various APIs and tests.

Servers

Account metadata:

  • "e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com"
  • "api.accounts.nintendo.com"

News and game content:

  • "bcat-topics-%.cdn.nintendo.net"
  • "bcat-list-%.cdn.nintendo.net"
  • "service-status-%.cdn.nintendo.net"
  • "g<game_server_id>-%.s.n.srv.nintendo.net"

Connection:

  • "ctest.cdn.nintendo.net" (replaces "conntest.nintendowifi.net")
  • "nasc.nintendowifi.net"

User-Agent

NIM generates two User-Agent strings: 

snprintf(..., "User-Agent: NintendoSDK Firmware/%s-%u (platform:%s; did:%016llx; eid:%s)", <string at sysver+0x68>, {u32 from sysver+4}, "NX", DeviceId, {GetEnvironmentIdentifier output});
 
snprintf(..., "User-Agent: NintendoSDK Firmware/%s-%u (platform:%s; eid:%s)", <string at sysver+0x68>, {u32 from sysver+4}, "NX", DeviceId, {GetEnvironmentIdentifier output});

Where the 64bit DeviceId is parsed from the 0x10-bytes at outbuf+0xC6 from set:cal GetEciDeviceCertificate (DeviceCert_certname+2, aka where the hex string for the DeviceId is).

Retrieved from "https://switchbrew.org/w/index.php?title=Network&oldid=4627"