Nintendo Switch Brew

Network: Difference between revisions

← Older editNewer edit →
m Hexkyz moved page Domains to Network: Re-designing network pages
No edit summary
Line 1: Line 1:
This page documents the DNS domains used by Switch, and what they're used for. Only HTTPS is used with these domains unless noted otherwise.
This page documents DNS domains and lists information relevant to the online services used by the Switch.


* "[[NIM_services|sun.hac.lp1.d4c.nintendo.net]]": Used for checking whether a sysupdate is available, equivalent to NetUpdateSOAP from past systems.
= Domains =
* "[[NIM_services|atumn.hac.lp1.d4c.nintendo.net]]": CDN for system-titles.
Only HTTPS is used with these domains unless noted otherwise.
* "tagaya.hac.lp1.eshop.nintendo.net": VersionList for eShop titles going by 3DS.
 
* "dauth-lp1.ndas.srv.nintendo.net": Seems to break Nintendo-account related comms when blocked. This dauth domain seems to be the cause of the sysupdate-required 2124-3000 [[Error_codes|error]]?
== CDN ==
* "[[NIM_services|beach.hac.lp1.eshop.nintendo.net]]": Same result as dauth when blocked.
The URLs for content delivery network servers on the Switch usually follow this format:
* "consumer.lp1.npns.srv.nintendo.net": Same result as dauth when blocked.
{server_name}.hac.{environment}.{serverset}.nintendo.net
* "e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com": Used to handle account metadata. (friends, profile, etc)
 
* "api.accounts.nintendo.com": Appears to be used by Nintendo apps to get metadata for Switch user profiles.
Where:
* "api-lp1.znc.srv.nintendo.net": Used by the Switch Online app to get app data, like the list of game-specific services to display.
{server_name}: One of the registered server names.
Note: "break Nintendo-account..." is for "posting to social-media" in user-profile, results may vary with the eShop (for non-dauth).
{environment}: "lp1" (production), "dd1" (development) or "sp1" (production lottest staging).
{serverset}: "eshop" (online shop) or "d4c" (content delivery).
 
=== Servers ===
* "[[#sun|sun.hac.%.d4c.nintendo.net]]"
* "[[#aqua|aqua.hac.%.d4c.nintendo.net]]"
* "[[#atum/atumn|atum.hac.%.d4c.nintendo.net]]"
* "[[#atum/atumn|atumn.hac.%.d4c.nintendo.net]]"
* "[[#superfly|superfly.hac.%.d4c.nintendo.net]]"
* "bugyo.hac.%.eshop.nintendo.net"
* "[[#beach|beach.hac.%.eshop.nintendo.net]]"
* "pushmo.hac.%.eshop.nintendo.net"
* "[[#tagaya|tagaya.hac.%.eshop.nintendo.net]]"
* [5.0.0+] "[[#pearljam|pearljam.hac.%.eshop.nintendo.net]]"
 
==== sun ====
Used for checking whether a sysupdate is available. Equivalent to NetUpdateSOAP from past systems.
 
[[NIM_services|NIM]] sends a HTTP GET with the sun URL to get the title-listing of the latest system-titles, as .json. The deviceid in the URL is the same one in the above User-Agent section. HTTP header "Accept:application/json" is sent in the request.
 
The response is json with a "system_update_metas" block, containing "title_id" and "title_version" entries. The actual server response only contains 1 title.
 
Example, from 2.0 system:
 
<code>{"timestamp":REDACTED-TIMESTSAMP,"system_update_metas":[{"title_id":"0100000000000816","title_version":201327002}]}</code>
 
URLs:
"<nowiki>https://sun.hac.%%.d4c.nintendo.net/v1/system_update_meta?device_id=%016llx</nowiki>"
 
==== aqua ====
The following response is json from accessing the aqua URL:
 
<code>{
"contents_delivery_required_title_id": "0100000000000816",
"contents_delivery_required_title_version": 0
}</code>
 
A while after [[3.0.0]] release, the above title-version was changed to the one for v3.0("Last-Modified: Thu, 29 Jun 2017 00:00:04 GMT").
 
URLs:
"<nowiki>https://aqua.hac.%%.d4c.nintendo.net/required_system_update_meta?device_id=%016llx</nowiki>"
 
==== atum/atumn ====
CDN for system-titles.
 
While "atumn" seems to be for system-titles and "atum" for eShop titles, the latter titles are accessible fine with atumn (with "/t/" for NCA-type0 at least).
 
'a' is used when an input u8 is not 0x3, otherwise 's' is used. A seperate function using the ".../c/" URL is hard-coded to use 'c'. This appears to match 's' usage attempts: the only URL that returned actual data with 's' was with titleID 0100000000000816.
 
As of June 30, 2017, accessing old content via the atumn "/c/" and "/t/" URLs works fine.
 
URLs:
"<nowiki>https://%s.hac.%%.d4c.nintendo.net/t/%c/%016llx/%u?device_id=%016llx</nowiki>"
Returns content like the below URL. First %s is atumn or atum. This is the content for [[NCA]]-type0. See below for %c. %016llx is titleID, %u is title-version.
"<nowiki>https://%s.hac.%%.d4c.nintendo.net/c/%c/%s</nowiki>"
Used for downloading content. First %s is atumn or atum. %c is one of: 'c', 'a', or 's'. %s is just the hex-string NcaId. The server also returns two HTTP headers: "X-Nintendo-Content-Hash: {entire lowercase hex-string of the content SHA256 hash}" and "X-Nintendo-Content-ID: {lowercase hex-string for NcaId}"
 
==== superfly ====
URLs:
"<nowiki>https://superfly.hac.%%.d4c.nintendo.net/v1/t/%016llx/dv</nowiki>"
%016llx is titleID, only for eShop titles it appears. Returns .json title-info.
"<nowiki>https://superfly.hac.%%.d4c.nintendo.net/v1/a/%016llx/dv</nowiki>"
%016llx is titleID, only for eShop titles it appears. Output is similar to above URL.
 
==== tagaya ====
VersionList for eShop titles.
 
URLs:
"<nowiki>https://tagaya.hac.%.eshop.nintendo.net/tagaya/hac_versionlist</nowiki>"
 
==== beach ====
URLs:
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/rom_cards?application_id=%016llx&rom_card_cert=%s</nowiki>"
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/rom_cards/register?application_id=%016llx&rom_card_cert=%s&expected_gold_point=%d</nowiki>"
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/my/devices/hac/link?lang=en</nowiki>"
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/my/virtual_account?lang=en</nowiki>"
 
==== pearljam ====
URLs:
[5.0.0+] "<nowiki>https://pearljam.hac.%.eshop.nintendo.net/sugar</nowiki>"
[5.0.0+] "<nowiki>https://pearljam.hac.%.eshop.nintendo.net/civil</nowiki>"
 
== Shop API ==
Domains for interacting with the online shop API.
 
=== Servers ===
* "[[#ecs|ecs-%.hac.shop.nintendo.net]]"
* "[[#ias|ias-%.hac.shop.nintendo.net]]"
 
==== ecs ====
URLs:
"<nowiki>https://ecs-%.hac.shop.nintendo.net/ecs/services/rest/AccountGetETickets</nowiki>"
"<nowiki>https://ecs-%.hac.shop.nintendo.net/ecs/services/rest/GetAccountStatus</nowiki>"
 
==== ias ====
URLs:
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/Register</nowiki>"
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/GetChallenge</nowiki>"
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/Unregister</nowiki>"
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/GetRegistrationInfo</nowiki>"
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/CompleteETicketSync</nowiki>"
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/AccountTransfer</nowiki>"
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/SyncRegistration</nowiki>"
 
== Services ==
The URLs for general online service servers on the Switch usually follow one of these formats:
{server_name}.{environment}.{service_name}.srv.nintendo.net
{server_name}-{environment}.{service_name}.srv.nintendo.net
 
Where:
{server_name}: One of the registered server names.
{environment}: "lp1" (production), "dd1" (development) or "sp1" (production lottest staging).
{service_name}: One of the various service names.
 
=== Servers ===
* "[[#aauth|aauth-%.ndas.srv.nintendo.net]]"
* "[[#dauth|dauth-%.ndas.srv.nintendo.net]]"
* "[[#znc|api-%.znc.srv.nintendo.net]]"
* "api-%.pctl.srv.nintendo.net"
* "api-%.frs.srv.nintendo.net"
* "app-b01.%.npns.srv.nintendo.net"
* "broker.%.npns.srv.nintendo.net"
* "consumer.%.npns.srv.nintendo.net"
* "receive-%.dg.srv.nintendo.net"
* "receive-%.er.srv.nintendo.net"
 
==== aauth ====
Application authentication.
 
URLs:
"<nowiki>https://aauth-%.ndas.srv.nintendo.net/v1/application_auth_token</nowiki>"
"<nowiki>https://aauth-%.ndas.srv.nintendo.net/v1/time</nowiki>"
 
==== dauth ====
Device authentication.
 
URLs:
"<nowiki>https://dauth-%.ndas.srv.nintendo.net/v1/device_auth_token</nowiki>"
CURLOPT_POSTFIELDS is set to the output from: snprintf(..., "system_version=%08x&client_id=%s", <byte-swapped first 3 bytes from [[System_Version_Title]] loaded via [[Settings_services|settings]] cmd>, "<hard-coded hex string>");
 
==== znc ====
Used by the Switch Online app to get app data, like the list of game-specific services to display.
 
== Others ==
Miscellaneous domains for various APIs and tests.
 
=== Servers ===
Account metadata:
* "e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com"
* "api.accounts.nintendo.com"
 
News and game content:
* "bcat-topics-%.cdn.nintendo.net"
* "bcat-list-%.cdn.nintendo.net"
* "service-status-%.cdn.nintendo.net"
* "g<game_server_id>-%.s.n.srv.nintendo.net"
 
Connection:
* "ctest.cdn.nintendo.net" (replaces "conntest.nintendowifi.net")
* "nasc.nintendowifi.net"
 
= User-Agent =
[[NIM_services|NIM]] generates two User-Agent strings:
snprintf(..., "User-Agent: NintendoSDK Firmware/%s-%u (platform:%s; did:%016llx; eid:%s)", <string at [[System_Version_Title|sysver]]+0x68>, {u32 from [[System_Version_Title|sysver]]+4}, "NX", DeviceId, {[[Sockets_services#GetEnvironmentIdentifier|GetEnvironmentIdentifier]] output});
 
snprintf(..., "User-Agent: NintendoSDK Firmware/%s-%u (platform:%s; eid:%s)", <string at [[System_Version_Title|sysver]]+0x68>, {u32 from [[System_Version_Title|sysver]]+4}, "NX", DeviceId, {[[Sockets_services#GetEnvironmentIdentifier|GetEnvironmentIdentifier]] output});
 
Where the 64bit DeviceId is parsed from the 0x10-bytes at outbuf+0xC6 from [[Settings_services|set:cal]] GetEciDeviceCertificate (DeviceCert_certname+2, aka where the hex string for the DeviceId is).
Retrieved from "https://switchbrew.org/wiki/Network"