Nintendo Switch Brew

Changes

Network (view source)

Revision as of 16:20, 12 October 2018

8,315 bytes added ,  16:20, 12 October 2018
→‎CDN
Line 1: Line 1: −
This page documents the DNS domains used by Switch, and what they're used for. Only HTTPS is used with these domains unless noted otherwise.
+
This page documents DNS domains and lists information relevant to the online services used by the Switch.
   −
* "sun.hac.lp1.d4c.nintendo.net": Used for checking whether a sysupdate is available, equivalent to NetUpdateSOAP from past systems.
+
= Domains =
−
* "atumn.hac.lp1.d4c.nintendo.net": CDN for system-titles.
+
Only HTTPS is used with these domains unless noted otherwise.
−
* "tagaya.hac.lp1.eshop.nintendo.net": VersionList for eShop titles going by 3DS.
  −
* "dauth-lp1.ndas.srv.nintendo.net": Seems to break Nintendo-account related comms when blocked. This dauth domain seems to be the cause of the sysupdate-required 2124-3000 [[Error_codes|error]]?
  −
* "beach.hac.lp1.eshop.nintendo.net": Same result as dauth when blocked.
  −
* "consumer.lp1.npns.srv.nintendo.net": Same result as dauth when blocked.
     −
Note: "break Nintendo-acount..." is for "posting to social-media" in user-profile, results may vary with eShop(for non-dauth).
+
== CDN ==
 +
The URLs for content delivery network servers on the Switch usually follow this format:
 +
{server_name}.hac.{environment}.{serverset}.nintendo.net
 +
 
 +
Where:
 +
{server_name}: One of the registered server names.
 +
{environment}: "dp1", "lp1", "sp1", "dd1", "jd1", "sd1", "td1" or "xd1".
 +
{serverset}: "eshop" (online shop) or "d4c" (content delivery).
 +
 
 +
=== Servers ===
 +
* "[[#sun|sun.hac.%.d4c.nintendo.net]]"
 +
* "[[#aqua|aqua.hac.%.d4c.nintendo.net]]"
 +
* "[[#atum/atumn|atum.hac.%.d4c.nintendo.net]]"
 +
* "[[#atum/atumn|atumn.hac.%.d4c.nintendo.net]]"
 +
* "[[#superfly|superfly.hac.%.d4c.nintendo.net]]"
 +
* "bugyo.hac.%.eshop.nintendo.net"
 +
* "[[#beach|beach.hac.%.eshop.nintendo.net]]"
 +
* "pushmo.hac.%.eshop.nintendo.net"
 +
* "[[#tagaya|tagaya.hac.%.eshop.nintendo.net]]"
 +
* [5.0.0+] "[[#pearljam|pearljam.hac.%.eshop.nintendo.net]]"
 +
 
 +
==== sun ====
 +
Used for checking whether a sysupdate is available. Equivalent to NetUpdateSOAP from past systems.
 +
 
 +
[[NIM_services|NIM]] sends a HTTP GET with the sun URL to get the title-listing of the latest system-titles, as .json. The deviceid in the URL is the same one in the above User-Agent section. HTTP header "Accept:application/json" is sent in the request.
 +
 
 +
The response is json with a "system_update_metas" block, containing "title_id" and "title_version" entries. The actual server response only contains 1 title.
 +
 
 +
Example, from 2.0 system:
 +
 
 +
<code>{"timestamp":REDACTED-TIMESTSAMP,"system_update_metas":[{"title_id":"0100000000000816","title_version":201327002}]}</code>
 +
 
 +
URLs:
 +
"<nowiki>https://sun.hac.%%.d4c.nintendo.net/v1/system_update_meta?device_id=%016llx</nowiki>"
 +
 
 +
==== aqua ====
 +
The following response is json from accessing the aqua URL:
 +
 
 +
<code>{
 +
"contents_delivery_required_title_id": "0100000000000816",
 +
"contents_delivery_required_title_version": 0
 +
}</code>
 +
 
 +
A while after [[3.0.0]] release, the above title-version was changed to the one for v3.0("Last-Modified: Thu, 29 Jun 2017 00:00:04 GMT").
 +
 
 +
URLs:
 +
"<nowiki>https://aqua.hac.%%.d4c.nintendo.net/required_system_update_meta?device_id=%016llx</nowiki>"
 +
 
 +
==== atum/atumn ====
 +
CDN for system-titles.
 +
 
 +
While "atumn" seems to be for system-titles and "atum" for eShop titles, the latter titles are accessible fine with atumn (with "/t/" for NCA-type0 at least).
 +
 
 +
'a' is used when an input u8 is not 0x3, otherwise 's' is used. A seperate function using the ".../c/" URL is hard-coded to use 'c'. This appears to match 's' usage attempts: the only URL that returned actual data with 's' was with titleID 0100000000000816.
 +
 
 +
As of June 30, 2017, accessing old content via the atumn "/c/" and "/t/" URLs works fine.
 +
 
 +
URLs:
 +
"<nowiki>https://%s.hac.%%.d4c.nintendo.net/t/%c/%016llx/%u?device_id=%016llx</nowiki>"
 +
Returns content like the below URL. First %s is atumn or atum. This is the content for [[NCA]]-type0. See below for %c. %016llx is titleID, %u is title-version.
 +
 +
"<nowiki>https://%s.hac.%%.d4c.nintendo.net/c/%c/%s</nowiki>"
 +
Used for downloading content. First %s is atumn or atum. %c is one of: 'c', 'a', or 's'. %s is just the hex-string NcaId. The server also returns two HTTP headers: "X-Nintendo-Content-Hash: {entire lowercase hex-string of the content SHA256 hash}" and "X-Nintendo-Content-ID: {lowercase hex-string for NcaId}"
 +
 
 +
==== superfly ====
 +
URLs:
 +
"<nowiki>https://superfly.hac.%%.d4c.nintendo.net/v1/t/%016llx/dv</nowiki>"
 +
%016llx is titleID, only for eShop titles it appears. Returns .json title-info.
 +
 +
"<nowiki>https://superfly.hac.%%.d4c.nintendo.net/v1/a/%016llx/dv</nowiki>"
 +
%016llx is titleID, only for eShop titles it appears. Output is similar to above URL.
 +
 
 +
==== tagaya ====
 +
VersionList for eShop titles.
 +
 
 +
URLs:
 +
"<nowiki>https://tagaya.hac.%.eshop.nintendo.net/tagaya/hac_versionlist</nowiki>"
 +
 
 +
==== beach ====
 +
URLs:
 +
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/rom_cards?application_id=%016llx&rom_card_cert=%s</nowiki>"
 +
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/rom_cards/register?application_id=%016llx&rom_card_cert=%s&expected_gold_point=%d</nowiki>"
 +
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/my/devices/hac/link?lang=en</nowiki>"
 +
"<nowiki>https://beach.hac.%.eshop.nintendo.net/v1/my/virtual_account?lang=en</nowiki>"
 +
 
 +
==== pearljam ====
 +
URLs:
 +
[5.0.0+] "<nowiki>https://pearljam.hac.%.eshop.nintendo.net/sugar</nowiki>"
 +
[5.0.0+] "<nowiki>https://pearljam.hac.%.eshop.nintendo.net/civil</nowiki>"
 +
 
 +
== Shop API ==
 +
Domains for interacting with the online shop API.
 +
 
 +
=== Servers ===
 +
* "[[#ecs|ecs-%.hac.shop.nintendo.net]]"
 +
* "[[#ias|ias-%.hac.shop.nintendo.net]]"
 +
 
 +
==== ecs ====
 +
URLs:
 +
"<nowiki>https://ecs-%.hac.shop.nintendo.net/ecs/services/rest/AccountGetETickets</nowiki>"
 +
"<nowiki>https://ecs-%.hac.shop.nintendo.net/ecs/services/rest/GetAccountStatus</nowiki>"
 +
 
 +
==== ias ====
 +
URLs:
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/Register</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/GetChallenge</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/Unregister</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/GetRegistrationInfo</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/CompleteETicketSync</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/AccountTransfer</nowiki>"
 +
"<nowiki>https://ias-%.hac.shop.nintendo.net/ias/services/rest/SyncRegistration</nowiki>"
 +
 
 +
== Services ==
 +
The URLs for general online service servers on the Switch usually follow one of these formats:
 +
{server_name}.{environment}.{service_name}.srv.nintendo.net
 +
{server_name}-{environment}.{service_name}.srv.nintendo.net
 +
 
 +
Where:
 +
{server_name}: One of the registered server names.
 +
{environment}: "lp1" (production), "dd1" (development) or "sp1" (production lottest staging).
 +
{service_name}: One of the various service names.
 +
 
 +
=== Servers ===
 +
* "[[#aauth|aauth-%.ndas.srv.nintendo.net]]"
 +
* "[[#dauth|dauth-%.ndas.srv.nintendo.net]]"
 +
* "[[#znc|api-%.znc.srv.nintendo.net]]"
 +
* "api-%.pctl.srv.nintendo.net"
 +
* "api-%.frs.srv.nintendo.net"
 +
* "app-b01.%.npns.srv.nintendo.net"
 +
* "broker.%.npns.srv.nintendo.net"
 +
* "consumer.%.npns.srv.nintendo.net"
 +
* "receive-%.dg.srv.nintendo.net"
 +
* "receive-%.er.srv.nintendo.net"
 +
 
 +
==== aauth ====
 +
Application authentication.
 +
 
 +
URLs:
 +
"<nowiki>https://aauth-%.ndas.srv.nintendo.net/v1/application_auth_token</nowiki>"
 +
"<nowiki>https://aauth-%.ndas.srv.nintendo.net/v1/time</nowiki>"
 +
 +
[5.0.0+] "<nowiki>https://aauth-%.ndas.srv.nintendo.net/v2-44cd4221f90742b5f37a4948b37dacf024d0bb14dde86db0af20ec300a36a0fe/application_auth_token</nowiki>"
 +
Replaces previous application_auth_token URL.
 +
 
 +
==== dauth ====
 +
Device authentication.
 +
 
 +
URLs:
 +
"<nowiki>https://dauth-%.ndas.srv.nintendo.net/v1/device_auth_token</nowiki>"
 +
CURLOPT_POSTFIELDS is set to the output from: snprintf(..., "system_version=%08x&client_id=%s", <byte-swapped first 3 bytes from [[System_Version_Title]] loaded via [[Settings_services|settings]] cmd>, "<hard-coded hex string>");
 +
 +
[4.0.0+] "<nowiki>https://dauth-%.ndas.srv.nintendo.net/439528b578b74475d24ec19264097f17d2cc578c8584816b644e7b7fa93044d7/device_auth_token</nowiki>"
 +
Replaces previous device_auth_token URL.
 +
 +
[5.0.0+] "<nowiki>https://dauth-%.ndas.srv.nintendo.net/v3-59ed5fa1c25bb2aea8c4d73d74b919a94d89ed48d6865b728f63547943b17404/device_auth_token</nowiki>"
 +
Replaces previous device_auth_token URL.
 +
 +
[5.0.0+] "<nowiki>https://dauth-%.ndas.srv.nintendo.net/v3-59ed5fa1c25bb2aea8c4d73d74b919a94d89ed48d6865b728f63547943b17404/challenge</nowiki>"
 +
CURLOPT_POSTFIELDS is set to the output from: snprintf(..., "key_generation=%u", 5);
 +
 
 +
==== znc ====
 +
Used by the Switch Online app to get app data, like the list of game-specific services to display.
 +
 
 +
== Others ==
 +
Miscellaneous domains for various APIs and tests.
 +
 
 +
=== Servers ===
 +
Account metadata:
 +
* "e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com"
 +
* "api.accounts.nintendo.com"
 +
 
 +
News and game content:
 +
* "bcat-topics-%.cdn.nintendo.net"
 +
* "bcat-list-%.cdn.nintendo.net"
 +
* "service-status-%.cdn.nintendo.net"
 +
* "g<game_server_id>-%.s.n.srv.nintendo.net"
 +
 
 +
Connection:
 +
* "ctest.cdn.nintendo.net" (replaces "conntest.nintendowifi.net")
 +
* "nasc.nintendowifi.net"
 +
 
 +
= User-Agent =
 +
[[NIM_services|NIM]] generates two User-Agent strings:
 +
snprintf(..., "User-Agent: NintendoSDK Firmware/%s-%u (platform:%s; did:%016llx; eid:%s)", <string at [[System_Version_Title|sysver]]+0x68>, {u32 from [[System_Version_Title|sysver]]+4}, "NX", DeviceId, {[[Sockets_services#GetEnvironmentIdentifier|GetEnvironmentIdentifier]] output});
 +
 
 +
snprintf(..., "User-Agent: NintendoSDK Firmware/%s-%u (platform:%s; eid:%s)", <string at [[System_Version_Title|sysver]]+0x68>, {u32 from [[System_Version_Title|sysver]]+4}, "NX", DeviceId, {[[Sockets_services#GetEnvironmentIdentifier|GetEnvironmentIdentifier]] output});
 +
 
 +
Where the 64bit DeviceId is parsed from the 0x10-bytes at outbuf+0xC6 from [[Settings_services|set:cal]] GetEciDeviceCertificate (DeviceCert_certname+2, aka where the hex string for the DeviceId is).
Retrieved from "https://switchbrew.org/wiki/Special:MobileDiff/984...5193"