📚 TCP/IP Exam Essentials for IGCSE CIE Computer Science | IGCSE CIE 计算机：TCP/IP 考点精讲
Networking is at the heart of modern digital communication, and the TCP/IP model provides the fundamental framework that enables devices to exchange data across local and global networks. For the IGCSE CIE Computer Science syllabus, understanding the layered architecture of TCP/IP, the purpose and function of each layer, key protocols such as IP, TCP, UDP, HTTP, and FTP, as well as addressing concepts like IPv4, IPv6, and DNS, is essential for success in both theory papers and practical problem-solving questions. This article offers a detailed, exam-focused revision guide that breaks down every major concept, explains how each component contributes to reliable data transmission, and highlights the differences between the five-layer and four-layer models commonly encountered in CIE examinations.
网络是现代数字通信的核心，而 TCP/IP 模型则提供了使设备能够在本地和全球网络中交换数据的基本框架。针对 IGCSE CIE 计算机科学教学大纲，理解 TCP/IP 的分层架构、每一层的目的与功能、关键协议（如 IP、TCP、UDP、HTTP 和 FTP）以及 IPv4、IPv6 和 DNS 等寻址概念，对于在理论考试和实践问题解答中取得成功至关重要。本文提供一份详细、紧扣考点的复习指南，逐一拆解每个主要概念，说明各个组件如何共同实现可靠的数据传输，并强调 CIE 考试中常见的五层模型与四层模型之间的区别。
1. The Purpose of Network Protocols | 网络协议的作用
Network protocols are a set of rules that govern how data is transmitted and received between devices. They define the format of data packets, the timing of transmissions, and the actions taken when errors occur. Without standardized protocols, devices from different manufacturers would be unable to communicate, making the internet and other networks impossible. Protocols operate at specific layers of the TCP/IP stack, each handling a distinct aspect of communication, from the physical transmission of bits to the presentation of web pages.
网络协议是一套管理设备之间数据传输和接收方式的规则。它们定义了数据包的格式、传输的时序以及出错时所采取的措施。如果没有标准化的协议，来自不同制造商的设备就无法相互通信，互联网和其他网络也就无从谈起。协议在 TCP/IP 协议栈的特定层次中运行，每一层处理通信中的一个不同层面，从比特的物理传输到网页的呈现。
2. The TCP/IP Layered Architecture | TCP/IP 分层架构
The TCP/IP model is organised into layers, each providing services to the layer above it and relying on the layer below it. This layered approach simplifies network design, allows developers to focus on one layer at a time, and enables interoperability between different hardware and software. CIE IGCSE candidates need to know two common versions: the five-layer model (Application, Transport, Network, Data Link, Physical) and the earlier four-layer model (Application, Transport, Internet, Network Access). In the five-layer model, the Physical layer is separated from the Data Link layer, which gives a clearer view of how bits are actually transmitted. In examinations, questions often refer to the five-layer model, but students should be aware of both.
TCP/IP 模型按层次组织，每一层为其上一层提供服务，并依赖于下一层。这种分层方法简化了网络设计，使开发人员能够一次专注于一层，并实现了不同硬件和软件之间的互操作性。CIE IGCSE 考生需要了解两种常见版本：五层模型（应用层、传输层、网络层、数据链路层、物理层）和早期的四层模型（应用层、传输层、互联网层、网络接入层）。在五层模型中，物理层与数据链路层分离，这更清晰地展示了比特的实际传输方式。在考试中，问题通常会涉及五层模型，但学生也应当了解四层模型。
3. Application Layer: Providing User Services | 应用层：提供用户服务
The Application layer is the topmost layer, responsible for providing network services directly to end-user applications. It does not include the applications themselves but rather the protocols that those applications use. Common Application layer protocols include HTTP for web browsing, HTTPS for secure web communication, FTP for file transfer, SMTP for sending emails, IMAP and POP3 for receiving emails, and DNS for translating domain names to IP addresses. When a user types a URL into a web browser, the browser uses HTTP (or HTTPS) to request the web page from the server. The Application layer assembles the necessary data and passes it down to the layer below.
应用层是最顶层，负责直接向最终用户应用程序提供网络服务。它不包括应用程序本身，而是包含这些应用程序所使用的协议。常见的应用层协议包括用于网页浏览的 HTTP、用于安全网页通信的 HTTPS、用于文件传输的 FTP、用于发送电子邮件的 SMTP、用于接收电子邮件的 IMAP 和 POP3，以及用于将域名转换为 IP 地址的 DNS。当用户在网页浏览器中输入网址时，浏览器会使用 HTTP（或 HTTPS）向服务器请求网页。应用层组装好必要的数据，并将其传递给下一层。
4. Transport Layer: Reliable Data Delivery | 传输层：可靠的数据交付
The Transport layer is responsible for end-to-end communication between devices. It takes data from the Application layer, breaks it into smaller chunks called segments (in TCP), and adds a header containing source and destination port numbers, sequence numbers, and error-checking information. Two key protocols operate at this layer: TCP (Transmission Control Protocol) and UDP (User Datagram Protocol). TCP provides reliable, connection-oriented communication by establishing a connection, acknowledging received data, and retransmitting lost packets. UDP is a simpler, connectionless protocol that offers faster transmission but no guarantee of delivery, making it suitable for streaming and voice calls where occasional packet loss is acceptable.
传输层负责设备之间的端到端通信。它从应用层接收数据，将其分割成更小的块（在 TCP 中称为报文段），并添加包含源端口号和目的端口号、序列号以及差错校验信息的报头。该层运行着两种关键协议：TCP（传输控制协议）和 UDP（用户数据报协议）。TCP 通过建立连接、确认接收到的数据以及重传丢失的数据包，提供可靠的、面向连接的通信。UDP 则是一种更简单的无连接协议，传输速度更快，但不保证交付，因此适用于偶尔丢包可以接受的流媒体和语音通话。
5. Network Layer: Logical Addressing and Routing | 网络层：逻辑寻址与路由
The Network layer handles the logical addressing of devices and the routing of packets across different networks. The core protocol here is IP (Internet Protocol), which defines IPv4 and IPv6 addresses. Each packet leaving the Transport layer is encapsulated with an IP header containing the source IP address and the destination IP address. Routers operate at this layer, examining destination IP addresses to forward packets along the best path to their final destination. The Network layer also performs fragmentation, splitting large packets into smaller ones if they exceed the maximum transmission unit of a link, and reassembles them at the receiving end. Important supporting protocols include ICMP (Internet Control Message Protocol), used for error reporting and diagnostic tools like ping.
网络层处理设备的逻辑寻址以及数据包在不同网络之间的路由。这里的核心协议是 IP（互联网协议），它定义了 IPv4 和 IPv6 地址。每个离开传输层的数据包都被封装上一个包含源 IP 地址和目的 IP 地址的 IP 报头。路由器在这一层工作，通过检查目的 IP 地址，将数据包沿着最佳路径转发到最终目的地。网络层还执行分片操作，如果数据包大小超过链路的最大传输单元，就将其分割为较小的数据包，并在接收端进行重组。重要的支撑协议包括 ICMP（互联网控制报文协议），用于错误报告和像 ping 这样的诊断工具。
6. Data Link Layer: Framing and Physical Addressing | 数据链路层：成帧与物理寻址
The Data Link layer organises raw bits from the Physical layer into structured frames. It adds a header and a trailer to each frame, containing source and destination MAC (Media Access Control) addresses, which are unique hardware addresses assigned to network interface cards. This layer also performs error detection using a Frame Check Sequence (FCS) or Cyclic Redundancy Check (CRC), allowing the receiving device to determine whether the frame was corrupted during transmission. Ethernet is the most common Data Link layer technology. Switches and bridges operate at this layer, using MAC addresses to forward frames only to the specific port where the destination device is connected, reducing unnecessary network traffic.
数据链路层将来自物理层的原始比特组织成结构化的帧。它为每个帧添加一个报头和一个报尾，包含源 MAC（介质访问控制）地址和目的 MAC 地址，这些地址是分配给网络接口卡的唯一硬件地址。该层还使用帧校验序列（FCS）或循环冗余校验（CRC）进行差错检测，使接收设备能够确定帧在传输过程中是否损坏。以太网是最常见的数据链路层技术。交换机和网桥在这一层工作，利用 MAC 地址将帧只转发到连接了目标设备的特定端口，从而减少不必要的网络流量。
7. Physical Layer: Transmitting Bits | 物理层：传输比特
The Physical layer is concerned with the actual transmission of raw bits over a communication medium. This includes the electrical, optical, or radio signals that represent binary data. It defines the physical characteristics of the connection, such as cable types (copper wire, fibre optic), connector shapes, voltage levels, data rates, and signal encoding methods. Hubs and repeaters operate at the Physical layer; they simply regenerate and forward electrical signals without understanding frames or addresses. In the TCP/IP five-layer model, separating the Physical layer from the Data Link layer emphasises that the physical medium and signalling are independent of the logical framing process.
物理层关注原始比特在通信介质上的实际传输。这包括表示二进制数据的电信号、光信号或无线电信号。它定义了连接的物理特性，例如电缆类型（铜线、光纤）、连接器形状、电压水平、数据速率和信号编码方法。集线器和中继器在物理层工作；它们只是再生并转发电信号，而不理解帧或地址。在 TCP/IP 五层模型中，将物理层与数据链路层分离，强调了物理介质和信号与逻辑成帧过程是独立的。
8. IP Addressing: IPv4 and IPv6 | IP 地址：IPv4 与 IPv6
An IP address is a logical address used to uniquely identify a device on a network. IPv4 uses 32-bit addresses, typically written as four decimal octets separated by dots, for example 192.168.1.10. This provides about 4.3 billion unique addresses, which is insufficient for the growing number of internet-connected devices. IPv6 was developed to solve this limitation; it uses 128-bit addresses written in hexadecimal notation with eight groups separated by colons, such as 2001:0db8:85a3:0000:0000:8a2e:0370:7334. IPv6 also brings improvements in routing efficiency, built-in security through IPsec, and simpler autoconfiguration. CIE exams expect students to compare the two addressing schemes and understand why the transition from IPv4 to IPv6 is necessary.
IP 地址是用于在网络中唯一标识设备的逻辑地址。IPv4 使用 32 位地址，通常写作用点号分隔的四个十进制八位组，例如 192.168.1.10。这提供了大约 43 亿个唯一地址，对于日益增多的联网设备来说是不够的。IPv6 正是为了解决这一限制而开发的；它使用 128 位地址，采用十六进制表示法，由冒号分隔的八组字符组成，例如 2001:0db8:85a3:0000:0000:8a2e:0370:7334。IPv6 还带来了路由效率的提升、通过 IPsec 实现的内置安全性以及更简单的自动配置。CIE 考试期望学生能够比较这两种寻址方案，并理解为什么从 IPv4 过渡到 IPv6 是必要的。
9. Subnet Mask and Network Identification | 子网掩码与网络识别
A subnet mask is a 32-bit number used in conjunction with an IPv4 address to determine which part of the address identifies the network and which part identifies the host. It consists of a series of contiguous 1 bits followed by contiguous 0 bits. For example, a common subnet mask 255.255.255.0 in binary is 11111111.11111111.11111111.00000000, meaning the first three octets represent the network portion and the last octet represents the host portion. When a device sends data to an IP address, it applies a bitwise AND operation between its own subnet mask and the destination IP address to check whether the target is on the same local network or on a remote network, thus deciding whether to send the packet directly or to forward it to a default gateway.
子网掩码是一个 32 位的数字，与 IPv4 地址配合使用，用于确定地址的哪一部分标识网络，哪一部分标识主机。它由一系列连续的 1 位后跟连续的 0 位组成。例如，常见的子网掩码 255.255.255.0 的二进制形式是 11111111.11111111.11111111.00000000，这意味着前三个八位组表示网络部分，最后一个八位组表示主机部分。当设备向某个 IP 地址发送数据时，它会用自己的子网掩码与目的 IP 地址执行按位 AND 运算，以检测目标是否位于同一本地网络还是位于远程网络，从而决定是直接发送数据包还是将其转发给默认网关。
10. MAC Addresses vs IP Addresses | MAC 地址与 IP 地址
A MAC address is a 48-bit hexadecimal hardware identifier permanently assigned to a network interface card by its manufacturer. It is used at the Data Link layer for communication within the same local network segment. In contrast, an IP address is a logical address assigned by network administrators or dynamically by DHCP, used at the Network layer for routing across multiple networks. The key difference for IGCSE students to remember is that IP addresses can change as a device moves between networks, but MAC addresses normally remain constant. When a frame is sent between two devices on the same Ethernet network, the source and destination MAC addresses are used directly. When data must travel to a different network, the IP address remains the same end-to-end, but the MAC address changes at each hop as the frame is forwarded by routers.
MAC 地址是一个 48 位的十六进制硬件标识符，由制造商永久分配给网络接口卡。它在数据链路层用于同一本地网段内的通信。相比之下，IP 地址是由网络管理员或由 DHCP 动态分配的逻辑地址，在网络层用于跨多个网络的路由。IGCSE 学生需要记住的关键区别是，IP 地址会随着设备在不同网络之间移动而改变，而 MAC 地址通常保持不变。当帧在同一以太网上的两台设备之间发送时，会直接使用源 MAC 地址和目的 MAC 地址。当数据必须传输到另一个网络时，IP 地址在端到端保持不变，但 MAC 地址在每一跳都会随着路由器转发帧而改变。
11. DNS: The Domain Name System | DNS：域名系统
The Domain Name System (DNS) translates human-friendly domain names (such as http://www.igcsealevel.com) into IP addresses that computers use to locate servers. DNS operates at the Application layer and uses a hierarchical, distributed database structure. When a user enters a URL, the browser first checks its local cache; if the IP address is not found, a DNS query is sent to a recursive DNS server, which may contact root servers, top-level domain servers, and authoritative name servers to resolve the domain name. The result is returned to the client, allowing the connection to be established. CIE questions often test the sequence of DNS resolution and its importance for the usability of the internet, as remembering numeric IP addresses for all websites would be impossible for most people.
域名系统（DNS）将人类友好的域名（例如 http://www.igcsealevel.com）转换为计算机用于定位服务器的 IP 地址。DNS 工作于应用层，采用分层、分布式的数据库结构。当用户输入 URL 时，浏览器首先检查其本地缓存；如果没有找到 IP 地址，就会向递归 DNS 服务器发送一个 DNS 查询，该服务器可能会联系根服务器、顶级域服务器和权威名称服务器来解析域名。结果返回给客户端，从而允许建立连接。CIE 试题常常考查 DNS 解析的顺序以及它对互联网可用性的重要性，因为对于大多数人来说，记住所有网站的数值 IP 地址是不可能的。
12. Packet Switching and the Role of Routers | 分组交换与路由器的作用
Data sent over the internet is broken into small packets that can travel independently across the network in a process called packet switching. Each packet contains the destination IP address and a sequence number. Routers examine the destination address of each packet and decide the next hop along the route using routing tables and algorithms. Packets may follow different paths and arrive out of order; the Transport layer at the receiving end uses sequence numbers to reorder them and request retransmission of any missing packets. This method makes efficient use of network resources and provides resilience, because if one route fails, packets can be dynamically rerouted. CIE exams ask students to explain the benefits of packet switching over circuit switching, including better bandwidth utilisation and fault tolerance.
通过互联网发送的数据被分割成小的数据包，这些数据包可以在网络中独立传输，这个过程称为分组交换。每个数据包都包含目的 IP 地址和序列号。路由器检查每个数据包的目的地址，并利用路由表和算法决定沿路径的下一跳。数据包可能会经过不同的路径并乱序到达；接收端的传输层利用序列号对它们进行重新排序，并请求重传任何丢失的数据包。这种方法能够高效地利用网络资源，并提供弹性，因为如果一条路由发生故障，数据包可以动态地重新选择路由。CIE 考试要求学生解释分组交换相对于电路交换的优势，包括更好的带宽利用率和容错能力。
Published by TutorHao | CIE IGCSE Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导