📚 IGCSE Computer Science: Networking Fundamentals Explained | IGCSE 计算机：网络基础考点精讲
Computer networks form the backbone of modern digital communication, enabling devices to share data, resources, and services efficiently. For IGCSE Computer Science, a solid grasp of networking fundamentals is essential, covering everything from hardware and topologies to protocols, security, and cloud computing. This guide breaks down every key topic you need to prepare for your exam, with clear bilingual explanations and focused exam-style points.
计算机网络是现代数字通信的基石，使设备能够高效地共享数据、资源和服务。对于 IGCSE 计算机科学而言，牢固掌握网络基础至关重要，涵盖从硬件和拓扑结构到协议、安全以及云计算的方方面面。本指南将拆解备考所需的每个关键主题，提供清晰的双语讲解和聚焦考点的要点。
1. Network Types: LAN, WAN, and WLAN | 网络类型：局域网、广域网和无线局域网
A Local Area Network (LAN) connects devices within a limited area like a home, school, or office. It offers high data transfer speeds and low latency because the cables or wireless links span short distances. LANs are typically owned, set up, and managed by a single organisation or individual, using Ethernet cables or Wi‑Fi.
局域网（LAN）将家庭、学校或办公室等有限区域内的设备连接起来。由于电缆或无线链路跨度较短，它提供高数据传输速度和低延迟。局域网通常由单个组织或个人拥有、搭建和管理，使用以太网电缆或 Wi‑Fi。
A Wide Area Network (WAN) covers a broad geographical area, often connecting several LANs across cities or continents. The internet is the most extensive WAN. WAN connections are usually leased from telecommunications providers and can be slower than LANs because data must travel longer distances.
广域网（WAN）覆盖广阔的地理区域，通常连接跨城市或大洲的多个局域网。互联网就是最广泛的广域网。广域网连接通常从电信提供商租用，并且可能比局域网慢，因为数据必须传输更长距离。
A Wireless Local Area Network (WLAN) is a LAN that uses radio waves instead of cables, typically based on the Wi‑Fi (IEEE 802.11) standards. WLANs offer mobility and easy device additions but can suffer from interference and security vulnerabilities if not properly encrypted.
无线局域网（WLAN）是使用无线电波而非电缆的局域网，通常基于 Wi‑Fi（IEEE 802.11）标准。WLAN 提供移动性和便捷的设备添加，但如果未适当加密，可能会受到干扰和存在安全漏洞。
2. Network Hardware: Routers, Switches, NICs, and Modems | 网络硬件：路由器、交换机、网卡和调制解调器
A router is a device that forwards data packets between different networks. It uses IP addresses to determine the best path for data to travel and connects a LAN to a WAN, such as a home network to the internet. Routers often include built‑in firewalls and DHCP servers.
路由器是在不同网络之间转发数据包的设备。它使用 IP 地址确定数据行进的最佳路径，并将局域网连接到广域网，例如将家庭网络连接到互联网。路由器通常包含内置防火墙和 DHCP 服务器。
A switch operates within a LAN and uses MAC addresses to send data frames to the exact intended device. Unlike a hub that broadcasts to all ports, a switch creates a direct, private connection, reducing collisions and improving efficiency.
交换机在局域网内部运行，并使用 MAC 地址将数据帧发送到确切的预期设备。与向所有端口广播的集线器不同，交换机创建直接的、私有的连接，减少冲突并提高效率。
A Network Interface Card (NIC) is an internal hardware component that allows a device to connect to a network. Every NIC has a unique MAC address assigned by the manufacturer. It can be wired (Ethernet) or wireless.
网卡（NIC）是允许设备连接到网络的内部硬件组件。每个网卡都有一个由制造商分配的唯一 MAC 地址。它可以是有线的（以太网）或无线的。
A modem (modulator‑demodulator) converts digital signals from a computer into analogue signals for transmission over telephone lines or cable, and vice versa. It is essential for connecting to the internet via DSL or cable broadband.
调制解调器（调制器‑解调器）将计算机的数字信号转换为模拟信号以便通过电话线或电缆传输，反之亦然。它对于通过 DSL 或电缆宽带连接互联网至关重要。
3. Network Topologies: Star, Bus, and Mesh | 网络拓扑结构：星型、总线型和网状
A star topology has all devices connected to a central switch or hub. If one cable fails, only that device is affected; however, if the central node fails, the whole network goes down. It is easy to add new devices and troubleshoot.
星型拓扑结构中所有设备都连接到中央交换机或集线器。如果一条电缆出现故障，只有该设备受影响；但如果中央节点故障，整个网络都会瘫痪。该结构易于添加新设备和排除故障。
In a bus topology, all devices share a single main cable (the backbone). Data sent by any device travels along the bus, and each device checks if the data is addressed to it. It is cheap and simple but prone to collisions, and a break in the backbone disables the entire network.
在总线拓扑结构中，所有设备共享一条主干电缆。任何设备发送的数据都沿总线传输，每个设备检查数据是否发送给自己。它便宜且简单，但容易发生冲突，并且主干中断会使整个网络瘫痪。
A mesh topology directly connects every device to every other device. This provides excellent redundancy and reliability because data can take alternate paths if one link fails. However, it is expensive and complex to cable, so it is usually used only in critical backbones or wireless mesh networks.
网状拓扑结构将每个设备直接连接到其他每个设备。这提供了出色的冗余和可靠性，因为如果一条链路出现故障，数据可以走替代路径。然而，布线成本高且复杂，因此通常仅用于关键骨干网或无线网状网络。
4. IP Addressing and MAC Addresses | IP 地址与 MAC 地址
An IP (Internet Protocol) address is a logical numerical label assigned to each device on a network. IPv4 addresses are 32‑bit, written as four octets separated by full stops, e.g. 192.168.1.10. IP addresses can be static (fixed) or dynamic (assigned by a DHCP server).
IP（互联网协议）地址是分配给网络上每个设备的逻辑数字标签。IPv4 地址为 32 位，写作由句点分隔的四个八位组，例如 192.168.1.10。IP 地址可以是静态的（固定）或动态的（由 DHCP 服务器分配）。
A MAC (Media Access Control) address is a unique hardware identifier hard‑coded into a device’s NIC by the manufacturer. It is 48‑bit, usually displayed as six hexadecimal pairs separated by colons, e.g. 00:1A:2B:3C:4D:5E. MAC addresses operate at the data link layer and are used for local delivery within the same network segment.
MAC（媒体访问控制）地址是由制造商硬编码进设备网卡的唯一硬件标识符。它是 48 位，通常显示为由冒号分隔的六个十六进制对，例如 00:1A:2B:3C:4D:5E。MAC 地址在数据链路层运行，用于同一网段内的本地投递。
The key difference: IP addresses route data across different networks, while MAC addresses deliver data within the same network. A switch uses MAC addresses; a router uses IP addresses.
关键区别：IP 地址用于跨不同网络路由数据，而 MAC 地址在同一网络内递送数据。交换机使用 MAC 地址；路由器使用 IP 地址。
5. The TCP/IP Protocol Suite | TCP/IP 协议族
The TCP/IP model is a four‑layer conceptual framework that standardises how data is transmitted over networks. The layers are: Application, Transport, Internet (or Network), and Link (or Network Interface).
TCP/IP 模型是一个四层概念框架，标准化了数据在网络上的传输方式。这些层是：应用层、传输层、互联网层（或网络层）和链路层（或网络接口层）。
The Application layer provides protocols that applications use to exchange data, such as HTTP, HTTPS, FTP, and SMTP. The Transport layer manages end‑to‑end communication, using TCP for reliable, ordered delivery or UDP for faster, connectionless communication. The Internet layer handles logical addressing and routing (IP). The Link layer manages the physical transmission of data frames over the medium.
应用层提供应用程序用于交换数据的协议，例如 HTTP、HTTPS、FTP 和 SMTP。传输层管理端到端通信，使用 TCP 实现可靠、有序的传送，或使用 UDP 实现更快、无连接的通信。互联网层处理逻辑寻址和路由（IP）。链路层管理数据帧在介质上的物理传输。
Data is encapsulated as it moves down the layers: application data gets a TCP header, then an IP header, and finally a frame header and trailer. At the destination, encapsulation is reversed.
数据在往下层移动时被封装：应用数据添加 TCP 报头，接着添加 IP 报头，最后添加帧头和帧尾。在目的地，封装被逆向处理。
6. Common Application Layer Protocols: HTTP, HTTPS, FTP, Email | 常见应用层协议：HTTP、HTTPS、FTP、电子邮件
HTTP (Hypertext Transfer Protocol) is used to transfer web pages and associated resources between a web server and a browser. It is a request‑response, stateless protocol that operates on port 80 by default.
HTTP（超文本传输协议）用于在 Web 服务器和浏览器之间传输网页及相关资源。它是一种请求‑响应、无状态协议，默认使用端口 80。
HTTPS (HTTP Secure) is the encrypted version of HTTP. It uses SSL/TLS to encrypt all communication, protecting data from eavesdroppers. HTTPS operates on port 443 and is identifiable by the padlock icon in browsers.
HTTPS（安全超文本传输协议）是 HTTP 的加密版本。它使用 SSL/TLS 加密所有通信，保护数据免遭窃听。HTTPS 使用端口 443，并在浏览器中显示挂锁图标。
FTP (File Transfer Protocol) enables the upload and download of files between a client and a server. It uses two ports: 21 for commands and 20 for data. FTP does not encrypt data by default; secure variants include SFTP and FTPS.
FTP（文件传输协议）允许在客户端和服务器之间上传和下载文件。它使用两个端口：21 用于命令，20 用于数据。FTP 默认不加密数据；安全变体包括 SFTP 和 FTPS。
Email protocols: SMTP (Simple Mail Transfer Protocol) is used to send emails from a client to a server or between servers, typically on port 25. POP3 (Post Office Protocol 3) downloads emails from the server to a single device and often deletes them from the server (port 110). IMAP (Internet Message Access Protocol) allows multiple devices to access and manage emails stored on the server (port 143).
电子邮件协议：SMTP（简单邮件传输协议）用于将电子邮件从客户端发送到服务器或在服务器之间发送，通常使用端口 25。POP3（邮局协议第 3 版）将电子邮件从服务器下载到单一设备，并通常从服务器删除邮件（端口 110）。IMAP（互联网消息访问协议）允许多个设备访问和管理存储在服务器上的电子邮件（端口 143）。
7. Client-Server vs Peer-to-Peer Networks | 客户端-服务器网络与对等网络
In a client‑server network, a powerful central server provides resources, files, and services to multiple client devices. The server manages security, user accounts, backups, and data access. This model is scalable, secure, and easy to administer but requires expensive hardware and specialist software.
在客户端‑服务器网络中，一台强大的中央服务器为多个客户端设备提供资源、文件和服务。服务器管理安全性、用户账户、备份和数据访问。这种模型可扩展、安全且易于管理，但需要昂贵的硬件和专业软件。
A peer‑to‑peer (P2P) network has no central server; each device (peer) can share resources directly with others. Peers act as both clients and servers. P2P networks are cheap and easy to set up but can suffer from security issues and inconsistent file availability, as they depend on which peers are online.
对等（P2P）网络没有中央服务器；每个设备（对等点）可以直接与其他设备共享资源。对等点既充当客户端也充当服务器。P2P 网络便宜且易于搭建，但可能存在安全问题以及文件可用性不一致的问题，因为这取决于哪些对等点在线。
Examples: A school network is typically client‑server, while home file sharing between two laptops is often P2P. Many file‑sharing applications, such as BitTorrent, use a P2P architecture.
示例：学校网络通常是客户端‑服务器，而两台笔记本电脑之间的家庭文件共享通常是 P2P。许多文件共享应用程序，如 BitTorrent，采用 P2P 架构。
8. Network Security Measures: Firewalls, Encryption, Passwords | 网络安全措施：防火墙、加密和密码
A firewall is a hardware or software system that monitors and controls incoming and outgoing network traffic based on a set of security rules. It acts as a barrier between a trusted internal network and an untrusted external network, blocking unauthorised access and filtering malicious packets.
防火墙是硬件或软件系统，根据一组安全规则监视和控制进出网络流量。它在可信内部网络与不可信外部网络之间充当屏障，阻止未授权访问并过滤恶意数据包。
Encryption transforms plaintext into ciphertext using an algorithm and a key, making the data unreadable to anyone without the decryption key. Protocols like SSL/TLS encrypt data in transit, while full‑disk encryption protects stored data. Symmetric and asymmetric encryption are the two main types.
加密使用算法和密钥将明文转换为密文，使没有解密密钥的任何人都无法读取数据。SSL/TLS 等协议加密传输中的数据，而全盘加密则保护存储的数据。对称加密和非对称加密是两种主要类型。
Strong passwords and authentication mechanisms reduce the risk of unauthorised access. Passwords should be complex, long, and unique. Multi‑factor authentication (MFA) adds an extra layer of security, requiring something you know, something you have, or something you are.
强密码和身份验证机制可降低未授权访问的风险。密码应复杂、长度长且唯一。多因素认证（MFA）增加了额外的安全层，要求您所知道的、您拥有的或您本身的因素。
Other measures include regular software updates, anti‑malware software, disabling unused ports, and user access levels.
其他措施包括定期软件更新、反恶意软件、禁用未使用的端口以及用户访问级别设置。
9. Cloud Computing and Storage | 云计算与云存储
Cloud computing delivers computing services—including servers, storage, databases, networking, and software—over the internet on a pay‑as‑you‑go basis. It removes the need for organisations to invest in their own physical infrastructure, offering flexibility and scalability.
云计算通过互联网按需付费方式提供计算服务，包括服务器、存储、数据库、网络和软件。它消除了组织投资自有物理基础设施的需要，提供灵活性和可扩展性。
The three main service models are: IaaS (Infrastructure as a Service), where users rent virtual machines and storage; PaaS (Platform as a Service), which provides a platform to develop and deploy applications; and SaaS (Software as a Service), where ready‑to‑use applications are accessed via a web browser, such as email or office suites.
三种主要服务模式是：IaaS（基础设施即服务），用户租用虚拟机和存储；PaaS（平台即服务），提供开发和部署应用程序的平台；以及 SaaS（软件即服务），通过 Web 浏览器访问现成的应用程序，例如电子邮件或办公套件。
Cloud storage allows users to save files on remote servers and access them from any device with an internet connection. It enables easy sharing and collaboration but raises security concerns if data is not encrypted and privacy policies are weak.
云存储允许用户将文件保存在远程服务器上，并从任何有互联网连接的设备访问它们。它便于共享和协作，但如果数据未加密且隐私政策薄弱，则会引发安全隐患。
10. Factors Affecting Network Performance | 影响网络性能的因素
Bandwidth, measured in bits per second (bps), is the maximum amount of data that can be transmitted over a connection in a given time. Higher bandwidth allows more data to flow, improving the speed of file transfers and streaming. Bandwidth can be shared among users, so congestion reduces the effective speed for each.
带宽以每秒比特数（bps）衡量，是在给定时间内通过连接可以传输的最大数据量。较高的带宽允许更多数据流动，提高文件传输和流媒体播放的速度。带宽可能在用户之间共享，因此拥塞会降低每个人的有效速度。
Latency is the time delay between a data packet being sent and received, often measured in milliseconds (ms). High latency causes noticeable lags in real‑time applications like video calls and online gaming. Latency is increased by long distances, network congestion, and processing delays in routers.
延迟是数据包发送和接收之间的时间延迟，通常以毫秒（ms）为单位。高延迟会导致视频通话和在线游戏等实时应用出现明显滞后。距离远、网络拥塞以及路由器处理延迟都会增加延迟。
Error rate refers to how often data packets become corrupted during transmission. High error rates force packets to be retransmitted, lowering overall throughput. Signal interference, poor‑quality cabling, and wireless obstacles increase error rates.
错误率指数据包在传输过程中被损坏的频率。高错误率迫使数据包重传，降低整体吞吐量。信号干扰、劣质电缆和无线障碍物会增加错误率。
The number of users and devices sharing the same network resources directly impacts performance. As more users stream, download, or browse, the available bandwidth per user decreases, and collision rates in non‑switched environments can rise, slowing down the entire network.
共享相同网络资源的用户和设备数量直接影响性能。随着更多用户串流、下载或浏览，每用户可用带宽下降，在非交换环境中冲突率可能上升，从而减慢整个网络。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导Cancel reply