📚 TCP/IP Essentials for GCSE WJEC Computer Science | GCSE WJEC 计算机：TCP/IP 考点精讲
The TCP/IP protocol suite is the foundation of all modern internet communication. For your GCSE WJEC Computer Science exam, you must understand how data is packaged, addressed, transmitted, and reassembled across networks. This article breaks down every key concept you need to master, from the four-layer model to the differences between TCP and UDP, and from IP addressing to common application protocols. Let’s dive into the world of packets, ports, and protocols.
TCP/IP 协议族是所有现代互联网通信的基础。在 GCSE WJEC 计算机科学考试中，你需要理解数据是如何在网络中打包、寻址、传输和重组的。本文将为你拆解每一个必须掌握的核心概念，从四层模型到 TCP 与 UDP 的区别，从 IP 寻址到常见的应用协议。让我们深入数据包、端口和协议的世界。
1. The TCP/IP Model | TCP/IP 模型
The TCP/IP model is a simplified, four-layer framework that standardises how data is transmitted over networks. Unlike the seven-layer OSI model, it groups functions into Application, Transport, Internet, and Network Access layers. Each layer adds its own header (and sometimes trailer) to the data as it passes down the stack, a process called encapsulation. When the data arrives at the destination, these headers are removed in reverse order (decapsulation).
TCP/IP 模型是一个简化的四层框架，它规范了数据如何在网络上传输。与七层 OSI 模型不同，它将功能划分成应用层、传输层、互联网层和网络接入层。数据沿着协议栈向下传递时，每一层都会添加自己的头部（有时还有尾部），这个过程称为封装。当数据到达目的地时，这些头部会按相反的顺序被拆除（解封装）。
2. The Four Layers in Detail | 四层详解
The four layers work together to ensure reliable end-to-end communication. The Application layer interacts with user software, the Transport layer manages data splitting and reliability, the Internet layer handles logical addressing and routing, and the Network Access layer deals with physical hardware and local network delivery. Remember the top-down order: Application → Transport → Internet → Network Access.
这四层协同合作以确保可靠的端到端通信。应用层与用户软件交互，传输层负责将数据分段并确保可靠性，互联网层处理逻辑寻址和路由选择，网络接入层则负责物理硬件和本地网络的交付。请记住自上而下的顺序：应用层 → 传输层 → 互联网层 → 网络接入层。
At the sending device, data originates at the Application layer and travels downwards, each layer adding control information. At the receiving device, the data travels upwards, each layer interpreting its corresponding header. This layered approach makes network design modular and troubleshooting easier.
在发送端设备上，数据从应用层向下传递，每一层都添加控制信息。在接收端设备上，数据向上传递，每一层解析与自己对应的头部。这种分层方法使网络设计模块化，也便于故障排除。
3. Application Layer | 应用层
The Application layer is the topmost layer and the one users interact with directly through software like web browsers, email clients, and file transfer utilities. Protocols at this layer define the format and meaning of the messages exchanged. Common examples include HTTP/HTTPS for web pages, FTP for file transfers, SMTP for sending emails, and DNS for converting domain names to IP addresses.
应用层是最顶层，用户通过 Web 浏览器、电子邮件客户端和文件传输工具等软件直接与之交互。这一层的协议定义了所交换消息的格式和含义。常见的例子包括：用于网页的 HTTP/HTTPS，用于文件传输的 FTP，用于发送电子邮件的 SMTP，以及用于将域名转换为 IP 地址的 DNS。
It is important to note that the Application layer does not include the software application itself; rather, it provides the services those applications use. For instance, a web browser is a piece of software that uses the HTTP protocol at the Application layer to request and receive web pages.
必须注意，应用层并不包括软件应用本身，而是提供这些应用所使用的服务。例如，Web 浏览器是一个软件，它在应用层使用 HTTP 协议来请求和接收网页。
4. Transport Layer: TCP vs UDP | 传输层：TCP 与 UDP 对比
The Transport layer is responsible for end-to-end communication between processes running on different hosts. It uses port numbers to identify specific services. The two main protocols here are TCP (Transmission Control Protocol) and UDP (User Datagram Protocol). TCP is connection-oriented and ensures reliable, ordered delivery with error checking and flow control. UDP is connectionless, faster, but offers no guarantee of delivery – ideal for live streaming or online gaming where occasional data loss is tolerable.
传输层负责不同主机上运行的进程之间的端到端通信。它使用端口号来标识具体的服务。这里的两大主要协议是 TCP（传输控制协议）和 UDP（用户数据报协议）。TCP 是面向连接的，通过错误校验和流量控制来保证可靠、有序的交付。UDP 则无连接、速度更快，但不保证交付——非常适合在线直播或在线游戏这类可以容忍偶尔数据丢失的场景。
| Feature | TCP | UDP |
|---|---|---|
| Connection | Connection-oriented | Connectionless |
| Reliability | Guaranteed delivery | No guarantee |
| Ordering | Packets are re‑ordered | Order not maintained |
| Speed | Slower due to acknowledgements | Faster, minimal overhead |
| Typical use | Web browsing, email, file transfer | Streaming, VoIP, gaming |
5. Internet Layer: IP Addressing | 互联网层：IP 寻址
The Internet layer (sometimes called the Network layer) provides logical addressing and routing. Every device on a TCP/IP network needs a unique IP address. IPv4 uses 32‑bit addresses, typically written in dotted‑decimal notation (e.g., 192.168.1.10). IPv6 uses 128‑bit addresses to solve the address exhaustion problem, written as eight groups of four hexadecimal digits (e.g., 2001:0db8:85a3:0000:0000:8a2e:0370:7334).
互联网层（有时也称为网络层）提供逻辑寻址和路由功能。TCP/IP 网络上的每一台设备都需要一个唯一的 IP 地址。IPv4 使用 32 位地址，通常用点分十进制记法书写（例如 192.168.1.10）。IPv6 使用 128 位地址以解决地址枯竭问题，书写为八组四位十六进制数（例如 2001:0db8:85a3:0000:0000:8a2e:0370:7334）。
Routers operate at this layer. They examine the destination IP address of each packet and consult a routing table to decide the best next hop toward the destination. This packet‑switching process allows data to travel across multiple heterogeneous networks.
路由器在这一层工作。它们检查每个数据包的目的 IP 地址，并查询路由表来决定通往目的地的最佳下一跳。这种包交换过程使数据能够穿越多个异构网络。
6. Packet Structure and Encapsulation | 数据包结构与封装
When data is sent, each layer adds its own header, creating a nested structure. A typical TCP/IP packet contains: an Application layer header (e.g., HTTP GET), a TCP header (with source and destination ports, sequence numbers), an IP header (with source and destination IP addresses), and a Network Access header and trailer (with MAC addresses and error‑checking CRC). This entire unit is often called a frame at the network access layer.
发送数据时，每一层都会添加自己的头部，形成一个嵌套结构。一个典型的 TCP/IP 数据包包含：应用层头部（如 HTTP GET）、TCP 头部（包含源端口、目的端口、序列号）、IP 头部（包含源 IP 地址和目的 IP 地址），以及网络接入层头部和尾部（包含 MAC 地址和用以检查错误的 CRC）。这整个单元在网络接入层通常被称为帧。
Encapsulation ensures that intermediate devices, like routers, only need to read the headers relevant to their operation. For example, a router only examines the IP header to forward the packet; it does not need to open the TCP or application headers. This separation of concerns is one of the key strengths of the TCP/IP model.
封装确保中间设备（如路由器）只需读取与其运作相关的头部。例如，路由器只需检查 IP 头部来转发数据包，而不需要打开 TCP 或应用层头部。这种关注点分离是 TCP/IP 模型的关键优势之一。
7. Network Access Layer and MAC Addresses | 网络接入层与 MAC 地址
The Network Access layer (also called the Link layer) is responsible for delivering frames between two devices on the same local network. It uses physical hardware addresses called MAC (Media Access Control) addresses. A MAC address is a 48‑bit identifier, usually written as six pairs of hexadecimal digits (e.g., 00:1A:2B:3C:4D:5E), and is embedded in the network interface card (NIC) by the manufacturer.
网络接入层（也称链路层）负责在同一本地网络的两台设备之间传递帧。它使用称为 MAC（媒体访问控制）地址的物理硬件地址。MAC 地址是一个 48 位的标识符，通常写成六对十六进制数字（例如 00:1A:2B:3C:4D:5E），由制造商嵌入在网卡（NIC）中。
Protocols such as Ethernet and Wi‑Fi operate at this layer. When a device sends broadcast frames or needs to resolve an IP address to a MAC address, it uses the Address Resolution Protocol (ARP). Understanding that IP addresses are routeable across networks while MAC addresses are only locally significant is crucial for the exam.
以太网和 Wi‑Fi 等协议都在这一层工作。当设备发送广播帧或需要将 IP 地址解析为 MAC 地址时，它会使用地址解析协议（ARP）。理解 IP 地址可以跨网络路由而 MAC 地址仅在本地有意义，这一点对考试至关重要。
8. Common Application Protocols | 常见应用层协议
Your exam will expect you to know several key protocols and their default port numbers. HTTP (Hypertext Transfer Protocol) uses port 80 and transfers unencrypted web pages, while HTTPS (HTTP Secure) uses port 443 and adds SSL/TLS encryption. FTP (File Transfer Protocol) uses ports 20 and 21 for transferring files. SMTP (Simple Mail Transfer Protocol) uses port 25 to send emails, and POP3 (port 110) or IMAP (port 143) are used to retrieve them.
考试要求你了解几个关键协议及其默认端口号。HTTP（超文本传输协议）使用 80 端口传输未加密的网页，而 HTTPS（安全 HTTP）使用 443 端口并添加 SSL/TLS 加密。FTP（文件传输协议）使用 20 和 21 端口传输文件。SMTP（简单邮件传输协议）使用 25 端口发送电子邮件，POP3（110 端口）或 IMAP（143 端口）则用于接收邮件。
These protocols define the rules for requesting and delivering data. For example, when you type a URL into a browser, an HTTP GET request is sent to the web server, which responds with the page content. Knowing which protocol is used in a given scenario shows the examiner you can apply your knowledge to real‑world networking.
这些协议定义了请求和交付数据的规则。例如，当你在浏览器中输入一个网址时，一条 HTTP GET 请求会发送到 Web 服务器，服务器则回应页面内容。知道在特定场景中使用哪种协议，可以向考官展示你能够将知识应用到现实网络环境中。
9. DNS: The Internet’s Phonebook | DNS：互联网的电话簿
The Domain Name System (DNS) converts human‑friendly domain names (like http://www.example.com) into IP addresses that computers use to route traffic. Without DNS, you would have to remember the IP address of every website you visit. DNS works by querying a hierarchy of servers – resolvers, root servers, TLD servers, and authoritative nameservers – until the correct IP address is found.
域名系统（DNS）将人类易于记忆的域名（如 http://www.example.com）转换成计算机用于路由流量的 IP 地址。如果没有 DNS，你就必须记住你访问的每个网站的 IP 地址。DNS 通过查询一个由解析器、根服务器、顶级域服务器和权威名称服务器组成的层级体系，直到找到正确的 IP 地址。
DNS primarily uses UDP port 53 for queries because of its speed, but it can fall back to TCP for large responses or zone transfers. This protocol is an excellent illustration of how the Application layer relies on services from the lower layers without needing to know the details of routing or physical delivery.
DNS 查询主要使用 UDP 端口 53 以获得较快的速度，但对于大型回应或区域传送，它可以退回到 TCP。这个协议完美地展示了应用层如何依赖下层服务，而无需知道路由或物理交付的细节。
10. Network Security in TCP/IP | TCP/IP 中的网络安全
Security measures are integrated into several layers. HTTPS encrypts application data using Transport Layer Security (TLS), which operates between the Application and Transport layers. Firewalls operate mainly at the Internet and Transport layers, examining IP headers and port numbers to filter packets based on predefined rules. A firewall can block incoming traffic on certain ports to protect internal services.
安全措施已集成到若干层次之中。HTTPS 使用传输层安全（TLS）协议加密应用数据，TLS 工作在应用层和传输层之间。防火墙主要在互联网层和传输层运行，检查 IP 头部和端口号以根据预定义规则过滤数据包。防火墙可以阻止某些端口的入站流量，以保护内部服务。
Encryption can also be applied to wireless networks at the Network Access layer (e.g., WPA2/WPA3). Understanding that security is not a single layer but is distributed across the stack will help you appreciate how TCP/IP networks protect data confidentiality, integrity, and availability.
加密也可以应用于网络接入层的无线网络（例如 WPA2/WPA3）。理解安全并非集中于单一层次、而是分布在协议栈中，将有助于你理解 TCP/IP 网络如何保护数据的机密性、完整性和可用性。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导