TCP/IP Protocol Suite Essentials for IGCSE Edexcel | IGCSE Edexcel TCP/IP 协议族考点精讲

📚 TCP/IP Protocol Suite Essentials for IGCSE Edexcel | IGCSE Edexcel TCP/IP 协议族考点精讲

The TCP/IP protocol suite is the backbone of the internet and modern digital communication. For IGCSE Edexcel Computer Science, mastering the layered structure, key protocols, and packet‑switching mechanisms is essential for both exam success and real‑world understanding. This article breaks down every key point — from the Application layer to routers, IP addressing, and security — with clear explanations and paired bilingual notes.

TCP/IP 协议族是互联网和现代数字通信的支柱。对于 IGCSE Edexcel 计算机科学课程而言，掌握分层结构、关键协议以及分组交换机制不仅是考试拿分的关键，也是理解真实网络的基础。本文将从应用层到路由器、IP 地址和安全机制，逐一拆解考点，并提供清晰的双语对照说明。

1. What is TCP/IP? | 什么是 TCP/IP？

TCP/IP stands for Transmission Control Protocol / Internet Protocol. It is not a single protocol but a full suite of communication rules that allow computers to exchange data across networks. The suite is organised into four conceptual layers, each responsible for different aspects of data transmission. Unlike the seven‑layer OSI model, the TCP/IP model used in the Edexcel IGCSE syllabus contains: Application, Transport, Internet, and Network Interface layers.

TCP/IP 是传输控制协议 / 网际协议的缩写。它不是一个单一的协议，而是一整套通信规则，使计算机能够跨网络交换数据。该协议族按概念分为四层，每层负责数据传输的不同方面。与七层 OSI 模型不同，Edexcel IGCSE 考纲中使用的 TCP/IP 模型包含：应用层、传输层、网际层和网络接口层。

The name TCP/IP highlights the two most important protocols in the suite: TCP ensures reliable, ordered delivery, while IP handles addressing and routing. Together they form a robust system that supports everything from web browsing to email and file transfers. Understanding this framework is the first step to answering questions on network communication.

TCP/IP 这个名称突出了协议族中最重要的两个协议：TCP 保证可靠、有序的传输，IP 负责寻址和路由。两者结合形成一个稳健的系统，支撑着网页浏览、电子邮件和文件传输等应用。理解这个框架是回答网络通信问题的第一步。

2. Layers of the TCP/IP Model | TCP/IP 模型分层

The TCP/IP model consists of four layers. From top to bottom they are: Application, Transport, Internet, and Network Interface. Each layer adds its own header (and sometimes trailer) to the data as it passes down the stack; this process is called encapsulation. At the receiving end, the layers strip off the appropriate headers in reverse order, a process known as de‑encapsulation.

TCP/IP 模型由四层组成。从上到下分别是：应用层、传输层、网际层和网络接口层。当数据沿协议栈向下传递时，每一层会添加自己的头部（有时还有尾部），这个过程称为封装。在接收端，各层按相反顺序剥离对应的头部，这个过程称为解封装。

Understanding these layers helps you explain where specific protocols operate. For example, HTTP works at the Application layer while IP sits at the Internet layer. Exam questions frequently ask you to name the layers and describe the function of each, or to explain how data is prepared for transmission through encapsulation.

理解这些分层有助于你说明特定协议在何处运行。例如，HTTP 工作在应用层，而 IP 位于网际层。考题经常要求你列出各层并描述每层的功能，或者解释数据如何通过封装准备传输。

Summary table:

Layer	Key Protocols	Function
Application	HTTP, HTTPS, FTP, SMTP, POP3	Provides network services to user applications
Transport	TCP, UDP	End‑to‑end communication, reliability, port addressing
Internet	IP, ICMP	Logical addressing, routing, packet forwarding
Network Interface	Ethernet, Wi‑Fi (IEEE 802.11)	Physical transmission of bits over a medium

3. Application Layer | 应用层

The Application layer is the topmost layer that interacts directly with user software. It provides protocols that enable applications such as web browsers and email clients to communicate over a network. Protocols in this layer define the format and meaning of the messages that applications exchange.

应用层是与用户软件直接交互的最顶层。它提供的协议使网络浏览器和电子邮件客户端等应用程序能够通过网络进行通信。该层中的协议定义了应用程序交换消息的格式和含义。

Common Application layer protocols you must know for the exam include: HTTP (Hypertext Transfer Protocol) for web pages, HTTPS (HTTP Secure) which adds SSL/TLS encryption, FTP (File Transfer Protocol) for uploading and downloading files, and SMTP (Simple Mail Transfer Protocol) for sending emails. POP3 and IMAP are also mentioned for retrieving emails. The Application layer relies on the services of the Transport layer beneath it; it does not concern itself with how data actually gets to the destination.

考试中必须了解的应用层常见协议包括：用于网页的 HTTP（超文本传输协议）、添加了 SSL/TLS 加密的 HTTPS（安全 HTTP）、用于上传和下载文件的 FTP（文件传输协议），以及用于发送电子邮件的 SMTP（简单邮件传输协议）。POP3 和 IMAP 则用于检索邮件。应用层依赖其下传输层的服务，并不关心数据是如何实际到达目的地的。

A typical exam question might ask you to state which protocol is used when a user uploads a file to a web server (FTP) or when a secure online payment is made (HTTPS). Be ready to identify the protocol from a scenario.

典型的考题可能会让你说明用户将文件上传到 Web 服务器时使用哪种协议（FTP），或者进行安全的在线支付时使用哪种协议（HTTPS）。请准备好根据场景识别协议。

4. Transport Layer: TCP vs UDP | 传输层：TCP 与 UDP

The Transport layer is responsible for end‑to‑end communication between devices. It uses port numbers to direct data to the correct application. The two main protocols at this layer are TCP (Transmission Control Protocol) and UDP (User Datagram Protocol). TCP provides a connection‑oriented, reliable service: it establishes a connection, numbers packets, acknowledges receipt, and retransmits lost packets. This makes it ideal for web browsing, email, and file downloads where data integrity is crucial.

传输层负责设备之间的端到端通信。它利用端口号将数据引导到正确的应用程序。该层的两个主要协议是 TCP（传输控制协议）和 UDP（用户数据报协议）。TCP 提供面向连接的可靠服务：它先建立连接，对数据包编号，确认接收，并重发丢失的数据包。这使其非常适合网页浏览、电子邮件和文件下载等对数据完整性要求高的场景。

UDP, on the other hand, is connectionless and does not guarantee delivery or order. Packets may be lost, duplicated, or arrive out of sequence. However, UDP is faster and has lower overhead, making it suitable for real‑time applications like live video streaming, online gaming, and VoIP, where occasional data loss is acceptable but delay is not.

相比之下，UDP 是无连接的，不保证交付或顺序。数据包可能会丢失、重复或乱序到达。但 UDP 速度更快、开销更低，适合实时应用，如视频直播、在线游戏和 VoIP，在这些场景中偶尔的数据丢失可以接受，但延迟不可接受。

Exam questions often ask you to compare TCP and UDP, giving reasons for choosing one over the other in a given situation. Remember that TCP uses a three‑way handshake (SYN, SYN‑ACK, ACK) to establish a connection, while UDP just sends data without any setup.

考题经常要求比较 TCP 和 UDP，并给出在特定场景下选择其中一个的理由。请记住，TCP 使用三次握手（SYN，SYN‑ACK，ACK）来建立连接，而 UDP 无需建立连接，直接发送数据。

5. Internet Layer and IP Addressing | 网际层与 IP 寻址

The Internet layer (sometimes called the Network layer in other models) is responsible for logical addressing and routing. Its core protocol is IP (Internet Protocol), which adds a header containing the source and destination IP addresses to each data packet. This layer makes best‑effort delivery; it does not guarantee that packets will arrive or be in order — that job is left to TCP at the Transport layer.

网际层（在其他模型中有时称为网络层）负责逻辑寻址和路由。其核心协议是 IP（网际协议），它为每个数据包添加包含源 IP 地址和目的 IP 地址的头部。该层提供尽力而为的交付，不保证数据包一定到达或顺序正确——这个任务留给传输层的 TCP 完成。

IP addresses are numerical labels assigned to every device on a network. They allow routers to forward packets across interconnected networks. The Internet layer also includes protocols like ICMP (Internet Control Message Protocol), used by utilities such as ping to test connectivity.

IP 地址是分配给网络上每台设备的数字标签，使路由器能够在互联网络之间转发数据包。网际层还包括 ICMP（互联网控制报文协议）等协议，用于 ping 等工具测试连通性。

It is important to distinguish between public and private IP addresses. Private addresses (e.g., 192.168.x.x, 10.x.x.x) are used inside local networks and are not routable on the public internet.

区分公有 IP 地址和私有 IP 地址很重要。私有地址（如 192.168.x.x、10.x.x.x）用于局域网内部，在公共互联网上不可路由。

6. IPv4 and IPv6 Addresses | IPv4 与 IPv6 地址

IPv4 is the most widely used version of IP. An IPv4 address is a 32‑bit number, typically written in dotted decimal notation as four octets, e.g., 192.168.1.10. This provides about 4.3 billion unique addresses. However, due to the explosion of internet‑connected devices, IPv4 addresses have been exhausted. Network Address Translation (NAT) helps by allowing multiple devices to share a single public IPv4 address, but it is a temporary solution.

IPv4 是使用最广泛的 IP 版本。IPv4 地址是一个 32 位数字，通常以点分十进制表示法写成四个字节的形式，例如 192.168.1.10。这提供了约 43 亿个唯一地址。然而，由于联网设备的激增，IPv4 地址已经耗尽。网络地址转换（NAT）允许多台设备共享一个公有 IPv4 地址，但这只是一个临时解决方案。

IPv6 was developed to solve this problem. An IPv6 address is 128 bits long, typically written as eight groups of four hexadecimal digits, e.g., 2001:0db8:85a3:0000:0000:8a2e:0370:7334. This allows for an almost unimaginable number of unique addresses. IPv6 also includes built‑in security features (IPsec) and more efficient routing. The Edexcel syllabus expects you to understand the need for IPv6 and be able to recognise an IPv6 address format.

IPv6 正是为解决这一问题而开发的。IPv6 地址长度为 128 位，通常写成八组四位十六进制数字，例如 2001:0db8:85a3:0000:0000:8a2e:0370:7334。这提供了几乎难以想象的大量唯一地址。IPv6 还内置了安全特性（IPsec）和更高效的路由。Edexcel 考纲要求你理解对 IPv6 的需求，并能识别 IPv6 地址的格式。

Subnet masks are also part of the Internet layer. A subnet mask (e.g., 255.255.255.0) is used to determine which part of an IP address identifies the network and which part identifies the host. Logical AND operation between IP address and subnet mask gives the network address.

子网掩码也是网际层的一部分。子网掩码（例如 255.255.255.0）用于区分 IP 地址中哪部分是网络标识，哪部分是主机标识。IP 地址与子网掩码进行逻辑“与”运算就得到网络地址。

7. Packet Switching and Routing | 分组交换与路由

Data sent over a TCP/IP network is broken into small chunks called packets. Each packet contains a header with source and destination IP addresses, a sequence number, and a payload of actual data. Packet switching is the method by which these packets are routed independently through the network. They may take different paths to the destination, and they are reassembled into the original message by the Transport layer at the receiver.

通过 TCP/IP 网络发送的数据被分割成称为“数据包”的小块。每个数据包都包含一个报头，其中有源 IP 地址、目的 IP 地址、序列号以及有效载荷（实际数据）。分组交换是指这些数据包在网络中独立路由的方法。它们可能经由不同路径到达目的地，然后由接收端的传输层重新组装成原始消息。

Routers are the key devices that perform packet switching. A router examines the destination IP address of each incoming packet and consults its routing table to decide the best next hop. This flexible, decentralised approach makes the internet robust — if one path fails, packets can be rerouted dynamically.

路由器是执行分组交换的关键设备。路由器检查每个传入数据包的目的 IP 地址，并查阅其路由表以决定最佳下一跳。这种灵活的、去中心化的方法使互联网具有很强的鲁棒性——如果一条路径出现故障，数据包可以动态重路由。

Exam questions may ask you to describe the structure of a packet (showing fields like source address, destination address, sequence number, data) and explain why packet switching is more efficient than circuit switching for computer networks.

考题可能会要求你描述数据包的结构（展示源地址、目的地址、序列号、数据等字段），并解释为什么在计算机网络中分组交换比电路交换更高效。

8. Protocols in Action: HTTP, FTP, SMTP | 协议应用实例：HTTP、FTP、SMTP

Let’s link the Application layer protocols to real‑world usage. HTTP is a request‑response protocol: a client (browser) sends an HTTP GET request to a server, which replies with the requested web page. HTTPS wraps HTTP inside a TLS (Transport Layer Security) encrypted tunnel, indicated by the padlock icon in browsers. It uses port 443 by default, while HTTP uses port 80.

让我们将应用层协议与实际用途联系起来。HTTP 是一种请求‑响应协议：客户端（浏览器）向服务器发送 HTTP GET 请求，服务器回复所请求的网页。HTTPS 将 HTTP 封装在 TLS（传输层安全）加密隧道中，浏览器中的挂锁图标即表示此协议。HTTPS 默认使用 443 端口，而 HTTP 使用 80 端口。

FTP (File Transfer Protocol) uses two separate connections: port 21 for control commands and port 20 for data transfer. It allows users to upload and download files from an FTP server. Although still used, FTP lacks encryption; SFTP or FTPS are secure alternatives.

FTP（文件传输协议）使用两个独立的连接：端口 21 用于控制命令，端口 20 用于数据传输。它允许用户从 FTP 服务器上传和下载文件。尽管仍在使用，FTP 缺乏加密，SFTP 或 FTPS 是安全的替代方案。

Email delivery involves several protocols: SMTP (port 25 or 587) pushes emails from client to server and between servers. POP3 (port 110) downloads emails to a single device and typically deletes them from the server, while IMAP (port 143) allows emails to be managed on the server, keeping devices synchronised. Secure versions use SSL/TLS (e.g., SMTPS on port 465, IMAPS on port 993).

电子邮件传递涉及多个协议：SMTP（端口 25 或 587）将邮件从客户端推送到服务器以及在服务器之间传送。POP3（端口 110）将邮件下载到单个设备，并通常会将其从服务器上删除，而 IMAP（端口 143）则允许在服务器上管理邮件，保持多设备同步。安全版本使用 SSL/TLS（例如，端口 465 上的 SMTPS，端口 993 上的 IMAPS）。

9. The Role of Routers and Gateways | 路由器与网关的作用

A router is a networking device that forwards data packets between computer networks. It operates primarily at the Internet layer (Layer 3) and uses IP addresses to determine the best path for each packet. Routers maintain routing tables that can be static (manually configured) or dynamic (updated automatically using routing protocols).

路由器是一种在计算机网络之间转发数据包的网络设备。它主要在网际层（第 3 层）运行，利用 IP 地址为每个数据包确定最佳路径。路由器维护的路由表可以是静态的（手动配置）或动态的（通过路由协议自动更新）。

A gateway, in contrast, is a node that connects two networks that may use different protocols. In home networks, the router often acts as the default gateway, linking the local network to the internet. The gateway’s IP address is the destination for packets destined outside the local subnet.

相比之下，网关是连接两个可能使用不同协议的网络的节点。在家庭网络中，路由器通常充当默认网关，将局域网连接到互联网。网关的 IP 地址是发往本地子网外部的数据包的目的地。

You might be asked to explain how a router makes forwarding decisions or what the purpose of a default gateway is. Remember that a router strips the Network Interface layer frame, inspects the IP header, and then re‑encapsulates the packet for the outgoing interface.

你可能会被问到路由器如何做出转发决策，或者默认网关的用途是什么。请记住，路由器会剥离网络接口层的帧，检查 IP 报头，然后为出站接口重新封装数据包。

10. Security Considerations: Firewalls and Encryption | 安全考量：防火墙与加密

Network security is a recurring theme in the syllabus. A firewall is a hardware or software system that monitors incoming and outgoing traffic and blocks or permits data based on predefined security rules. Firewalls can operate at different layers; a packet‑filtering firewall inspects IP headers, while an application‑layer firewall can filter based on content.

网络安全是考纲中反复出现的主题。防火墙是一种硬件或软件系统，用于监控传入和传出的流量，并根据预定义的安全规则阻止或允许数据通过。防火墙可以在不同层运行；包过滤防火墙检查 IP 报头，而应用层防火墙可以根据内容进行过滤。

Encryption is essential for protecting data confidentiality. SSL/TLS is used to encrypt HTTP traffic (HTTPS), email, and other application data. At the Internet layer, IPsec (used extensively in IPv6) can encrypt and authenticate all IP traffic. Mentioning that encryption converts plaintext into ciphertext using algorithms and keys will strengthen your answers.

加密对于保护数据机密性至关重要。SSL/TLS 用于加密 HTTP 流量（HTTPS）、电子邮件和其他应用数据。在网际层，IPsec（在 IPv6 中广泛使用）可以加密并认证所有 IP 流量。在回答时提到加密使用算法和密钥将明文转换为密文，能提升答案的质量。

A typical question might ask you to explain how HTTPS keeps data secure when a user enters credit card details online. You would describe the establishment of an encrypted TLS session after the browser and server perform a handshake, ensuring that all subsequent data is unreadable by eavesdroppers.

典型的考题可能会要求你解释用户在线输入信用卡信息时 HTTPS 如何保护数据安全。你应该描述浏览器和服务器进行握手后建立加密的 TLS 会话，确保后续所有数据都无法被窃听者读取。

11. Common Exam Questions on TCP/IP | TCP/IP 常见考题分析

Edexcel IGCSE papers frequently feature TCP/IP in a variety of formats. You might see:

Label‑the‑layer diagrams: Given a stack, identify the layer and an example protocol.
Scenario‑based protocol selection: “A user is streaming a live video. Which transport protocol is most suitable and why?” (Answer: UDP because of low latency.)
Data encapsulation steps: Describe what happens as data passes through the layers, mentioning the addition of a TCP header at Transport, an IP header at Internet, and a frame header/trailer at Network Interface.
IPv4 vs IPv6 comparison: Tabulate differences in address length, notation, and number of addresses.
Security threats and prevention: Explain how a firewall can prevent unauthorised access, or how encryption secures data in transit.

Edexcel IGCSE 试卷中经常以多种形式考查 TCP/IP。你可能会遇到：

分层标注图：给一个协议栈，标出各层及示例协议。
基于场景的协议选择：“某用户正在直播视频。哪种传输协议最合适？为什么？”（答案：UDP，因为延迟低。）
数据封装步骤：描述数据在各层之间传递时发生的过程，提及在传输层添加 TCP 报头、网际层添加 IP 报头、网络接口层添加帧头和帧尾。
IPv4 与 IPv6 比较：用表格列出地址长度、表示法和地址数量等方面的差异。
安全威胁与防范：解释防火墙如何防止未经授权的访问，或加密如何保护传输中的数据。

To score top marks, always use correct technical vocabulary (e.g., encapsulation, port number, IP address, packet) and structure your answers clearly. Practice drawing and labelling the four‑layer TCP/IP model from memory.

要拿到高分，务必使用正确的专业术语（如封装、端口号、IP 地址、数据包），并清晰地组织答案。练习凭记忆画出并标注 TCP/IP 四层模型。

12. Revision Tips and Summary | 复习技巧与总结

Focus on these essentials:

Be able to draw and label the TCP/IP four‑layer model with an example protocol for each layer.
Memorise the differences between TCP and UDP, including use‑cases and key features (handshake, reliability, speed).
Understand IP addressing: dotted decimal for IPv4, colon‑separated hexadecimal for IPv6, and the role of subnet masks.
Explain packet switching and how a router uses an IP address to forward data.
Connect application protocols to their ports: HTTP (80), HTTPS (443), FTP (21 control), SMTP (25/587), POP3 (110), IMAP (143).
Describe how encryption (TLS/SSL) works with HTTPS to secure web traffic.
Relate network components (NIC, switch, router, firewall) to the TCP/IP layers they operate on.

复习要点：

能够画出并标注 TCP/IP 四层模型，并为每层举出一个协议例子。
记住 TCP 和 UDP 的区别，包括使用场景和关键特性（握手、可靠性、速度）。
理解 IP 寻址：IPv4 的点分十进制表示法，IPv6 的冒号分隔十六进制表示法，以及子网掩码的作用。
解释分组交换以及路由器如何利用 IP 地址转发数据。
将应用协议与其端口号对应起来：HTTP (80)、HTTPS (443)、FTP (21 控制)、SMTP (25/587)、POP3 (110)、IMAP (143)。
描述加密（TLS/SSL）如何与 HTTPS 协同工作以保护 Web 流量安全。
将网络组件（网卡、交换机、路由器、防火墙）与其工作的 TCP/IP 层关联起来。

TCP/IP is a repeating theme that underpins nearly every networking question on the IGCSE Edexcel paper. By building a solid mental model of the four layers and practising application scenarios, you will be well prepared for any question that comes your way.

TCP/IP 是 IGCSE Edexcel 试卷中几乎每道网络题目都会涉及的核心主题。通过构建扎实的四层模型思维并勤加练习应用场景，你将能够从容应对任何相关问题。

Published by TutorHao | IGCSE Computer Science Revision Series | aleveler.com

更多咨询请联系16621398022（同微信）

TCP/IP Protocol Suite Essentials for IGCSE Edexcel | IGCSE Edexcel TCP/IP 协议族考点精讲