📚 Fundamentals of Computer Networks | 计算机网络基础
Computer networks form the backbone of modern digital communication, connecting devices across rooms and continents. In the AQA Computer Science specification, mastering the fundamentals of networks is essential for understanding how data is transmitted, how devices are identified, and how security is maintained. This article breaks down every key topic, from network types and topologies to protocols, the TCP/IP stack, IP addressing, and essential hardware, providing clear English explanations paired with Chinese translations to strengthen your bilingual comprehension.
计算机网络是现代数字通信的支柱，将不同房间甚至不同大陆的设备连接在一起。在 AQA 计算机科学考纲中，掌握网络基础知识对于理解数据传输、设备标识以及安全维护至关重要。本文分解每个关键主题，从网络类型和拓扑结构到协议、TCP/IP 协议栈、IP 寻址以及必要的硬件，提供清晰的英文解释并配以中文译文，以增强你的双语理解。
1. What is a Computer Network? | 什么是计算机网络？
A computer network is a collection of interconnected devices that can exchange data and share resources. These devices, often called nodes, include computers, servers, printers, and mobile devices, linked by wired or wireless connections. The main benefits are resource sharing (files, printers, internet access), communication (email, instant messaging), and centralised data management.
计算机网络是一组相互连接的设备，可以交换数据和共享资源。这些设备通常称为节点，包括计算机、服务器、打印机和移动设备，通过有线或无线连接相互链接。主要好处包括资源共享（文件、打印机、互联网接入）、通信（电子邮件、即时消息）以及集中数据管理。
Networks can be classified by their geographical size: Personal Area Networks (PAN) cover a few metres around a person, Local Area Networks (LAN) span a building or campus, and Wide Area Networks (WAN) extend across cities, countries, or globally. A key distinction in AQA specifications is that a LAN uses privately owned infrastructure (e.g., Ethernet cables, Wi‑Fi access points), while a WAN relies on telecommunication links or leased lines from service providers.
网络可以按地理范围分类：个人区域网（PAN）覆盖人周围几米范围，局域网（LAN）跨越一幢建筑或园区，广域网（WAN）延伸跨越城市、国家或全球。AQA 考纲中的一个关键区别是，LAN 使用私有基础设施（如以太网线缆、Wi‑Fi 接入点），而 WAN 依赖电信链路或从服务提供商租用的线路。
2. Network Topologies | 网络拓扑结构
Topology describes the physical or logical arrangement of nodes in a network. The two primary topologies you must know for AQA are the star and the bus. In a star topology, all devices connect individually to a central switch or hub. A failure in one cable only affects that single device, making it robust and easy to troubleshoot. However, if the central device fails, the whole network goes down. It also requires more cable than a bus.
拓扑结构描述了网络中节点的物理或逻辑排列。AQA 要求必须掌握的两种主要拓扑是星型和总线型。在星型拓扑中，所有设备各自连接到中央交换机或集线器。某一条电缆故障只会影响单个设备，使其具有鲁棒性且易于排查。然而，如果中央设备故障，整个网络就会瘫痪。同时它需要的电缆比总线型更多。
In a bus topology, all nodes share a single backbone cable. Terminators are placed at both ends to prevent signal reflection. Data travels along the backbone, and every node checks if the data is addressed to it. Bus topology uses less cable and is simple to set up, but a break in the backbone disables the entire network, and performance degrades with many devices due to data collisions. Modern networks often use a logical bus (Wi‑Fi) but a physical star.
在总线型拓扑中，所有节点共享一条主干电缆。两端装有终端电阻以防止信号反射。数据沿主干传输，每个节点检查数据是否发给自己。总线型拓扑使用较少电缆且设置简单，但主干断裂会使整个网络瘫痪，并且设备数量多时会因数据碰撞导致性能下降。现代网络常采用逻辑总线（Wi‑Fi）但物理星型。
3. Network Protocols and Layering | 网络协议与分层模型
A protocol is a set of rules that governs how data is transmitted and received. Important protocols include HTTP/HTTPS for web browsing, FTP for file transfer, SMTP for sending email, IMAP/POP3 for receiving email, and TCP/IP which underpins much of the internet. Protocols ensure interoperability between different hardware and software systems.
协议是一组控制数据如何发送和接收的规则。重要的协议包括用于网页浏览的 HTTP/HTTPS、用于文件传输的 FTP、用于发送电子邮件的 SMTP、用于接收电子邮件的 IMAP/POP3，以及支撑互联网大部分功能的 TCP/IP。协议确保了不同硬件和软件系统之间的互操作性。
The concept of layering divides network communication into manageable levels. The two most referenced models are the four‑layer TCP/IP stack (Application, Transport, Internet, Link) and the seven‑layer OSI model. AQA focuses on the TCP/IP model. Layering simplifies design, allows technology in one layer to be updated without affecting others, and aids troubleshooting.
分层的概念将网络通信划分为可管理的级别。最常被引用的两个模型是四层 TCP/IP 协议栈（应用层、传输层、互联网层、链路层）和七层 OSI 模型。AQA 着重于 TCP/IP 模型。分层简化了设计，允许某一层中的技术更新而不影响其他层，并有助于故障排除。
| TCP/IP Layer 层 | Function 功能 | Example Protocols 协议示例 |
|---|---|---|
| Application 应用层 | Provides network services to user applications 向用户应用提供网络服务 | HTTP, HTTPS, FTP, SMTP, DNS |
| Transport 传输层 | Manages end‑to‑end communication, error checking, data segmentation 管理端到端通信、错误检查、数据分段 | TCP, UDP |
| Internet 互联网层 | Handles logical addressing and routing (packet delivery) 处理逻辑寻址和路由（数据包传递） | IP (IPv4, IPv6) |
| Link 链路层 | Controls how data is physically sent over hardware (MAC addressing, framing) 控制数据如何通过硬件物理发送（MAC 寻址、帧封装） | Ethernet, Wi‑Fi (802.11) |
4. The TCP/IP Suite: TCP vs UDP | TCP/IP 协议族：TCP 与 UDP 对比
Transmission Control Protocol (TCP) provides a connection‑oriented, reliable data transfer. It breaks data into packets, numbers them, ensures they arrive in order, and requests retransmission of lost packets. This three‑way handshake (SYN, SYN‑ACK, ACK) establishes a session before data flows. TCP is used where accuracy is crucial (web browsing, email, file downloads).
传输控制协议（TCP）提供面向连接的、可靠的数据传输。它将数据分解为数据包，对它们编号，确保它们按顺序到达，并请求重传丢失的数据包。这种三次握手（SYN、SYN‑ACK、ACK）在数据流动之前建立会话。TCP 用于准确性至关重要的场景（网页浏览、电子邮件、文件下载）。
User Datagram Protocol (UDP) is connectionless and does not guarantee delivery or ordering. It sends packets (datagrams) without handshaking, which reduces latency and overhead. UDP is favored for real‑time applications like video streaming, VoIP, online gaming, and DNS queries, where speed is more important than occasional data loss.
用户数据报协议（UDP）是无连接的，不保证传递或顺序。它发送数据报而不进行握手，从而降低延迟和开销。UDP 适用于实时应用，如视频流、VoIP、在线游戏和 DNS 查询，在这些场景中速度比偶尔的数据丢失更重要。
5. IP Addressing and Subnet Masks | IP 寻址与子网掩码
Every device on an IP network requires a unique IP address to identify it. IPv4 addresses are 32‑bit numbers, usually written in dotted decimal notation, e.g., 192.168.1.10. With the growth of the internet, the 4.3 billion IPv4 addresses became insufficient, leading to IPv6, which uses 128‑bit addresses, often expressed as eight groups of four hexadecimal digits, e.g., 2001:0db8:85a3:0000:0000:8a2e:0370:7334.
IP 网络上的每个设备都需要一个唯一的 IP 地址来标识自己。IPv4 地址是 32 位数字，通常以点分十进制记法表示，例如 192.168.1.10。随着互联网的发展，43 亿个 IPv4 地址变得不足，于是产生了 IPv6，它使用 128 位地址，通常表示为八组四位十六进制数字，例如 2001:0db8:85a3:0000:0000:8a2e:0370:7334。
A subnet mask (like 255.255.255.0) distinguishes the network portion of an IP address from the host portion. When a device wants to send data, it applies the subnet mask via a bitwise AND operation to determine whether the destination is on the same local network or must go through a router. Understanding CIDR notation (e.g., /24 meaning the first 24 bits are the network prefix) is vital for AQA exam questions.
子网掩码（例如 255.255.255.0）用来区分 IP 地址中的网络部分和主机部分。当设备要发送数据时，它通过按位与操作应用子网掩码，以判断目的地是在同一本地网络还是必须经过路由器。理解 CIDR 记法（例如 /24 表示前 24 位是网络前缀）对回答 AQA 考题至关重要。
6. MAC Addressing and Switching | MAC 地址与交换
While IP addresses are logical and can change, Media Access Control (MAC) addresses are permanently burned into network interface cards (NIC) by manufacturers. A MAC address is a 48‑bit hexadecimal number, usually shown as six pairs of hex digits (e.g., 00:1A:2B:3C:4D:5E). It is used for communication within the same local network segment.
IP 地址是逻辑的且可以改变，而媒体访问控制（MAC）地址是由制造商永久烧录在网卡（NIC）上的。MAC 地址是一个 48 位十六进制数字，通常显示为六对十六进制数字（例如 00:1A:2B:3C:4D:5E）。它用于在同一个本地网络段内进行通信。
A switch operates at the Link layer and uses MAC addresses to forward frames only to the intended recipient port. It builds a MAC address table by learning source addresses from incoming frames. This contrasts with an older hub, which broadcasts data to all ports. Switches increase network efficiency and security.
交换机工作在链路层，使用 MAC 地址将帧仅转发到目标接收端口。它通过从传入帧中学习源地址来构建 MAC 地址表。这与较早的集线器形成对比，后者将数据广播到所有端口。交换机提高了网络效率和安全性。
7. Network Hardware Essentials | 网络硬件基础
| Device 设备 | OSI/TCP‑IP Layer 分层 | Primary Function 主要功能 |
|---|---|---|
| Router 路由器 | Internet layer (Layer 3) | Connects different networks and forwards packets based on IP addresses. Often integrates modem and firewall in home devices. 连接不同网络并基于 IP 地址转发数据包。家用设备常集成调制解调器和防火墙。 |
| Switch 交换机 | Link layer (Layer 2) | Connects devices within a LAN and uses MAC addresses to forward frames intelligently. 在局域网内连接设备，并使用 MAC 地址智能转发帧。 |
| Modem 调制解调器 | Physical (Layer 1) | Converts digital signals to analogue (and vice versa) for transmission over telephone lines or cable. 将数字信号转换为模拟信号（或反向转换）以便通过电话线或电缆传输。 |
| Wireless Access Point (WAP) 无线接入点 | Link layer | Allows Wi‑Fi devices to connect to a wired network. Manages authentication and encryption. 允许 Wi‑Fi 设备连接到有线网络。管理身份验证和加密。 |
| Network Interface Card (NIC) 网络接口卡 | Link layer | Hardware component inside a device providing the physical connection (Ethernet port or Wi‑Fi chip). Contains a unique MAC address. 设备内部的硬件组件，提供物理连接（以太网口或 Wi‑Fi 芯片）。包含唯一的 MAC 地址。 |
8. Domain Name System (DNS) | 域名系统
Humans find it easier to remember domain names (like tutorhao.com) rather than numerical IP addresses. DNS translates domain names into IP addresses. When you type a URL, your device queries a DNS resolver, which may contact root servers, top‑level domain (TLD) servers, and authoritative name servers to find the corresponding IP address. This process is hierarchical and distributed, ensuring resilience.
人类更容易记住域名（如 tutorhao.com），而不是数字 IP 地址。DNS 将域名转换为 IP 地址。当你输入一个 URL 时，设备会查询 DNS 解析器，解析器可能会联系根服务器、顶级域（TLD）服务器和权威名称服务器，以找到对应的 IP 地址。这一过程是分层的且分布式的，确保了弹性。
DNS caching at various levels (browser, operating system, ISP resolver) speeds up repeated lookups. AQA may ask about the steps of a DNS request and the benefits of a hierarchical system. You should also know that DNS uses UDP on port 53 for queries (with possible fallback to TCP for large responses).
各级别的 DNS 缓存（浏览器、操作系统、ISP 解析器）加速了重复查询。AQA 可能会问到 DNS 请求的步骤以及分层系统的优点。你还应该知道，DNS 查询在 53 端口使用 UDP（对大型响应可能回退到 TCP）。
9. Network Security Threats and Defences | 网络安全威胁与防御
Networks face multiple threats. Malware (viruses, worms, ransomware) can spread through network connections. Phishing attacks trick users into revealing credentials. Denial‑of‑Service (DoS) attacks flood a server with traffic to make it unavailable. Man‑in‑the‑middle attacks intercept data in transit. A secure network combines several countermeasures.
网络面临多种威胁。恶意软件（病毒、蠕虫、勒索软件）可经网络连接传播。钓鱼攻击诱骗用户泄露凭证。拒绝服务（DoS）攻击通过用流量淹没服务器使其不可用。中间人攻击拦截传输中的数据。安全的网络需要结合多种对策。
Defensive strategies include firewalls (hardware or software that filter incoming/outgoing traffic based on rules), encryption (e.g., WPA3 for Wi‑Fi, SSL/TLS for web traffic), strong authentication (passwords, biometrics, multi‑factor authentication), regular software updates, and network policies. Penetration testing and audit trails also help detect vulnerabilities.
防御策略包括防火墙（基于规则过滤入站/出站流量的硬件或软件）、加密（例如 Wi‑Fi 的 WPA3、网络流量的 SSL/TLS）、强身份验证（密码、生物识别、多因素认证）、定期软件更新以及网络策略。渗透测试和审计跟踪也有助于发现漏洞。
10. Data Transmission: Error Detection and Correction | 数据传输：错误检测与纠正
When data travels across networks, interference can corrupt bits. Error detection methods allow the receiver to notice when corruption has occurred. Parity checks add an extra bit to each byte to ensure the number of 1‑bits is even (or odd). A simple parity check can detect an odd number of bit errors but cannot correct them. Checksums involve calculating a numerical sum of data bytes and sending the sum alongside the data; the receiver recalculates and compares.
数据在网络中传输时，干扰可能损坏比特位。错误检测方法允许接收方发现何时发生损坏。奇偶校验为每个字节增加一个额外位，以确保 1 位数量为偶数（或奇数）。简单的奇偶校验可以检测奇数个位错误，但不能纠正它们。校验和涉及计算数据字节的数值和，并将该和与数据一同发送；接收方重新计算并进行比较。
For automatic repeat requests (ARQ), if an error is detected, the receiver discards the packet and requests retransmission. Forward error correction (FEC) adds enough redundant data to allow the receiver to correct some errors without retransmission, used in satellite and deep‑space communications. These concepts tie into TCP's reliability mechanisms.
对于自动重传请求（ARQ），如果检测到错误，接收方丢弃数据包并请求重传。前向纠错（FEC）添加足够的冗余数据，使接收方无需重传就能纠正某些错误，用于卫星和深空通信。这些概念与 TCP 的可靠性机制相关联。
11. The Internet and the World Wide Web | 互联网与万维网
Although often used interchangeably, the Internet is the global network of interconnected computers and devices, while the World Wide Web (WWW) is a collection of webpages and resources accessed via the Internet using HTTP/HTTPS. The Internet also supports other services such as email (SMTP/IMAP), file transfer (FTP), and voice calls (VoIP).
尽管常被混用，但互联网是由相互连接的计算机和设备组成的全球网络，而万维网（WWW）是通过互联网使用 HTTP/HTTPS 访问的网页和资源的集合。互联网还支持其他服务，如电子邮件（SMTP/IMAP）、文件传输（FTP）和语音通话（VoIP）。
Web servers host websites and deliver content in response to client requests. A URL (Uniform Resource Locator) uniquely identifies resources on the web, consisting of protocol, domain name, and path (e.g., https://tutorhao.com/networking). Hyperlinks connect pages, enabling navigation. The creation of the web by Tim Berners‑Lee in 1989 revolutionised information sharing.
Web 服务器托管网站并在响应客户端请求时传送内容。URL（统一资源定位符）唯一地标识网络上的资源，由协议、域名和路径组成（例如 https://tutorhao.com/networking）。超链接将页面连接起来，实现导航。蒂姆·伯纳斯‑李在 1989 年创建万维网，彻底改变了信息共享方式。
12. Summary and Exam Tips | 总结与考试技巧
Consolidate your understanding by drawing labelled diagrams of star and bus topologies, tracing the TCP/IP layers for a typical web page request, and practising subnet mask calculations. Common exam questions ask you to explain the differences between TCP and UDP, describe the role of routers and switches, or outline how DNS works. Use correct technical terminology and give concrete examples from real‑world scenarios to secure high marks.
通过绘制星型和总线型拓扑的标注图、跟踪典型网页请求的 TCP/IP 各层、以及练习子网掩码计算来巩固理解。常见的考题会要求你解释 TCP 与 UDP 的区别、描述路由器和交换机的作用，或概述 DNS 如何工作。使用正确的技术术语并给出真实场景中的具体例子，从而确保高分。
Remember: a "state the difference" question requires a direct comparison; "explain" needs a reason or consequence. When discussing network security, always link a threat to a specific prevention method. Finally, time management during the exam is critical——allocate your minutes according to the marks available.
请记住：'指出区别'类问题需要直接比较；'解释'类需要给出原因或后果。在讨论网络安全时，始终将威胁与具体的预防方法联系起来。最后，考试中的时间管理至关重要——根据可用分数分配你的时间。
Published by TutorHao | AQA Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
或截图后用「扫一扫 → 相册」选择本图