Overview
While the OSI model is the conceptual reference, the TCP/IP model is what the internet actually runs on. It organizes networking into four practical layers. This lesson introduces them and how they correspond to the protocols you use every day.
Learning objectives
- Name the four TCP/IP layers.
- State each layer's responsibility.
- Understand why TCP/IP is the practical standard.
Core concept
The TCP/IP model (named after its two core protocols) has four layers, from top to bottom:
| Layer | Responsibility | Example protocols |
|---|---|---|
| Application | User-facing services and data | HTTP, DNS, SMTP |
| Transport | End-to-end delivery, ports | TCP, UDP |
| Internet | Logical addressing, routing | IP, ICMP |
| Link (Network Access) | Delivery on the local physical network | Ethernet, Wi-Fi |
It is named for TCP (Transmission Control Protocol) and IP (Internet Protocol), the pair at its heart.
How it works
TCP/IP is the real, implemented protocol suite that powers the internet, developed and standardized (through documents called RFCs) so that any compliant device can communicate with any other. Its four layers combine the responsibilities that OSI splits into seven — the TCP/IP Application layer, for instance, covers OSI's Application, Presentation, and Session layers. This makes TCP/IP a leaner, practical description of how networking is actually built.
Cybersecurity relevance
Because real traffic uses TCP/IP, security tools, firewalls, and analysis all work in its terms. When you filter by IP (Internet layer) and port (Transport layer), or inspect an HTTP request (Application layer), you are operating within the TCP/IP model. Knowing it maps directly to hands-on defensive and offensive work.
Common mistakes
- Treating OSI and TCP/IP as competitors — OSI is the teaching model, TCP/IP is the working implementation; both are useful.
- Assuming a one-to-one layer mapping between the two models (it is not exact).
Key takeaways
- The TCP/IP model has four layers: Application, Transport, Internet, and Link.
- It is the practical protocol suite the internet runs on, standardized via RFCs.
- It condenses OSI's seven layers into four and is the model security tools operate in.
Check your understanding
- List the four TCP/IP layers and one protocol at each.
- Why is the TCP/IP model considered the "practical" model compared to OSI?

