How BitTorrent Works: Peer-to-Peer Networks Explained

The internet uses a hierarchical addressing system to route data among billions of devices. IP addresses (four numbers separated by dots) uniquely identify each computer, functioning like physical addresses in a city. Port numbers (thousands of numerical slots) allow multiple applications to run simultaneously on one computer, routing incoming data to the correct program. Together, IP addresses and ports form complete network addresses (e.g., 192.168.1.1:80), enabling precise data delivery. This system, combined with the client-server architecture where clients request services and servers provide them, forms the foundation of all internet communication.

This comprehensive section covers the foundational concepts of network communication. IP addresses consist of four octets (e.g., 192.168.1.1) with a subnet mask (e.g., 255.255.255.0) indicating network vs. host portions. DHCP servers automatically assign IP addresses from a pool to network devices. Private IP address ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) are reserved for internal networks and are not routable on the public internet. Port forwarding enables external internet users to access internal network services by mapping external IP:port to internal device IP:port. Since routers can only forward one port to one destination, multiple services require different ports. NAT (Network Address Translation) translates private internal IP addresses to a public external IP, allowing multiple devices to share a single internet connection.

The Internet Protocol (IP) provides a universal addressing system that enables data forwarding between different networks; IP addresses are 32-bit identifiers (with IPv6 using 128 bits) that routers use to determine the best path for packet delivery, and routers employ forwarding tables with prefix-based entries (using CIDR notation like 172.17/16) to efficiently route packets by matching the longest prefix of the destination address, rather than maintaining individual entries for each of the 4 billion possible IPv4 addresses.

Port forwarding allows a home computer with a private IP address to be accessible from the Internet. By configuring a home router to forward incoming traffic on specific ports (like port 80 for HTTP) to the private IP address of the home computer, external users can access the website. TCP/IP governs how data is transmitted on the Internet, with IP providing addressing conventions and TCP governing how data moves between points. Port numbers identify different services: HTTP uses port 80, HTTPS uses port 443, and email uses port 25. Using non-standard ports is problematic because many networks (hotels, campuses) block anything besides 80 and 443.

IP addresses identify machines on the internet, while port numbers specify particular services or applications running on those machines. Common ports include 80 for HTTP and 443 for HTTPS. Port forwarding directs incoming traffic from specific ports to designated internal devices. Without port forwarding, routers drop unfamiliar traffic. By configuring port forwarding rules, you instruct your router to forward traffic arriving at specific ports to particular computers on your local network, enabling remote access to services like SSH servers or ground control stations.

TCP (Transmission Control Protocol) is a connection-oriented transport layer protocol that ensures reliable data delivery through three key mechanisms: checksums for error detection, timers for retransmitting lost packets, and sequence numbers for tracking individual bytes; it uses cumulative acknowledgment and sliding window control for flow management. UDP (User Datagram Protocol) is a connectionless protocol that sends data without establishing a connection first, offering faster transmission but no reliability guarantees, making it suitable for applications like multimedia streaming and DNS where some packet loss is acceptable.

TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) are the two primary transport layer protocols that enable communication between applications over a network; TCP is connection-oriented, reliable, and provides error recovery, flow control, and ordered data transfer through mechanisms like the three-way handshake and windowing, making it suitable for applications requiring guaranteed delivery such as file transfers and email; UDP is connectionless, lightweight, and unreliable, offering faster transmission without error checking or retransmission, making it ideal for real-time applications like voice and video streaming where occasional data loss is acceptable to maintain low latency.

TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) are the two main transport layer protocols in the OSI model; TCP is a reliable, connection-oriented protocol that establishes a three-way handshake (SYN, SYN-ACK, ACK) before transmitting data, uses sequence numbers for ordering, implements flow control to prevent buffer overflow, and performs automatic retransmission of lost packets, making it ideal for applications requiring data integrity like file transfers; whereas UDP is an unreliable, connectionless protocol that sends data immediately without establishing a connection, lacks sequence numbering and retransmission capabilities, and offers lower overhead with faster transmission, making it suitable for real-time applications like VoIP where timely delivery matters more than perfect accuracy.

The Transport Layer ensures reliable data delivery through three key functions: Segmentation (dividing data into smaller units with sequence numbers and port numbers), Flow Control (managing data transmission speed), and Error Control (using ARQ scheme for retransmitting corrupted data). The two main protocols are TCP (Transmission Control Protocol) and UDP (User Datagram Protocol). TCP is connection-oriented and reliable, providing data sequencing and error recovery, used for web browsing and email. UDP is connectionless and faster but unreliable, used for streaming and online games.

The transport layer in networking includes two main protocols: TCP (Transmission Control Protocol), which is connection-oriented and reliable, using sequence numbers, acknowledgment numbers, and a three-way handshake (SYN, ACK, FIN) to ensure data delivery and flow control through window sizing; and UDP (User Datagram Protocol), which is connectionless and lightweight, lacking reliability features but offering faster transmission for real-time applications like video streaming where occasional data loss is acceptable.

Cryptographic hash functions are deterministic, public functions that map arbitrary-length strings to fixed-length outputs (typically 160-256 bits), and they must satisfy several critical security properties: one-wayness (pre-image resistance, making it computationally infeasible to find an input given its hash output), collision resistance (making it impossible to find two distinct inputs with the same hash), target collision resistance (a weaker form of collision resistance where given a specific input, finding another input with the same hash is infeasible), and non-malleability (preventing derivation of related inputs from the hash output). These properties enable important applications including password protection (storing hashes instead of plaintext passwords), file integrity verification, digital signatures, and secure commitment schemes in auctions, where each application requires specific combinations of these properties to ensure security against various attack vectors.

Apart from password storage, hashing can also be used to perform integrity checks. When a file is uploaded on the internet, the file's hash value is generated and it is uploaded along with the original information. When a new user downloads the file, he can calculate the digest of the downloaded file using the same hash function. When the hash values are compared, if they match, then file integrity has been maintained and there has been no data corruption. Since so much important information is being passed on to the hash function, we need to understand how they work.

Cryptographic hash functions are mathematical algorithms that take an input (text or data) and produce a fixed-length string called a digest, with key properties including: (1) fixed output length regardless of input size, (2) ease of computing the digest from input but extreme difficulty in reversing it, (3) the avalanche effect where small input changes produce seemingly random, unpredictable digest changes, (4) collision resistance ensuring different inputs produce different digests, and (5) computational efficiency for practical use. These functions are essential for applications like password security, cryptocurrency, and file integrity verification (e.g., MD5 checksums).

File integrity verification compares the hash values of two files. If the hashes match exactly, the files are identical; if they differ, modifications have occurred. This technique is essential for verifying software downloads, detecting unauthorized changes to files, and ensuring data consistency across systems. Even a single bit difference will produce a completely different hash value.

Hash functions like MD5 and SHA-256 are cryptographic algorithms that transform files into fixed-length strings (hashes) to verify file integrity and authenticity; MD5, designed in 1991, is commonly used for checksums despite known vulnerabilities, while SHA-256, created by the NSA in 2001, offers stronger security. To verify downloaded files, users can run terminal commands: on Linux use 'md5sum' or 'sha256sum' followed by the file path, on Windows use 'certutil -hashfile' with the appropriate algorithm, and on Mac use 'md5' or 'shasum -a 256'; the generated hash should match the one provided by the source website to confirm the file is authentic and unmodified.