UDP User Datagram Protocol
The "fire-and-forget" transport protocol of the internet. Operating at Layer 4 of the OSI model, UDP is a connectionless, best-effort delivery mechanism. Unlike TCP, it does not guarantee delivery, does not sequence data, and does not perform flow control. It sacrifices reliability for raw, unadulterated speed.
The UDP Header Advantage
Because UDP abandons error recovery and synchronization, its header is incredibly lightweight. While a standard TCP header consumes 20 bytes of payload space, a UDP header consumes only 8 bytes.
- Source Port (16 bits): The randomized ephemeral port generated by the sending application.
- Destination Port (16 bits): The well-known port of the target service (e.g., 53 for DNS, 69 for TFTP).
- Length (16 bits): The total size of the UDP header and the encapsulated payload.
- Checksum (16 bits): An optional mathematical hash to verify the payload wasn't corrupted by electrical noise in transit.
Primary Use Cases
Real-Time Media
Voice over IP (VoIP) and live video streaming rely entirely on UDP. If a packet containing a single frame of a video call is dropped, retransmitting it 500 milliseconds later is useless—the conversation has already moved on. UDP ignores the drop and keeps pushing the live feed forward.
Rapid Request/Reply
Protocols that require immediate, single-packet answers (like DNS lookups or DHCP DORA requests) use UDP. Forcing a full TCP three-way handshake just to ask "What is the IP of google.com?" would introduce massive latency across the internet.
CCNA Exam Gotchas
The DNS Dual-Protocol Trap
The CCNA frequently tests your knowledge of DNS. While standard endpoint DNS queries (a client asking a server to resolve a website) operate over UDP Port 53 for speed, DNS Zone Transfers (two DNS servers syncing their massive databases) operate over TCP Port 53 because the data size is large and absolute reliability is strictly required.
FTP vs TFTP
Standard FTP (File Transfer Protocol) uses TCP to guarantee delivery of large files. However, TFTP (Trivial File Transfer Protocol), which is used constantly in Cisco networks to back up IOS images and configurations, uses UDP Port 69. TFTP implements its own primitive, application-layer acknowledgment system to handle drops without the heavy overhead of TCP.