Could someone explain to me what a socket is? I see it in many acronyms in context of SSL, etc.

Also, why is it called a socket? Is it purely because it was what a name they invented? Or was it the first name they came up with?

  • 11
    In layman's terms: a socket is a telephone.  It's the thing that you hold in your hand that lets you have a conversation with another phone.  The analogy breaks down a little: Most phone conversations are peer-to-peer.  Socket connections are client to server.  The client (such as, but not limited to, workstation software like browsers) connects to a server (such as a web server, file server, authentication server, or other).  Another flaw in the analogy: when you close a socket connection, the socket is destroyed, and you must create a new socket before you can establish a new connection. Commented Mar 31, 2015 at 21:31
  • 1
    It's not that bad for an analogy. A server is just a call-center and can have many hundreds of active calls at one time.
    – MSalters
    Commented Apr 1, 2015 at 13:30

6 Answers 6


A socket is a pseudo-file that represents a network connection. Once a socket has been created (identifying the other host and port), writes to that socket are turned into network packets that get sent out, and data received from the network can be read from the socket.

Sockets are similar to pipes. Both look like files to the programs using them. Both facilitate interprocess communication. Pipes communicate with a local program; sockets communicate with a remote program. Sockets also offer, as you mention, bidirectional communication (much like a pair of properly connected pipes could).

Finally, it is common for programs on a single machine to communicate using standard network protocols, such as TCP; it would be wasteful to go all the way to the network hardware (if any!), compute checksums, etc., just to end up back at the same host. Unix domain sockets handle this case. They connect processes on the same host rather than remote processes, bypassing the network.

As tripleee mentioned, in the course of the history of BSD, pipes were introduced earlier than sockets, and were reimplemented using sockets once those existed. The same reference, The Design and Implementation of the FreeBSD Operating System, mentions that pipes were then reverted to a non-socket implementation for performance reasons.

  • 4
    Maybe also mention that pipes predate sockets, but once the socket interface was added to Unix, it made a lot of sense to reimplement pipes using local sockets.
    – tripleee
    Commented Apr 1, 2015 at 10:57
  • 1
    @tripleee: That's a great historical point. Care to provide a reference?
    – dhag
    Commented Apr 1, 2015 at 14:00
  • 1
    Quick googling turns up page 40 in The Design and Implementation of the FreeBSD Operating System; the text mentions this change in 4.2BSD but also clarifies that this is no longer how it's done, for performance reasons.
    – tripleee
    Commented Apr 1, 2015 at 14:12
  • 1
    Excellent, I'll add this to my answer.
    – dhag
    Commented Apr 1, 2015 at 14:15
  • 1
    The best techno answer in all
    – chaosguru
    Commented Feb 14, 2018 at 11:26

A socket is just a logical endpoint for communication. They exist on the transport layer. You can send and receive things on a socket, you can bind and listen to a socket. A socket is specific to a protocol, machine, and port, and is addressed as such in the header of a packet.

Beej's guides to Network Programming and Inter-Process Communication both have good information on how to use sockets, and even answer this exact question.


Now, what is it?

A socket, or "socket" can be several things:

First of all, it is a thought model and an application programming interface (API). That means you have a set of rules you need to follow and a set of functions that you can use to write programs that do something, according to a precisely specified contract. In this particular case, something means exchange data with another program.

The sockets API widely abstracts the details of "communication" in general. It encapsulates who you talk with and how, all through one (almost) consistent and identical cookie-cutter form.
You can create sockets in different "domains" (such as e.g. a "unix socket" or a "internet socket") and of different types of communication (e.g. a "datagram" socket or a "stream" socket) and talk to different recipients, and everything works exactly the same (well, 99%, there are obviously minute differences that you'll have to account for).

You do not need to know (and you do not even want to know!) whether you talk to another program on the same computer or on a different computer, or whether there is IPv4 or IPv6 network in between those computers, or maybe some other protocol that you have never heard of.

socket is also the name of the library function (or syscall) which creates "the socket", which is a special kind of file (everything in Unix is a file).

How does it compare to...

sockets fall into the same category as pipes and name pipes

A pipe is a means of one way communication between a reader and a writer (both being programs) on the same computer. It simulates a stream of data (just like e.g. TCP).
That is, no individual "messages" or "blocks of data" exist from the pipe's point of view. You can copy any amount of data into "one end", and someone else can read any amount of data (not necessarily the same, and not necessarily in one go) at the "other end" in the same byte order as you've pushed it in.

A named pipe is, well, simply a pipe which owns a name in the filesystem. That is, it's something that looks and behaves just like a file, it appears in the directory listing and you can open it, write to it, etc etc. Note that you can also create socket special files (that would be a named socket).

A socket, on the other hand, is a means of two way ("duplex") communication, that means you can write to and read from the same socket, and you do not need two separate sockets for a two-way communication.
Also, a socket can act as a stream (identical to a pipe), or it can send discrete, unreliable messages, or it can send discrete, ordered messages (the first two work on any domain, the last only on "unix domain"). It can send messages (or simulate a stream) to someone on an entirely different computer. A socket can even do a form of one-to-many communication (multicast) under some conditions.

With that in mind, it is clear that sockets do something much more complicated and generally have more overhead than pipes (which are basically no more than a simple memcpy to and from a buffer!), but if you create local sockets (i.e. on the same computer), the operating system usually applies a heavily optimized fast path, so there is really not much of a difference.

inter-process communication sometimes mentioned with regard to networks

Yes, sockets are one possible way of inter-process communication (shared memory and pipes being examples of alternatives). All at the same time, they are being used for "networking", as explained above.


A socket an abstraction. It provides a interface for applications to utilize a system resource (in this case the network connection) in a way that allows the operating system to mediate and organize the use of a limited resource by any number of applications.

If the data being sent through the socket could be thought of as envelopes of mail, then the socket would be your mail box. You attach a mailbox(socket) to your house(program) and put your outgoing mail(data) into it. At a scheduled time the mailman (operating system) comes along and picks up your outgoing mail and drops off any incoming mail in the same mailbox. Your outgoing mail is conveyed on your behalf to the recipient through the mailman's truck(network connection) along with all your neighbors' mail. This allows you to correspond with people far away without the need for the expense, time, difficulty, etc. of delivering the letter yourself.

As for why they're called 'sockets' well, the notion that the inventors get to call it whatever they want probably plays a large role there. Though, it's not a bad name in my opinion :)


For udp or tcp over IP,

A socket address is the combination of an IP address and a port number.

An IP address is the address of a machine on the internet e.g. unix.stackexchange.com has address

However each machine must be able to provide more than one service, so most machines will provide http (web pages) on port 80, and ssh on port 22, and etc.

So unix.stackexchange.com:80 port 80 of unix.stackexchange.com (a socket) is the access point of this web site.

However there are other types of socket, see comments below.

  • 5
    tcp/ip is only one kind of socket. There are others that have nothing to do with tcp/ip.
    – psusi
    Commented Mar 31, 2015 at 23:31
  • how many different kinds of sockets are there ? Commented Mar 31, 2015 at 23:35
  • 1
    @AbdulAlHazred, I know of four common types used with ip networking, the same with ip6, two with unix, and two with IPX. I have not looked at ax25, atm, or appletalk. There are other protocols supported on linux, and there are protocols linux does not support. In most cases each protocol has stream(tcp) and datagram(udp) sockets. Raw sockets are also common, and imcp may also have a socket interface.
    – hildred
    Commented Apr 1, 2015 at 1:41
  • The point being, this answer is incomplete in that it only covers one type of socket, and misleading in that it represent sockets in general as if they were always network sockets, and specifically IP (AF_INET) sockets.
    – tripleee
    Commented Apr 1, 2015 at 10:55

I believe you asked about networking. So TCP services use sockets as point for communication and are made up of an IP address, protocol and port number.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .