Why Can You Ping 127.0.0.1 When Offline? Understanding Loopback and IP Basics

What is 127.0.0.1?

127.0.0.1 is an IPv4 address belonging to the loopback address range , which is defined by the kernel as #define INADDR_LOOPBACK 0x7f000001 /* 127.0.0.1 */. All IPv4 addresses starting with 127 are reserved for loopback and never leave the host.

What is ping?

Ping is a small user‑space utility that sends ICMP echo‑request packets to a target address and waits for echo‑reply packets. It operates at the application layer but uses the ICMP protocol in the network layer to test reachability.

Why ping works when the network cable is unplugged

When the cable is removed, the physical NIC (the "real" network card) stops transmitting, but the kernel still has a virtual "loopback" interface (often called lo0 or a "fake NIC"). Sending to a loopback address follows this path:

Application calls ping 127.0.0.1.

The socket is created with socket(AF_INET, SOCK_RAW, IPPROTO_ICMP), which binds to the network layer.

The routing table sees the destination is a loopback address and selects the local loopback interface instead of a physical NIC.

The packet is placed into the kernel’s input_pkt_queue linked list, triggering a soft‑interrupt handled by the kernel thread ksoftirqd.

The packet is processed entirely inside the host and returned to the ping process as an echo reply.

Because the packet never leaves the host, it succeeds even when the external network is down.

Differences among 127.0.0.1, localhost and 0.0.0.0

localhost

is not an IP address but a hostname that resolves (via /etc/hosts) to 127.0.0.1. Therefore using ping localhost is equivalent to ping 127.0.0.1. 0.0.0.0 is a special IPv4 address that means “unspecified” or “any address”. Pinging it fails ( ping: sendto: No route to host) because the kernel cannot route to an undefined destination.

$ ping 0.0.0.0
PING 0.0.0.0 (0.0.0.0): 56 data bytes
ping: sendto: No route to host
ping: sendto: No route to host

When a server binds to 0.0.0.0 (e.g., #define INADDR_ANY ((unsigned long int)0x00000000)), it listens on **all** IPv4 interfaces of the host, so both 127.0.0.1 and the host’s external IP (e.g., 192.168.31.6) can reach the service. However, a client must specify a concrete IP address; it cannot connect to 0.0.0.0.

Summary

127.0.0.1

is the standard IPv4 loopback address; localhost is a hostname that resolves to it.

Ping to a loopback address uses the kernel’s virtual loopback interface ( lo0), never touches a physical NIC, so it works even when the network is disconnected. 0.0.0.0 represents an unspecified address; it cannot be pinged, but it is useful for servers that should accept connections on any local IPv4 address.