Layer 4 (Transport): sees TCP/UDP packets -- source/dest IP and port. Cannot inspect HTTP content. Just forwards connections. Fast, low latency. Layer 7 (Application): terminates HTTP, parses headers, URL paths, cookies. Can make routing decisions based on content. More flexible but adds latency. AWS: NLB = L4, ALB = L7.