At which OSI layer does a router primarily operate to make forwarding decisions based on IP addresses?