Which OSI layer do routers primarily operate at to make forwarding decisions based on destination IP addresses?