{"id":30523,"date":"2025-09-28T22:40:58","date_gmt":"2025-09-28T19:40:58","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=30523"},"modified":"2025-09-28T22:40:58","modified_gmt":"2025-09-28T19:40:58","slug":"rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/","title":{"rendered":"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"

<\/p>\n

Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h2>\n

Rocky Linux 8, CentOS’un miras\u0131n\u0131 devralan g\u00fc\u00e7l\u00fc, kararl\u0131 ve a\u00e7\u0131k kaynakl\u0131 bir i\u015fletim sistemidir. G\u00fcvenlik ve performans odakl\u0131 sunucu ortamlar\u0131 i\u00e7in ideal bir se\u00e7imdir. G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda a\u011f g\u00fcvenli\u011fi, veri gizlili\u011fi ve uzaktan eri\u015fim ihtiya\u00e7lar\u0131 giderek artmaktad\u0131r. Bu noktada, modern ve verimli bir VPN \u00e7\u00f6z\u00fcm\u00fc olan WireGuard devreye girer. WireGuard, basit yap\u0131s\u0131, y\u00fcksek performans\u0131 ve g\u00fc\u00e7l\u00fc \u015fifrelemesiyle geleneksel VPN protokollerine (OpenVPN, IPsec) g\u00f6re \u00f6nemli avantajlar sunar. Bu makalede, Rocky Linux 8 sunucunuzda WireGuard’\u0131 ad\u0131m ad\u0131m nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ve yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 detayl\u0131 bir \u015fekilde ele alaca\u011f\u0131z. Hem sunucu hem de istemci taraf\u0131ndaki yap\u0131land\u0131rmalar\u0131 a\u00e7\u0131klayarak, g\u00fcvenli ve h\u0131zl\u0131 bir VPN t\u00fcneli olu\u015fturman\u0131z\u0131 sa\u011flayaca\u011f\u0131z.<\/p>\n

WireGuard Nedir ve Neden Tercih Edilmelidir?<\/h3>\n

WireGuard, Jason A. Donenfeld taraf\u0131ndan geli\u015ftirilen ve Linux \u00e7ekirde\u011fine entegre edilmi\u015f yeni nesil bir VPN protokol\u00fcd\u00fcr. Geleneksel VPN \u00e7\u00f6z\u00fcmlerine k\u0131yasla daha modern \u015fifreleme algoritmalar\u0131 (ChaCha20, Poly1305, Curve25519) kullan\u0131r ve \u00e7ok daha az kod sat\u0131r\u0131na sahiptir. Bu sadelik, hem denetlenebilirli\u011fi art\u0131r\u0131r hem de potansiyel g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 azalt\u0131r. WireGuard’\u0131n temel avantajlar\u0131 \u015funlard\u0131r:<\/p>\n

* Basitlik:<\/strong> Yap\u0131land\u0131rmas\u0131 ve y\u00f6netimi olduk\u00e7a kolayd\u0131r.
\n* H\u0131z:<\/strong> \u00c7ekirdek d\u00fczeyinde \u00e7al\u0131\u015fmas\u0131 sayesinde y\u00fcksek bant geni\u015fli\u011fi ve d\u00fc\u015f\u00fck gecikme s\u00fcresi sunar.
\n* G\u00fcvenlik:<\/strong> Modern kriptografik ilkelerle tasarlanm\u0131\u015ft\u0131r ve g\u00fc\u00e7l\u00fc \u015fifreleme kullan\u0131r.
\n* K\u00fc\u00e7\u00fck Kod Taban\u0131:<\/strong> Binlerce de\u011fil, yaln\u0131zca birka\u00e7 bin sat\u0131r koda sahiptir, bu da g\u00fcvenlik denetimini kolayla\u015ft\u0131r\u0131r.
\n* Dola\u015f\u0131m Yetene\u011fi:<\/strong> A\u011flar aras\u0131nda ge\u00e7i\u015f yaparken ba\u011flant\u0131y\u0131 kesmeden IP adresini de\u011fi\u015ftirebilir (mobil cihazlar i\u00e7in idealdir).<\/p>\n

Bu \u00f6zellikler, WireGuard’\u0131 uzaktan \u00e7al\u0131\u015fanlar, g\u00fcvenli a\u011f ge\u00e7itleri veya ki\u015fisel gizlilik i\u00e7in m\u00fckemmel bir se\u00e7enek haline getirir. Rocky Linux 8 gibi kararl\u0131 bir platformda WireGuard \u00e7al\u0131\u015ft\u0131rmak, hem g\u00fcvenli\u011fi hem de performans\u0131 bir araya getiren g\u00fc\u00e7l\u00fc bir kombinasyon sunar.<\/p>\n

\u00d6n Gereksinimler<\/h3>\n

WireGuard kurulumuna ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6n gereksinimleri kar\u015f\u0131lad\u0131\u011f\u0131n\u0131zdan emin olun:<\/p>\n

* Rocky Linux 8 Sunucusu:<\/strong> Kurulumu tamamlanm\u0131\u015f ve internet eri\u015fimi olan bir Rocky Linux 8 sunucusu.
\n* Root veya Sudo Yetkileri:<\/strong> Sunucuda komutlar\u0131 \u00e7al\u0131\u015ft\u0131rmak i\u00e7in root eri\u015fimi veya sudo yetkilerine sahip bir kullan\u0131c\u0131.
\n* Temel Linux Bilgisi:<\/strong> Komut sat\u0131r\u0131 ve metin d\u00fczenleyici kullan\u0131m\u0131 hakk\u0131nda temel bilgi.
\n* Sabit IP Adresi:<\/strong> Sunucunuzun sabit bir genel IP adresine sahip olmas\u0131 veya bir alan ad\u0131 \u00fczerinden eri\u015filebilir olmas\u0131 \u00f6nerilir.<\/p>\n

Sistem G\u00fcncellemesi ve Gerekli Paketlerin Kurulumu<\/h3>\n

Herhangi bir yaz\u0131l\u0131m kurulumuna ba\u015flamadan \u00f6nce sisteminizi g\u00fcncel tutmak iyi bir pratiktir. Bu, olas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapat\u0131r ve paket uyumsuzluklar\u0131n\u0131 \u00f6nler.<\/p>\n

Sistem G\u00fcncellemesi<\/h4>\n

Terminali a\u00e7\u0131n ve a\u015fa\u011f\u0131daki komutlar\u0131 \u00e7al\u0131\u015ft\u0131rarak sisteminizi g\u00fcncelleyin:<\/p>\n

sudo dnf update -y\nsudo dnf upgrade -y<\/code><\/pre>\n
G\u00fcncelleme i\u015flemi tamamland\u0131ktan sonra, \u00e7ekirdek g\u00fcncellemeleri yap\u0131ld\u0131ysa sunucuyu yeniden ba\u015flatman\u0131z \u00f6nerilir:<\/p>\n
sudo reboot<\/code><\/pre>\n
EPEL Deposunun Etkinle\u015ftirilmesi<\/h4>\n
WireGuard paketi, Rocky Linux’un varsay\u0131lan depolar\u0131nda bulunmaz. Bunun yerine, Extra Packages for Enterprise Linux (EPEL) deposundan edinilebilir. EPEL deposunu etkinle\u015ftirmek i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n
sudo dnf install epel-release -y<\/code><\/pre>\n
Gerekli Yard\u0131mc\u0131 Paketlerin Kurulumu<\/h4>\n
WireGuard’\u0131n d\u00fczg\u00fcn \u00e7al\u0131\u015fmas\u0131 i\u00e7in baz\u0131 yard\u0131mc\u0131 paketlere (\u00f6rne\u011fin qrencode<\/code> istemci yap\u0131land\u0131rmas\u0131 i\u00e7in) ve \u00e7ekirdek geli\u015ftirme ara\u00e7lar\u0131na ihtiyac\u0131m\u0131z olabilir. \u00d6zellikle WireGuard \u00e7ekirdek mod\u00fcl\u00fc olarak kurulacaksa, \u00e7ekirdek ba\u015fl\u0131k dosyalar\u0131 gereklidir.<\/p>\n
sudo dnf install kernel-devel kernel-headers -y\nsudo dnf install wireguard-tools qrencode -y<\/code><\/pre>\n
wireguard-tools<\/code> paketi, wg<\/code> ve wg-quick<\/code> gibi WireGuard yard\u0131mc\u0131 programlar\u0131n\u0131 i\u00e7erir. qrencode<\/code> ise istemci yap\u0131land\u0131rmas\u0131n\u0131 QR kodu olarak d\u0131\u015fa aktarmak i\u00e7in kullan\u0131\u015fl\u0131d\u0131r.<\/p>\n
WireGuard Sunucu Yap\u0131land\u0131rmas\u0131<\/h3>\n
\u015eimdi s\u0131ra WireGuard sunucusunu yap\u0131land\u0131rmaya geldi. Bu s\u00fcre\u00e7, anahtar \u00e7iftleri olu\u015fturmay\u0131, WireGuard aray\u00fcz\u00fcn\u00fc tan\u0131mlamay\u0131 ve a\u011f ayarlar\u0131n\u0131 yapmay\u0131 i\u00e7erir.<\/p>\n
Anahtar \u00c7iftlerinin Olu\u015fturulmas\u0131<\/h4>\n
WireGuard, \u015fifreleme i\u00e7in genel (public) ve \u00f6zel (private) anahtar \u00e7iftleri kullan\u0131r. Her sunucu ve istemcinin kendi anahtar \u00e7iftine sahip olmas\u0131 gerekir.<\/p>\n
\u00d6ncelikle, anahtarlar\u0131 depolamak i\u00e7in g\u00fcvenli bir dizin olu\u015ftural\u0131m:<\/p>\n
sudo mkdir -p \/etc\/wireguard\nsudo chmod 700 \/etc\/wireguard<\/code><\/pre>\n
\u015eimdi sunucu i\u00e7in \u00f6zel ve genel anahtarlar\u0131 olu\u015ftural\u0131m:<\/p>\n
sudo wg genkey | sudo tee \/etc\/wireguard\/privatekey\nsudo cat \/etc\/wireguard\/privatekey | sudo wg pubkey | sudo tee \/etc\/wireguard\/publickey<\/code><\/pre>\n
Bu komutlar, \/etc\/wireguard\/privatekey<\/code> dosyas\u0131na \u00f6zel anahtar\u0131 ve \/etc\/wireguard\/publickey<\/code> dosyas\u0131na genel anahtar\u0131 kaydeder. \u00d6zel anahtar\u0131n\u0131z\u0131 kesinlikle kimseyle payla\u015fmay\u0131n! Genel anahtar\u0131n\u0131z\u0131 ise istemcilerle payla\u015fman\u0131z gerekecektir.<\/p>\n
Anahtar dosyalar\u0131n\u0131n izinlerini sadece root kullan\u0131c\u0131s\u0131n\u0131n okuyabilece\u011fi \u015fekilde ayarlamak \u00f6nemlidir:<\/p>\n
sudo chmod 600 \/etc\/wireguard\/privatekey\nsudo chmod 600 \/etc\/wireguard\/publickey<\/code><\/pre>\n
WireGuard Aray\u00fcz Yap\u0131land\u0131rmas\u0131 (wg0.conf)<\/h4>\n
WireGuard aray\u00fcz\u00fcn\u00fc tan\u0131mlayan wg0.conf<\/code> dosyas\u0131n\u0131 olu\u015fturaca\u011f\u0131z. Bu dosya, sunucunun IP adresi, dinleyece\u011fi port, \u00f6zel anahtar\u0131 ve istemciler i\u00e7in gerekli peer (e\u015f) ayarlar\u0131n\u0131 i\u00e7erir.<\/p>\n
Bir metin d\u00fczenleyici kullanarak \/etc\/wireguard\/wg0.conf<\/code> dosyas\u0131n\u0131 a\u00e7\u0131n:<\/p>\n
sudo nano \/etc\/wireguard\/wg0.conf<\/code><\/pre>\n
A\u015fa\u011f\u0131daki i\u00e7eri\u011fi dosyaya yap\u0131\u015ft\u0131r\u0131n. Kendi \u00f6zel anahtar\u0131n\u0131z\u0131, sunucu IP adresinizi ve istemci genel anahtar\u0131n\u0131z\u0131 (hen\u00fcz olu\u015fturmad\u0131ysan\u0131z \u015fimdilik bo\u015f b\u0131rakabilirsiniz) uygun yerlere eklemeyi unutmay\u0131n.<\/p>\n
[Interface]\nPrivateKey = \nAddress = 10.0.0.1\/24\nListenPort = 51820\nPostUp = firewall-cmd --add-port 51820\/udp --permanent; firewall-cmd --zone=public --add-masquerade --permanent; firewall-cmd --reload; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE\nPostDown = firewall-cmd --remove-port 51820\/udp --permanent; firewall-cmd --zone=public --remove-masquerade --permanent; firewall-cmd --reload; iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE\n\n
\u0130stemci 1 i\u00e7in \u00f6rnek yap\u0131land\u0131rma<\/h2>\n[Peer]\nPublicKey = <\u0130STEMC\u0130_1_GENEL_ANAHTARI>\nAllowedIPs = 10.0.0.2\/32<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong><\/p>\n
*   [Interface]<\/code><\/strong>: Sunucu taraf\u0131ndaki WireGuard aray\u00fcz\u00fcn\u00fcn yap\u0131land\u0131rmas\u0131n\u0131 tan\u0131mlar.
\n    *   PrivateKey<\/code><\/strong>: Sunucunun daha \u00f6nce olu\u015fturdu\u011funuz \u00f6zel anahtar\u0131n\u0131 buraya yap\u0131\u015ft\u0131r\u0131n. \/etc\/wireguard\/privatekey<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fidir.
\n    *   Address<\/code><\/strong>: WireGuard VPN t\u00fcnelinin sunucu taraf\u0131ndaki i\u00e7 IP adresidir. 10.0.0.1\/24<\/code> \u00f6rne\u011finde, sunucu 10.0.0.1 IP adresini alacak ve istemciler 10.0.0.2’den 10.0.0.254’e kadar IP adresleri alabilecektir.
\n    *   ListenPort<\/code><\/strong>: WireGuard’\u0131n UDP trafi\u011fini dinleyece\u011fi porttur. Varsay\u0131lan olarak 51820 kullan\u0131l\u0131r.
\n    *   PostUp<\/code><\/strong>: WireGuard aray\u00fcz\u00fc ba\u015flat\u0131ld\u0131\u011f\u0131nda \u00e7al\u0131\u015ft\u0131r\u0131lacak komutlard\u0131r.
\n        *   firewall-cmd --add-port 51820\/udp --permanent; firewall-cmd --zone=public --add-masquerade --permanent; firewall-cmd --reload;<\/code>: Bu komutlar, firewalld<\/code> g\u00fcvenlik duvar\u0131nda WireGuard portunu a\u00e7ar ve a\u011f adresi \u00e7evirisi (NAT – Network Address Translation) i\u00e7in masquerading<\/code> \u00f6zelli\u011fini etkinle\u015ftirir. Bu, istemcilerin internete sunucu \u00fczerinden eri\u015fmesini sa\u011flar.
\n        *   iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<\/code>: Bu iptables<\/code> kurallar\u0131, WireGuard aray\u00fcz\u00fcnden gelen ve giden trafi\u011fe izin verir ve eth0<\/code> (veya sunucunuzun d\u0131\u015fa bakan aray\u00fcz\u00fc) \u00fczerinden internete \u00e7\u0131k\u0131\u015f i\u00e7in NAT’\u0131 etkinle\u015ftirir. eth0<\/code> yerine kendi d\u0131\u015fa bakan a\u011f aray\u00fcz\u00fcn\u00fcz\u00fcn ad\u0131n\u0131 kullan\u0131n. Bunu ip a<\/code> komutu ile \u00f6\u011frenebilirsiniz.
\n    *   PostDown<\/code><\/strong>: WireGuard aray\u00fcz\u00fc durduruldu\u011funda \u00e7al\u0131\u015ft\u0131r\u0131lacak komutlard\u0131r. PostUp<\/code> ile eklenen kurallar\u0131 temizler.
\n*   [Peer]<\/code><\/strong>: Her bir istemci i\u00e7in ayr\u0131 bir [Peer]<\/code> blo\u011fu tan\u0131mlaman\u0131z gerekir.
\n    *   PublicKey<\/code><\/strong>: \u0130stemcinin genel anahtar\u0131d\u0131r. \u0130stemci yap\u0131land\u0131rmas\u0131 s\u0131ras\u0131nda olu\u015fturulacakt\u0131r.
\n    *   AllowedIPs<\/code><\/strong>: Bu istemcinin WireGuard aray\u00fcz\u00fcnden eri\u015febilece\u011fi IP adresleridir. 10.0.0.2\/32<\/code> \u00f6rne\u011finde, istemciye sadece 10.0.0.2 IP adresi atanm\u0131\u015ft\u0131r.<\/p>\n
Dosyay\u0131 kaydedin ve kapat\u0131n (nano i\u00e7in CTRL+X<\/code>, Y<\/code>, Enter<\/code>).<\/p>\n
\u00d6nemli Not:<\/strong> PostUp<\/code> ve PostDown<\/code> komutlar\u0131ndaki eth0<\/code> yerine sunucunuzun d\u0131\u015f a\u011f aray\u00fcz\u00fcn\u00fcn ad\u0131n\u0131 kulland\u0131\u011f\u0131n\u0131zdan emin olun. Bunu ip a<\/code> komutunu \u00e7al\u0131\u015ft\u0131rarak genellikle eth0<\/code>, ens3<\/code>, enp0s3<\/code> gibi isimlerle bulabilirsiniz.<\/p>\n
IP Y\u00f6nlendirmeyi Etkinle\u015ftirme<\/h4>\n
\u0130stemcilerin internete WireGuard sunucusu \u00fczerinden eri\u015febilmesi i\u00e7in sunucuda IP y\u00f6nlendirmeyi (IP forwarding) etkinle\u015ftirmemiz gerekir.<\/p>\n
sysctl.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyin:<\/p>\n
sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n
Dosyan\u0131n sonuna a\u015fa\u011f\u0131daki sat\u0131r\u0131 ekleyin veya yorum sat\u0131r\u0131 ise yorumu kald\u0131r\u0131n:<\/p>\n
net.ipv4.ip_forward = 1<\/code><\/pre>\n
De\u011fi\u015fiklikleri kaydettikten sonra, yeni ayarlar\u0131 hemen uygulamak i\u00e7in a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
sudo sysctl -p<\/code><\/pre>\n
FirewallD Yap\u0131land\u0131rmas\u0131<\/h4>\n
wg0.conf<\/code> dosyas\u0131ndaki PostUp<\/code> ve PostDown<\/code> komutlar\u0131 firewalld<\/code> kurallar\u0131n\u0131 otomatik olarak ekleyip kald\u0131rsa da, sistem yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda veya firewalld<\/code> hizmeti yeniden y\u00fcklendi\u011finde bu kurallar\u0131n kal\u0131c\u0131 oldu\u011fundan emin olmak i\u00e7in manuel olarak da kontrol edebiliriz.<\/p>\n
WireGuard i\u00e7in UDP portunu a\u00e7\u0131n (varsay\u0131lan 51820):<\/p>\n
sudo firewall-cmd --add-port=51820\/udp --permanent<\/code><\/pre>\n
NAT (Masquerading) \u00f6zelli\u011fini etkinle\u015ftirin, bu sayede istemciler sunucu \u00fczerinden internete \u00e7\u0131kabilir:<\/p>\n
sudo firewall-cmd --add-masquerade --permanent<\/code><\/pre>\n
De\u011fi\u015fiklikleri uygulamak i\u00e7in firewalld<\/code>‘\u0131 yeniden y\u00fckleyin:<\/p>\n
sudo firewall-cmd --reload<\/code><\/pre>\n
Bu komutlar\u0131n PostUp<\/code> ve PostDown<\/code> i\u00e7inde yer almas\u0131, WireGuard aray\u00fcz\u00fc aktif oldu\u011funda kurallar\u0131n otomatik olarak uygulanmas\u0131n\u0131 sa\u011flar. E\u011fer PostUp<\/code>\/PostDown<\/code> kullanmak istemezseniz, bu firewall-cmd<\/code> komutlar\u0131n\u0131 manuel olarak \u00e7al\u0131\u015ft\u0131rman\u0131z gerekir.<\/p>\n
WireGuard Servisini Ba\u015flatma ve Etkinle\u015ftirme<\/h3>\n
Sunucu yap\u0131land\u0131rmas\u0131 tamamland\u0131ktan sonra WireGuard servisini ba\u015flatabilir ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131 i\u00e7in etkinle\u015ftirebiliriz.<\/p>\n
sudo systemctl start wg-quick@wg0\nsudo systemctl enable wg-quick@wg0<\/code><\/pre>\n
Servisin durumunu kontrol etmek i\u00e7in:<\/p>\n
sudo systemctl status wg-quick@wg0<\/code><\/pre>\n
Her \u015fey yolundaysa, durum “active (exited)” veya “active (running)” olarak g\u00f6r\u00fcnmelidir.<\/p>\n
WireGuard aray\u00fcz\u00fcn\u00fcn detaylar\u0131n\u0131 g\u00f6rmek i\u00e7in wg<\/code> komutunu kullan\u0131n:<\/p>\n
sudo wg show wg0<\/code><\/pre>\n
Bu komut, sunucunun genel anahtar\u0131n\u0131, dinledi\u011fi portu ve yap\u0131land\u0131r\u0131lm\u0131\u015f e\u015fleri (peers) g\u00f6sterecektir.<\/p>\n
\u0130stemci Yap\u0131land\u0131rmas\u0131<\/h3>\n
\u015eimdi s\u0131ra istemci taraf\u0131n\u0131 yap\u0131land\u0131rmaya geldi. Bu ad\u0131mlar, bir Linux, Windows, macOS, Android veya iOS istemcisi i\u00e7in benzerdir, ancak dosya yollar\u0131 ve GUI kullan\u0131m\u0131 farkl\u0131l\u0131k g\u00f6sterebilir. Burada genel bir yap\u0131land\u0131rma \u00f6rne\u011fi verece\u011fiz.<\/p>\n
\u0130stemci Anahtar \u00c7iftlerinin Olu\u015fturulmas\u0131<\/h4>\n
Her istemcinin kendi \u00f6zel ve genel anahtar\u0131na ihtiyac\u0131 vard\u0131r. Bu anahtarlar\u0131 istemci cihazda olu\u015fturabilirsiniz. \u00d6rne\u011fin, bir Linux istemcisinde:<\/p>\n
wg genkey | tee privatekey_client\ncat privatekey_client | wg pubkey | tee publickey_client<\/code><\/pre>\n
Bu komutlar privatekey_client<\/code> ve publickey_client<\/code> dosyalar\u0131n\u0131 olu\u015fturacakt\u0131r. publickey_client<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fini sunucuya eklemek i\u00e7in kullanaca\u011f\u0131z.<\/p>\n
\u00d6nemli:<\/strong> \u0130stemcinin \u00f6zel anahtar\u0131n\u0131 da kimseyle payla\u015fmay\u0131n.<\/p>\n
Sunucuda \u0130stemciyi Ekleme<\/h4>\n
\u0130stemcinin genel anahtar\u0131n\u0131 ald\u0131ktan sonra (\u00f6rne\u011fin publickey_client<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fi), sunucu \u00fczerindeki \/etc\/wireguard\/wg0.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyerek yeni bir [Peer]<\/code> blo\u011fu eklemeniz gerekir.<\/p>\n
sudo nano \/etc\/wireguard\/wg0.conf<\/code><\/pre>\n
Dosyaya yeni bir [Peer]<\/code> blo\u011fu ekleyin:<\/p>\n
# \u0130stemci 2 i\u00e7in \u00f6rnek yap\u0131land\u0131rma\n[Peer]\nPublicKey = <\u0130STEMC\u0130_2_GENEL_ANAHTARI>\nAllowedIPs = 10.0.0.3\/32<\/code><\/pre>\n
Her yeni istemci i\u00e7in farkl\u0131 bir AllowedIPs<\/code> adresi (\u00f6rne\u011fin 10.0.0.3, 10.0.0.4 vb.) atay\u0131n.<\/p>\n
Yap\u0131land\u0131rma dosyas\u0131n\u0131 kaydettikten sonra, WireGuard servisini yeniden ba\u015flatarak de\u011fi\u015fikliklerin uygulanmas\u0131n\u0131 sa\u011flay\u0131n:<\/p>\n
sudo systemctl restart wg-quick@wg0<\/code><\/pre>\n
\u0130stemci Yap\u0131land\u0131rma Dosyas\u0131 (wg0.conf)<\/h4>\n
\u015eimdi istemci cihazda wg0.conf<\/code> dosyas\u0131n\u0131 olu\u015ftural\u0131m. Bu dosya, istemcinin kendi \u00f6zel anahtar\u0131n\u0131, sunucunun genel anahtar\u0131n\u0131 ve ba\u011flant\u0131 bilgilerini i\u00e7erecektir.<\/p>\n
[Interface]\nPrivateKey = <\u0130STEMC\u0130_\u00d6ZEL_ANAHTARI>\nAddress = 10.0.0.2\/24  # Sunucuda bu istemciye atad\u0131\u011f\u0131n\u0131z IP\nDNS = 8.8.8.8, 8.8.4.4 # \u0130stemcinin kullanaca\u011f\u0131 DNS sunucular\u0131 (iste\u011fe ba\u011fl\u0131)\n\n[Peer]\nPublicKey = \nEndpoint = :51820\nAllowedIPs = 0.0.0.0\/0 # T\u00fcm trafi\u011fi VPN \u00fczerinden y\u00f6nlendir\nPersistentKeepalive = 25 # NAT arkas\u0131ndaki istemciler i\u00e7in ba\u011flant\u0131y\u0131 canl\u0131 tutar<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong><\/p>\n
*   [Interface]<\/code><\/strong>: \u0130stemci taraf\u0131ndaki WireGuard aray\u00fcz\u00fcn\u00fcn yap\u0131land\u0131rmas\u0131n\u0131 tan\u0131mlar.
\n    *   PrivateKey<\/code><\/strong>: \u0130stemcinin kendi \u00f6zel anahtar\u0131n\u0131 buraya yap\u0131\u015ft\u0131r\u0131n.
\n    *   Address<\/code><\/strong>: Sunucuda bu istemciye atad\u0131\u011f\u0131n\u0131z IP adresidir (\u00f6rn. 10.0.0.2\/32<\/code>). E\u011fer sunucuda 10.0.0.2\/32<\/code> olarak tan\u0131mlad\u0131ysan\u0131z, burada sadece 10.0.0.2\/24<\/code> veya 10.0.0.2<\/code> kullanabilirsiniz. \/24<\/code> kullanmak, istemcinin VPN a\u011f\u0131ndaki di\u011fer cihazlara eri\u015fmesini sa\u011flar.
\n    *   DNS<\/code><\/strong>: \u0130stemcinin VPN t\u00fcneli \u00fczerinden kullanaca\u011f\u0131 DNS sunucular\u0131d\u0131r. Google DNS (8.8.8.8) veya Cloudflare DNS (1.1.1.1) kullanabilirsiniz. Kendi DNS sunucunuz varsa onu da belirtebilirsiniz.
\n*   [Peer]<\/code><\/strong>: Sunucu taraf\u0131ndaki WireGuard aray\u00fcz\u00fcn\u00fcn bilgilerini tan\u0131mlar.
\n    *   PublicKey<\/code><\/strong>: Sunucunun genel anahtar\u0131d\u0131r. Sunucudaki \/etc\/wireguard\/publickey<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fidir.
\n    *   Endpoint<\/code><\/strong>: Sunucunun genel IP adresi veya alan ad\u0131 ve WireGuard’\u0131n dinledi\u011fi porttur (\u00f6rn. 192.0.2.1:51820<\/code>).
\n    *   AllowedIPs<\/code><\/strong>: \u0130stemcinin bu e\u015f \u00fczerinden eri\u015febilece\u011fi IP adresleridir. 0.0.0.0\/0<\/code> ve ::\/0<\/code> (IPv6 i\u00e7in) kullanmak, t\u00fcm internet trafi\u011finin VPN t\u00fcneli \u00fczerinden ge\u00e7mesini sa\u011flar. E\u011fer sadece belirli bir i\u00e7 a\u011fa eri\u015fmek istiyorsan\u0131z, o a\u011f\u0131n IP aral\u0131\u011f\u0131n\u0131 belirtebilirsiniz (\u00f6rn. 10.0.0.0\/24<\/code>).
\n    *   PersistentKeepalive<\/code><\/strong>: NAT arkas\u0131ndaki istemciler i\u00e7in, ba\u011flant\u0131n\u0131n kesilmemesi ve t\u00fcnelin canl\u0131 kalmas\u0131 i\u00e7in belirli aral\u0131klarla (saniye cinsinden) “keepalive” paketleri g\u00f6nderir.<\/p>\n
Bu yap\u0131land\u0131rma dosyas\u0131n\u0131 istemci cihaz\u0131n\u0131zda uygun bir yere kaydedin. \u00d6rne\u011fin, Linux’ta \/etc\/wireguard\/wg0.conf<\/code> veya Windows’ta WireGuard uygulamas\u0131n\u0131n yap\u0131land\u0131rma dizinine.<\/p>\n
\u0130stemci Ba\u011flant\u0131s\u0131n\u0131 Ba\u015flatma<\/h4>\n
Linux \u0130stemciler:<\/strong><\/p>\n
Linux istemcide, yap\u0131land\u0131rma dosyas\u0131n\u0131 \/etc\/wireguard\/wg0.conf<\/code> olarak kaydettikten sonra a\u015fa\u011f\u0131daki komutlarla ba\u011flant\u0131y\u0131 ba\u015flatabilirsiniz:<\/p>\n
sudo wg-quick up wg0<\/code><\/pre>\n
Ba\u011flant\u0131y\u0131 durdurmak i\u00e7in:<\/p>\n
sudo wg-quick down wg0<\/code><\/pre>\n
Sistem ba\u015flang\u0131c\u0131nda otomatik ba\u015flamas\u0131 i\u00e7in:<\/p>\n
sudo systemctl enable wg-quick@wg0\nsudo systemctl start wg-quick@wg0<\/code><\/pre>\n
Windows\/macOS\/Android\/iOS \u0130stemciler:<\/strong><\/p>\n
WireGuard’\u0131n resmi uygulamalar\u0131n\u0131 indirip kurun. Uygulama genellikle bir yap\u0131land\u0131rma dosyas\u0131n\u0131 i\u00e7e aktarman\u0131za veya bir QR kodunu taraman\u0131za olanak tan\u0131r.<\/p>\n
QR kodu olu\u015fturmak i\u00e7in sunucunuzda (e\u011fer qrencode<\/code> y\u00fckl\u00fcyse):<\/p>\n
sudo cat \/etc\/wireguard\/client_configs\/client1.conf | qrencode -t ansiutf8<\/code><\/pre>\n
Bu komut, terminalde istemci yap\u0131land\u0131rmas\u0131n\u0131n QR kodunu g\u00f6sterecektir. Bu kodu telefonunuzdaki WireGuard uygulamas\u0131yla tarayarak kolayca yap\u0131land\u0131rmay\u0131 i\u00e7e aktarabilirsiniz. Windows ve macOS uygulamalar\u0131 i\u00e7in de genellikle “Import tunnel from file” veya “Add empty tunnel” se\u00e7eneklerini kullanarak yap\u0131land\u0131rma dosyas\u0131n\u0131 manuel olarak olu\u015fturabilir veya i\u00e7e aktarabilirsiniz.<\/p>\n
Ba\u011flant\u0131y\u0131 Do\u011frulama<\/h3>\n
\u0130stemci ba\u011fland\u0131ktan sonra, ba\u011flant\u0131n\u0131n do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in birka\u00e7 kontrol yapabilirsiniz.<\/p>\n
1.  \u0130stemcide IP Adresi Kontrol\u00fc:<\/strong>
\n    \u0130stemcinin VPN t\u00fcneli \u00fczerinden 10.0.0.x<\/code> IP adresini al\u0131p almad\u0131\u011f\u0131n\u0131 kontrol edin.
\n    Linux’ta: ip a<\/code>
\n    Windows’ta: ipconfig<\/code>
\n    Mac’te: ifconfig<\/code><\/p>\n
2.  \u0130stemciden Sunucuya Ping:<\/strong>
\n    \u0130stemciden WireGuard sunucusunun i\u00e7 IP adresine (\u00f6rn. 10.0.0.1<\/code>) ping at\u0131n:<\/p>\n
ping 10.0.0.1<\/code><\/pre>\n
    Yan\u0131t al\u0131yorsan\u0131z, t\u00fcnel \u00e7al\u0131\u015f\u0131yor demektir.<\/p>\n
3.  Genel IP Adresi Kontrol\u00fc:<\/strong>
\n    E\u011fer istemci yap\u0131land\u0131rmas\u0131nda AllowedIPs = 0.0.0.0\/0<\/code> kulland\u0131ysan\u0131z, istemcinin genel IP adresinin art\u0131k WireGuard sunucusunun genel IP adresi olmas\u0131 gerekir. Bunu whatismyip.com<\/code> gibi bir web sitesinden kontrol edebilirsiniz.<\/p>\n
4.  Sunucuda E\u015fleri Kontrol Etme:<\/strong>
\n    Sunucuda a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131rarak ba\u011fl\u0131 istemcileri g\u00f6rebilirsiniz:<\/p>\n
sudo wg show<\/code><\/pre>\n
    Burada istemcinin genel anahtar\u0131n\u0131, son el s\u0131k\u0131\u015fma (latest handshake) zaman\u0131n\u0131 ve g\u00f6nderilen\/al\u0131nan veri miktar\u0131n\u0131 g\u00f6rmelisiniz.<\/p>\n
Geli\u015fmi\u015f Yap\u0131land\u0131rma ve \u0130pu\u00e7lar\u0131<\/h3>\n
Birden Fazla \u0130stemci Ekleme<\/h4>\n
Her yeni istemci i\u00e7in:
\n1.  \u0130stemcide yeni bir anahtar \u00e7ifti olu\u015fturun.
\n2.  \u0130stemcinin genel anahtar\u0131n\u0131 al\u0131n.
\n3.  Sunucudaki \/etc\/wireguard\/wg0.conf<\/code> dosyas\u0131na yeni bir [Peer]<\/code> blo\u011fu ekleyin, her istemciye benzersiz bir AllowedIPs<\/code> (\u00f6rn. 10.0.0.3\/32<\/code>, 10.0.0.4\/32<\/code>) atay\u0131n.
\n4.  Sunucu WireGuard servisini yeniden ba\u015flat\u0131n (sudo systemctl restart wg-quick@wg0<\/code>).
\n5.  \u0130stemci i\u00e7in uygun wg0.conf<\/code> dosyas\u0131n\u0131 olu\u015fturun (kendi \u00f6zel anahtar\u0131, sunucunun genel anahtar\u0131, sunucunun endpoint’i, atanan i\u00e7 IP adresi ve AllowedIPs<\/code> ayarlar\u0131yla).<\/p>\n
\u0130stemci Eri\u015fimi \u0130ptali<\/h4>\n
Bir istemcinin eri\u015fimini iptal etmek i\u00e7in, sunucudaki \/etc\/wireguard\/wg0.conf<\/code> dosyas\u0131ndan o istemciye ait [Peer]<\/code> blo\u011funu silmeniz ve WireGuard servisini yeniden ba\u015flatman\u0131z yeterlidir.<\/p>\n
DNS Sunucusu Olarak Pi-hole veya AdGuard Home Kullanma<\/h4>\n
E\u011fer a\u011f\u0131n\u0131zda bir Pi-hole veya AdGuard Home gibi bir reklam engelleyici DNS sunucusu \u00e7al\u0131\u015ft\u0131r\u0131yorsan\u0131z, istemci yap\u0131land\u0131rmas\u0131ndaki DNS<\/code> sat\u0131r\u0131n\u0131 bu sunucunun IP adresiyle de\u011fi\u015ftirebilirsiniz (\u00f6rn. DNS = 10.0.0.1<\/code>). Bu, VPN \u00fczerinden t\u00fcm cihazlar\u0131n\u0131z\u0131n reklam engelleme ve izleyici korumas\u0131ndan faydalanmas\u0131n\u0131 sa\u011flar.<\/p>\n
G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h4>\n
*   \u00d6zel Anahtarlar\u0131 Korumak:<\/strong> \u00d6zel anahtarlar\u0131n\u0131z\u0131 asla payla\u015fmay\u0131n ve g\u00fcvenli bir \u015fekilde saklay\u0131n. Sadece root kullan\u0131c\u0131s\u0131n\u0131n okuma iznine sahip oldu\u011fundan emin olun (chmod 600<\/code>).
\n*   G\u00fcncel Tutmak:<\/strong> Rocky Linux sisteminizi ve WireGuard’\u0131 d\u00fczenli olarak g\u00fcncelleyin.
\n*   G\u00fc\u00e7l\u00fc Parolalar:<\/strong> Sunucuya eri\u015fim i\u00e7in g\u00fc\u00e7l\u00fc SSH parolalar\u0131 kullan\u0131n veya anahtar tabanl\u0131 kimlik do\u011frulamay\u0131 tercih edin.
\n*   Minimum Yetki:<\/strong> WireGuard’\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131 sunucuda gereksiz servisleri kapat\u0131n ve sadece ihtiyac\u0131n\u0131z olan yaz\u0131l\u0131mlar\u0131 kurun.<\/p>\n
Sorun Giderme<\/h3>\n
Kurulum veya ba\u011flant\u0131 s\u0131ras\u0131nda sorun ya\u015farsan\u0131z, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyebilirsiniz:<\/p>\n
1.  G\u00fcnl\u00fckleri Kontrol Edin:<\/strong>
\n    WireGuard servisi ile ilgili g\u00fcnl\u00fckleri kontrol edin:<\/p>\n
sudo journalctl -u wg-quick@wg0<\/code><\/pre>\n
    Genel sistem g\u00fcnl\u00fcklerini kontrol edin:<\/p>\n
sudo journalctl -xe<\/code><\/pre>\n
2.  FirewallD Durumunu Kontrol Edin:<\/strong>
\n    Portun a\u00e7\u0131k oldu\u011fundan ve masquerading’in etkin oldu\u011fundan emin olun:<\/p>\n
sudo firewall-cmd --list-all<\/code><\/pre>\n
    ports<\/code> alt\u0131nda 51820\/udp<\/code> ve masquerade<\/code> alt\u0131nda yes<\/code> g\u00f6rmelisiniz.<\/p>\n
3.  IP Y\u00f6nlendirmeyi Kontrol Edin:<\/strong>
\n    IP y\u00f6nlendirmesinin etkin oldu\u011fundan emin olun:<\/p>\n
sudo sysctl net.ipv4.ip_forward<\/code><\/pre>\n
    \u00c7\u0131kt\u0131 net.ipv4.ip_forward = 1<\/code> olmal\u0131d\u0131r.<\/p>\n
4.  Anahtarlar\u0131 ve IP Adreslerini Kontrol Edin:<\/strong>
\n    Sunucu ve istemci yap\u0131land\u0131rma dosyalar\u0131ndaki genel\/\u00f6zel anahtarlar\u0131n ve IP adreslerinin do\u011fru oldu\u011fundan emin olun. \u00d6zellikle kopyalama\/yap\u0131\u015ft\u0131rma hatalar\u0131na dikkat edin.<\/p>\n
5.  Endpoint ve Port Kontrol\u00fc:<\/strong>
\n    \u0130stemci yap\u0131land\u0131rmas\u0131ndaki Endpoint<\/code> adresinin ve portunun do\u011fru oldu\u011fundan emin olun. Sunucunuzun genel IP adresi veya alan ad\u0131 do\u011fru mu? Port 51820 mi?<\/p>\n
6.  A\u011f Aray\u00fcz\u00fc Ad\u0131:<\/strong>
\n    PostUp<\/code> ve PostDown<\/code> komutlar\u0131ndaki d\u0131\u015fa bakan a\u011f aray\u00fcz\u00fc ad\u0131n\u0131n (\u00f6rn. eth0<\/code>) sunucunuz i\u00e7in do\u011fru oldu\u011fundan emin olun. ip a<\/code> komutu ile kontrol edebilirsiniz.<\/p>\n
7.  Selinux:<\/strong>
\n    Rocky Linux’ta Selinux varsay\u0131lan olarak etkin olabilir. Nadiren de olsa Selinux WireGuard’\u0131 engelleyebilir. Ge\u00e7ici olarak kapatarak test edebilirsiniz (ancak kal\u0131c\u0131 olarak kapatmak g\u00fcvenlik riski olu\u015fturabilir):<\/p>\n
sudo setenforce 0<\/code><\/pre>\n
    Sorun \u00e7\u00f6z\u00fcl\u00fcrse, Selinux politikalar\u0131n\u0131 d\u00fczenlemeniz veya WireGuard i\u00e7in uygun kurallar\u0131 eklemeniz gerekebilir.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu makalede, Rocky Linux 8 sunucunuzda WireGuard VPN’i ad\u0131m ad\u0131m nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ve yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 \u00f6\u011frendiniz. G\u00fcvenli anahtar \u00e7iftleri olu\u015fturmaktan, sunucu ve istemci yap\u0131land\u0131rma dosyalar\u0131n\u0131 d\u00fczenlemeye, firewall ayarlar\u0131n\u0131 yapmaya ve ba\u011flant\u0131y\u0131 do\u011frulamaya kadar t\u00fcm temel ad\u0131mlar\u0131 ele ald\u0131k. WireGuard, basitli\u011fi, h\u0131z\u0131 ve g\u00fc\u00e7l\u00fc g\u00fcvenli\u011fi sayesinde modern VPN ihtiya\u00e7lar\u0131 i\u00e7in m\u00fckemmel bir \u00e7\u00f6z\u00fcmd\u00fcr. Rocky Linux 8’in kararl\u0131l\u0131\u011f\u0131yla birle\u015fti\u011finde, hem ki\u015fisel hem de kurumsal kullan\u0131m i\u00e7in g\u00fcvenilir bir uzaktan eri\u015fim altyap\u0131s\u0131 sunar. Art\u0131k kendi g\u00fcvenli VPN t\u00fcnelinizi kurarak verilerinizi koruyabilir ve d\u00fcnyan\u0131n her yerinden kaynaklar\u0131n\u0131za g\u00fcvenle eri\u015febilirsiniz. Unutmay\u0131n, a\u011f g\u00fcvenli\u011fi s\u00fcrekli bir s\u00fcre\u00e7tir; sisteminizi ve WireGuard’\u0131n\u0131z\u0131 d\u00fczenli olarak g\u00fcncellemeyi ihmal etmeyin.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131\nRocky Linux 8, CentOS’un miras\u0131n\u0131 devralan g\u00fc\u00e7l\u00fc, kararl\u0131 ve a\u00e7\u0131k kaynakl\u0131 bi","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-30523","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nRocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131\" \/>\n<meta property=\"og:description\" content=\"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131 Rocky Linux 8, CentOS'un miras\u0131n\u0131 devralan g\u00fc\u00e7l\u00fc, kararl\u0131 ve a\u00e7\u0131k kaynakl\u0131 bi\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-28T19:40:58+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"16 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131\",\"datePublished\":\"2025-09-28T19:40:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/\"},\"wordCount\":2769,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/\",\"name\":\"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-09-28T19:40:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131","og_description":"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131 Rocky Linux 8, CentOS'un miras\u0131n\u0131 devralan g\u00fc\u00e7l\u00fc, kararl\u0131 ve a\u00e7\u0131k kaynakl\u0131 bi","og_url":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-09-28T19:40:58+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"16 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131","datePublished":"2025-09-28T19:40:58+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/"},"wordCount":2769,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/","url":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/","name":"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-09-28T19:40:58+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerine-wireguard-kurulumu-ve-yapilandirmasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Rocky Linux 8 \u00dczerine WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/30523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=30523"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/30523\/revisions"}],"predecessor-version":[{"id":30524,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/30523\/revisions\/30524"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=30523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=30523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=30523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}