{"id":30659,"date":"2025-09-30T10:40:56","date_gmt":"2025-09-30T07:40:56","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=30659"},"modified":"2025-09-30T10:40:56","modified_gmt":"2025-09-30T07:40:56","slug":"tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","title":{"rendered":"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"

<\/p>\n

Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131<\/h2>\n

Tinc, \u00e7ok y\u00f6nl\u00fc ve esnek bir a\u011f sanalla\u015ft\u0131rma yaz\u0131l\u0131m\u0131d\u0131r. Geleneksel VPN \u00e7\u00f6z\u00fcmlerinden farkl\u0131 olarak, Tinc bir istemci-sunucu modeline ba\u011fl\u0131 kalmak yerine, d\u00fc\u011f\u00fcmler aras\u0131nda do\u011frudan ba\u011flant\u0131lar kurabilen bir mesh (\u00f6rg\u00fc) VPN olu\u015fturma yetene\u011fine sahiptir. Bu makalede, Tinc’in Ubuntu 18.04 i\u015fletim sistemi \u00fczerinde nas\u0131l kurulaca\u011f\u0131n\u0131 ve temel bir VPN a\u011f\u0131n\u0131n nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayaca\u011f\u0131z. Bu sayede, farkl\u0131 co\u011frafi konumlardaki sunucular\u0131n\u0131z\u0131 veya cihazlar\u0131n\u0131z\u0131 tek bir sanal a\u011f alt\u0131nda birle\u015ftirerek g\u00fcvenli ileti\u015fim sa\u011flayabilirsiniz.<\/p>\n

Tinc, \u00f6zellikle da\u011f\u0131t\u0131k sistemler, IoT cihazlar\u0131 veya birden fazla bulut sa\u011flay\u0131c\u0131s\u0131nda bar\u0131nd\u0131r\u0131lan sunucular aras\u0131nda g\u00fcvenli ve esnek bir ileti\u015fim katman\u0131 olu\u015fturmak isteyenler i\u00e7in ideal bir \u00e7\u00f6z\u00fcmd\u00fcr. OpenVPN gibi daha bilinen \u00e7\u00f6z\u00fcmlere g\u00f6re yap\u0131land\u0131rmas\u0131 biraz daha farkl\u0131 olsa da, sundu\u011fu mesh yap\u0131s\u0131 ve peer-to-peer (e\u015ften-e\u015fe) ba\u011flant\u0131 yetene\u011fi sayesinde b\u00fcy\u00fck avantajlar sa\u011flar.<\/p>\n

Tinc VPN Nedir ve Neden Kullan\u0131lmal\u0131d\u0131r?<\/h3>\n

Tinc, sanal \u00f6zel a\u011flar (VPN’ler) olu\u015fturmak i\u00e7in tasarlanm\u0131\u015f a\u00e7\u0131k kaynakl\u0131 bir yaz\u0131l\u0131md\u0131r. Ancak, \u00e7o\u011fu VPN \u00e7\u00f6z\u00fcm\u00fcnden ayr\u0131lan temel \u00f6zelli\u011fi, merkezi bir sunucuya ihtiya\u00e7 duymadan, a\u011fdaki t\u00fcm d\u00fc\u011f\u00fcmlerin birbirine do\u011frudan ba\u011flanabildi\u011fi bir “mesh” veya “\u00f6rg\u00fc” topoloji olu\u015fturabilmesidir. Bu, bir d\u00fc\u011f\u00fcm\u00fcn di\u011ferine ula\u015fmak i\u00e7in mutlaka merkezi bir sunucu \u00fczerinden ge\u00e7mek zorunda olmad\u0131\u011f\u0131 anlam\u0131na gelir. E\u011fer do\u011frudan bir ba\u011flant\u0131 m\u00fcmk\u00fcnse (\u00f6rne\u011fin, g\u00fcvenlik duvar\u0131 veya NAT arkas\u0131nda de\u011fillerse), Tinc bu do\u011frudan ba\u011flant\u0131y\u0131 tercih eder. Aksi takdirde, di\u011fer d\u00fc\u011f\u00fcmler \u00fczerinden y\u00f6nlendirme yaparak ileti\u015fimi sa\u011flar.<\/p>\n

Tinc’in Temel \u00d6zellikleri ve Avantajlar\u0131:<\/h4>\n

* Mesh VPN Topolojisi:<\/strong> Her d\u00fc\u011f\u00fcm di\u011fer herhangi bir d\u00fc\u011f\u00fcmle do\u011frudan ileti\u015fim kurabilir. Bu, a\u011f\u0131n daha esnek, dayan\u0131kl\u0131 ve \u00f6l\u00e7eklenebilir olmas\u0131n\u0131 sa\u011flar. Merkezi bir sunucunun \u00e7\u00f6kmesi t\u00fcm a\u011f\u0131 etkilemez.
\n* Kolay Yap\u0131land\u0131rma:<\/strong> Temel bir kurulum i\u00e7in nispeten basit yap\u0131land\u0131rma dosyalar\u0131 gerektirir.
\n* Platform Ba\u011f\u0131ms\u0131zl\u0131\u011f\u0131:<\/strong> Linux, Windows, macOS ve di\u011fer bir\u00e7ok UNIX benzeri sistemde \u00e7al\u0131\u015f\u0131r.
\n* G\u00fcvenlik:<\/strong> T\u00fcm trafik, OpenSSL kullan\u0131larak g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131yla \u015fifrelenir. Her d\u00fc\u011f\u00fcm\u00fcn kendi anahtar \u00e7ifti vard\u0131r.
\n* NAT Ge\u00e7i\u015fi:<\/strong> \u00c7o\u011fu zaman, d\u00fc\u011f\u00fcmlerin genel IP adresleri olmasa bile (NAT arkas\u0131nda olsalar bile) birbirleriyle ileti\u015fim kurmalar\u0131n\u0131 sa\u011flayabilir.
\n* IPv6 Deste\u011fi:<\/strong> Hem IPv4 hem de IPv6 trafi\u011fini t\u00fcnelleyebilir.
\n* Esneklik:<\/strong> VPN \u00fczerinden belirli alt a\u011flar\u0131 veya t\u00fcm trafi\u011fi y\u00f6nlendirebilir.<\/p>\n

Tinc, \u00f6zellikle birden fazla lokasyonda sunucular\u0131 olan veya farkl\u0131 bulut sa\u011flay\u0131c\u0131lar\u0131nda da\u011f\u0131t\u0131k sistemler \u00e7al\u0131\u015ft\u0131ran kurulu\u015flar i\u00e7in idealdir. Ayr\u0131ca, evdeki farkl\u0131 cihazlar\u0131 (Raspberry Pi’ler, sunucular vb.) g\u00fcvenli bir \u015fekilde birbirine ba\u011flamak i\u00e7in de kullan\u0131labilir.<\/p>\n

\u00d6n Gereksinimler<\/h3>\n

Tinc kurulumuna ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6n gereksinimlerin kar\u015f\u0131land\u0131\u011f\u0131ndan emin olunuz:<\/p>\n

* \u0130ki veya Daha Fazla Ubuntu 18.04 Sunucusu\/Sanal Makinesi:<\/strong> Bu rehberde en az iki d\u00fc\u011f\u00fcm \u00fczerinden ilerleyece\u011fiz. Her d\u00fc\u011f\u00fcm\u00fcn kendi genel IP adresi veya en az\u0131ndan bir d\u00fc\u011f\u00fcm\u00fcn genel IP adresi olmas\u0131 gerekmektedir (NAT ge\u00e7i\u015fi i\u00e7in).
\n* SSH Eri\u015fimi:<\/strong> Her sunucuya SSH \u00fczerinden eri\u015fiminizin olmas\u0131 gerekmektedir.
\n* sudo<\/code> Yetkileri:<\/strong> Kurulum ve yap\u0131land\u0131rma ad\u0131mlar\u0131 i\u00e7in sudo<\/code> yetkilerine sahip bir kullan\u0131c\u0131.
\n* Temel A\u011f Bilgisi:<\/strong> IP adresleri, alt a\u011flar ve y\u00f6nlendirme (routing) hakk\u0131nda temel anlay\u0131\u015f.
\n* G\u00fcvenlik Duvar\u0131 (UFW) Bilgisi:<\/strong> Sunucular\u0131n\u0131zda UFW (Uncomplicated Firewall) veya ba\u015fka bir g\u00fcvenlik duvar\u0131 kullan\u0131l\u0131yorsa, Tinc’in kullanaca\u011f\u0131 portu a\u00e7man\u0131z gerekecektir.<\/p>\n

Bu rehber, iki d\u00fc\u011f\u00fcml\u00fc bir VPN a\u011f\u0131 kurmay\u0131 hedefleyecektir: “node1” ve “node2”.<\/p>\n

* node1:<\/strong>
\n * Genel IP: 203.0.113.1<\/code> (\u00d6rnek)
\n * VPN Sanal IP: 10.0.0.1<\/code>
\n* node2:<\/strong>
\n * Genel IP: 203.0.113.2<\/code> (\u00d6rnek)
\n * VPN Sanal IP: 10.0.0.2<\/code><\/p>\n

VPN a\u011f\u0131m\u0131z\u0131n ad\u0131 myvpn<\/code> olacak ve sanal IP aral\u0131\u011f\u0131 10.0.0.0\/24<\/code> olacakt\u0131r.<\/p>\n

Tinc Kurulum Ad\u0131mlar\u0131<\/h3>\n

Her bir d\u00fc\u011f\u00fcm \u00fczerinde a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 tekrarlaman\u0131z gerekmektedir.<\/p>\n

Sistem G\u00fcncelleme<\/h4>\n

Kuruluma ba\u015flamadan \u00f6nce, paket listelerini g\u00fcncelleyip mevcut paketleri y\u00fckseltmek iyi bir uygulamad\u0131r:<\/p>\n

sudo apt update\nsudo apt upgrade -y<\/code><\/pre>\n
Tinc Kurulumu<\/h4>\n
Tinc paketi Ubuntu’nun resmi depolar\u0131nda mevcuttur. A\u015fa\u011f\u0131daki komut ile kolayca kurabilirsiniz:<\/p>\n
sudo apt install tinc -y<\/code><\/pre>\n
Kurulum tamamland\u0131ktan sonra, Tinc servisinin sistemde y\u00fckl\u00fc oldu\u011funu ancak hen\u00fcz yap\u0131land\u0131r\u0131lmad\u0131\u011f\u0131 i\u00e7in \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 g\u00f6receksiniz.<\/p>\n
VPN A\u011f\u0131n\u0131n Yap\u0131land\u0131r\u0131lmas\u0131<\/h3>\n
Bu b\u00f6l\u00fcm, Tinc VPN a\u011f\u0131n\u0131n temel yap\u0131land\u0131rma ad\u0131mlar\u0131n\u0131 i\u00e7ermektedir. Her d\u00fc\u011f\u00fcm i\u00e7in benzer ad\u0131mlar uygulanacak, ancak baz\u0131 dosyalar\u0131n i\u00e7eri\u011fi d\u00fc\u011f\u00fcme \u00f6zel olacakt\u0131r.<\/p>\n
A\u011f Dizini Olu\u015fturma<\/h4>\n
Tinc, her VPN a\u011f\u0131 i\u00e7in ayr\u0131 bir yap\u0131land\u0131rma dizini kullan\u0131r. A\u011f\u0131m\u0131z\u0131n ad\u0131n\u0131 myvpn<\/code> olarak belirledik. Bu dizini olu\u015fturun:<\/p>\n
sudo mkdir -p \/etc\/tinc\/myvpn\/hosts<\/code><\/pre>\n
Bu komut, \/etc\/tinc\/myvpn<\/code> dizinini ve bunun alt\u0131ndaki hosts<\/code> dizinini olu\u015fturacakt\u0131r. myvpn<\/code> dizini, a\u011fa \u00f6zel yap\u0131land\u0131rma dosyalar\u0131n\u0131 (tinc.conf, tinc-up, tinc-down) ve anahtar \u00e7iftlerini bar\u0131nd\u0131r\u0131rken, hosts<\/code> dizini a\u011fdaki di\u011fer d\u00fc\u011f\u00fcmlerin herkese a\u00e7\u0131k anahtarlar\u0131n\u0131 ve yap\u0131land\u0131rma bilgilerini saklayacakt\u0131r.<\/p>\n
Anahtar \u00c7ifti Olu\u015fturma<\/h4>\n
Her Tinc d\u00fc\u011f\u00fcm\u00fc, g\u00fcvenli ileti\u015fim i\u00e7in bir RSA anahtar \u00e7iftine ihtiya\u00e7 duyar. Bu anahtarlar, Tinc’in \u015fifreleme ve kimlik do\u011frulama s\u00fcre\u00e7lerinde kullan\u0131l\u0131r. A\u015fa\u011f\u0131daki komut, mevcut d\u00fc\u011f\u00fcm i\u00e7in bir anahtar \u00e7ifti olu\u015fturacakt\u0131r:<\/p>\n
sudo tincd -n myvpn -K<\/code><\/pre>\n
Bu komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda, Tinc sizden bir dosya ad\u0131 isteyecektir. Varsay\u0131lan olarak d\u00fc\u011f\u00fcm\u00fcn hostname’ini \u00f6nerir. \u00d6rne\u011fin, node1<\/code> i\u00e7in node1<\/code> veya node2<\/code> i\u00e7in node2<\/code> yazabilirsiniz. Bu, \/etc\/tinc\/myvpn\/hosts\/<\/code> dizini alt\u0131nda bir dosya olu\u015fturacak ve bu dosya hem herkese a\u00e7\u0131k anahtar\u0131 (public key) hem de \u00f6zel anahtar\u0131 (private key) i\u00e7erecektir. \u00d6zel anahtar\u0131n\u0131z\u0131 asla kimseyle payla\u015fmay\u0131n!<\/strong><\/p>\n
Komutun \u00e7\u0131kt\u0131s\u0131 \u015f\u00f6yle g\u00f6r\u00fcnecektir:<\/p>\n
Generating 2048 bits rsa keypair.\nPlease enter a file to save the private key in [\/etc\/tinc\/myvpn\/hosts\/node1]:<\/code><\/pre>\n
Burada node1<\/code> (veya ilgili d\u00fc\u011f\u00fcm ad\u0131) yaz\u0131p Enter tu\u015funa bas\u0131n.<\/p>\n
Bu i\u015flem sonucunda, \/etc\/tinc\/myvpn\/hosts\/node1<\/code> (veya \/etc\/tinc\/myvpn\/hosts\/node2<\/code>) dosyas\u0131 olu\u015fturulacakt\u0131r. Bu dosyan\u0131n i\u00e7inde hem herkese a\u00e7\u0131k anahtar (public key) hem de \u00f6zel anahtar (private key) bulunacakt\u0131r.<\/p>\n
D\u00fc\u011f\u00fcm Yap\u0131land\u0131rmas\u0131 Detaylar\u0131<\/h3>\n
\u015eimdi her d\u00fc\u011f\u00fcm i\u00e7in \u00f6zel yap\u0131land\u0131rma dosyalar\u0131n\u0131 olu\u015ftural\u0131m.<\/p>\n
D\u00fc\u011f\u00fcm 1 (node1) Yap\u0131land\u0131rmas\u0131<\/h4>\n
SSH ile node1<\/code> sunucusuna ba\u011flan\u0131n.<\/p>\n
tinc.conf<\/code> Dosyas\u0131<\/h5>\n
Bu dosya, Tinc daemon’unun temel davran\u0131\u015f\u0131n\u0131 tan\u0131mlar.<\/p>\n
sudo nano \/etc\/tinc\/myvpn\/tinc.conf<\/code><\/pre>\n
\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
# \/etc\/tinc\/myvpn\/tinc.conf for node1\nName = node1\nAddressFamily = ipv4\nInterface = myvpn\nPort = 655\nMode = switch\n
PrivateKeyFile = \/etc\/tinc\/myvpn\/rsa_key.priv (E\u011fer -K komutuyla farkl\u0131 bir isimle kaydettiyseniz)<\/code><\/pre>\n<\/h2>\n
*   Name = node1<\/code><\/strong>: Bu d\u00fc\u011f\u00fcm\u00fcn a\u011fdaki ad\u0131d\u0131r. Di\u011fer d\u00fc\u011f\u00fcmler bu ad\u0131 kullanarak bu d\u00fc\u011f\u00fcme ba\u011flan\u0131r.
\n*   AddressFamily = ipv4<\/code><\/strong>: IPv4 trafi\u011fini t\u00fcnelleyece\u011fimizi belirtir. IPv6 i\u00e7in ipv6<\/code> veya her ikisi i\u00e7in any<\/code> kullanabilirsiniz.
\n*   Interface = myvpn<\/code><\/strong>: Tinc’in olu\u015fturaca\u011f\u0131 sanal a\u011f aray\u00fcz\u00fcn\u00fcn ad\u0131d\u0131r.
\n*   Port = 655<\/code><\/strong>: Tinc’in gelen ba\u011flant\u0131lar\u0131 dinleyece\u011fi UDP portudur. Varsay\u0131lan 655’tir, de\u011fi\u015ftirebilirsiniz ancak g\u00fcvenlik duvar\u0131nda da a\u00e7man\u0131z gerekir.
\n*   Mode = switch<\/code><\/strong>: Tinc’in bir ethernet anahtar\u0131 gibi davranmas\u0131n\u0131 sa\u011flar, bu da t\u00fcm d\u00fc\u011f\u00fcmlerin ayn\u0131 sanal alt a\u011fda olmas\u0131n\u0131 ve do\u011frudan birbirleriyle ileti\u015fim kurmas\u0131n\u0131 m\u00fcmk\u00fcn k\u0131lar.<\/p>\n
tinc-up<\/code> Beti\u011fi<\/h5>\n
Bu betik, Tinc aray\u00fcz\u00fc aya\u011fa kalkt\u0131\u011f\u0131nda \u00e7al\u0131\u015f\u0131r ve sanal a\u011f aray\u00fcz\u00fcne IP adresi atar ve gerekirse y\u00f6nlendirme kurallar\u0131 ekler.<\/p>\n
sudo nano \/etc\/tinc\/myvpn\/tinc-up<\/code><\/pre>\n
\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
#!\/bin\/sh\n
\/etc\/tinc\/myvpn\/tinc-up for node1<\/h2>\nifconfig $INTERFACE 10.0.0.1 netmask 255.255.255.0\n
Ya da ip komutunu kullanabilirsiniz:<\/h2>\n
ip link set $INTERFACE up<\/h2>\n
ip addr add 10.0.0.1\/24 dev $INTERFACE<\/code><\/pre>\n<\/h2>\n
*   $INTERFACE<\/code>: Tinc taraf\u0131ndan otomatik olarak atanacak olan sanal aray\u00fcz ad\u0131d\u0131r (myvpn<\/code>).
\n*   10.0.0.1<\/code>: Bu d\u00fc\u011f\u00fcm\u00fcn VPN a\u011f\u0131 i\u00e7indeki sanal IP adresidir.
\n*   netmask 255.255.255.0<\/code>: VPN a\u011f\u0131n\u0131n alt a\u011f maskesidir.<\/p>\n
Beti\u011fi \u00e7al\u0131\u015ft\u0131r\u0131labilir hale getirin:<\/p>\n
sudo chmod 755 \/etc\/tinc\/myvpn\/tinc-up<\/code><\/pre>\n
tinc-down<\/code> Beti\u011fi<\/h5>\n
Bu betik, Tinc aray\u00fcz\u00fc kapat\u0131ld\u0131\u011f\u0131nda \u00e7al\u0131\u015f\u0131r ve atanan IP adresini kald\u0131r\u0131r.<\/p>\n
sudo nano \/etc\/tinc\/myvpn\/tinc-down<\/code><\/pre>\n
\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
#!\/bin\/sh\n
\/etc\/tinc\/myvpn\/tinc-down<\/h2>\nifconfig $INTERFACE down\n
Ya da ip komutunu kullanabilirsiniz:<\/h2>\n
ip addr del 10.0.0.1\/24 dev $INTERFACE<\/h2>\n
ip link set $INTERFACE down<\/code><\/pre>\n<\/h2>\n
Beti\u011fi \u00e7al\u0131\u015ft\u0131r\u0131labilir hale getirin:<\/p>\n
sudo chmod 755 \/etc\/tinc\/myvpn\/tinc-down<\/code><\/pre>\n
Host Dosyas\u0131 (\/etc\/tinc\/myvpn\/hosts\/node1<\/code>)<\/h5>\n
Bu dosya, anahtar \u00e7ifti olu\u015fturuldu\u011funda otomatik olarak olu\u015fmu\u015ftur. \u015eimdi i\u00e7ine bu d\u00fc\u011f\u00fcm\u00fcn genel IP adresini ve VPN alt a\u011f\u0131n\u0131 eklememiz gerekiyor.<\/p>\n
sudo nano \/etc\/tinc\/myvpn\/hosts\/node1<\/code><\/pre>\n
Dosyan\u0131n en alt\u0131na a\u015fa\u011f\u0131daki sat\u0131rlar\u0131 ekleyin (mevcut -----BEGIN RSA PUBLIC KEY-----<\/code> ve -----END RSA PUBLIC KEY-----<\/code> sat\u0131rlar\u0131na dokunmay\u0131n):<\/p>\n
# \/etc\/tinc\/myvpn\/hosts\/node1\nAddress = 203.0.113.1 # node1'in genel IP adresi\nSubnet = 10.0.0.1\/32 # node1'in VPN i\u00e7indeki sanal IP adresi\nPort = 655 # Tinc'in d\u0131\u015far\u0131dan ba\u011flanaca\u011f\u0131 port<\/code><\/pre>\n
*   Address = 203.0.113.1<\/code><\/strong>: Bu, node1<\/code>‘in d\u0131\u015f d\u00fcnyadan eri\u015filebilen genel IP adresidir. E\u011fer node1<\/code> bir NAT arkas\u0131ndaysa ve port y\u00f6nlendirme yap\u0131ld\u0131ysa, buraya y\u00f6nlendirme yap\u0131lan genel IP adresini yaz\u0131n.
\n*   Subnet = 10.0.0.1\/32<\/code><\/strong>: Tinc’in bu d\u00fc\u011f\u00fcm \u00fczerinden 10.0.0.1<\/code> IP adresine ula\u015fabilece\u011fini belirtir. \/32<\/code> maskesi, sadece bu IP adresinin bu d\u00fc\u011f\u00fcme ait oldu\u011funu g\u00f6sterir.<\/p>\n
D\u00fc\u011f\u00fcm 2 (node2) Yap\u0131land\u0131rmas\u0131<\/h4>\n
\u015eimdi SSH ile node2<\/code> sunucusuna ba\u011flan\u0131n ve ayn\u0131 ad\u0131mlar\u0131 tekrarlay\u0131n, ancak d\u00fc\u011f\u00fcme \u00f6zel bilgileri (isim, IP adresleri) do\u011fru girdi\u011finizden emin olun.<\/p>\n
tinc.conf<\/code> Dosyas\u0131<\/h5>\n
sudo nano \/etc\/tinc\/myvpn\/tinc.conf<\/code><\/pre>\n
\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
# \/etc\/tinc\/myvpn\/tinc.conf for node2\nName = node2\nAddressFamily = ipv4\nInterface = myvpn\nPort = 655\nMode = switch\nConnectTo = node1 # Buras\u0131 \u00f6nemli! node1'e ba\u011flanmas\u0131n\u0131 s\u00f6yl\u00fcyoruz.<\/code><\/pre>\n
*   Name = node2<\/code><\/strong>: Bu d\u00fc\u011f\u00fcm\u00fcn a\u011fdaki ad\u0131d\u0131r.
\n*   ConnectTo = node1<\/code><\/strong>: Bu sat\u0131r, Tinc’e a\u011fdaki hangi d\u00fc\u011f\u00fcme ba\u011flanarak a\u011f\u0131 ke\u015ffetmeye ba\u015flayaca\u011f\u0131n\u0131 s\u00f6yler. En az bir d\u00fc\u011f\u00fcme ba\u011flanman\u0131z gerekir. node1<\/code>‘in ConnectTo<\/code> sat\u0131r\u0131 i\u00e7ermemesi, onun “merkezi” bir ba\u015flang\u0131\u00e7 noktas\u0131 olaca\u011f\u0131 anlam\u0131na gelmez, sadece o da ba\u015fka bir d\u00fc\u011f\u00fcme ba\u011flanabilir. Mesh yap\u0131s\u0131nda her d\u00fc\u011f\u00fcm di\u011ferini ke\u015ffeder.<\/p>\n
tinc-up<\/code> Beti\u011fi<\/h5>\n
sudo nano \/etc\/tinc\/myvpn\/tinc-up<\/code><\/pre>\n
\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
#!\/bin\/sh\n
\/etc\/tinc\/myvpn\/tinc-up for node2<\/h2>\nifconfig $INTERFACE 10.0.0.2 netmask 255.255.255.0\n
Ya da ip komutunu kullanabilirsiniz:<\/h2>\n
ip link set $INTERFACE up<\/h2>\n
ip addr add 10.0.0.2\/24 dev $INTERFACE<\/code><\/pre>\n<\/h2>\n
Beti\u011fi \u00e7al\u0131\u015ft\u0131r\u0131labilir hale getirin:<\/p>\n
sudo chmod 755 \/etc\/tinc\/myvpn\/tinc-up<\/code><\/pre>\n
tinc-down<\/code> Beti\u011fi<\/h5>\n
sudo nano \/etc\/tinc\/myvpn\/tinc-down<\/code><\/pre>\n
\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
#!\/bin\/sh\n
\/etc\/tinc\/myvpn\/tinc-down<\/h2>\nifconfig $INTERFACE down\n
Ya da ip komutunu kullanabilirsiniz:<\/h2>\n
ip addr del 10.0.0.2\/24 dev $INTERFACE<\/h2>\n
ip link set $INTERFACE down<\/code><\/pre>\n<\/h2>\n
Beti\u011fi \u00e7al\u0131\u015ft\u0131r\u0131labilir hale getirin:<\/p>\n
sudo chmod 755 \/etc\/tinc\/myvpn\/tinc-down<\/code><\/pre>\n
Host Dosyas\u0131 (\/etc\/tinc\/myvpn\/hosts\/node2<\/code>)<\/h5>\n
sudo nano \/etc\/tinc\/myvpn\/hosts\/node2<\/code><\/pre>\n
Dosyan\u0131n en alt\u0131na a\u015fa\u011f\u0131daki sat\u0131rlar\u0131 ekleyin:<\/p>\n
# \/etc\/tinc\/myvpn\/hosts\/node2\nAddress = 203.0.113.2 # node2'nin genel IP adresi\nSubnet = 10.0.0.2\/32 # node2'nin VPN i\u00e7indeki sanal IP adresi\nPort = 655 # Tinc'in d\u0131\u015far\u0131dan ba\u011flanaca\u011f\u0131 port<\/code><\/pre>\n
Host Dosyalar\u0131n\u0131 Payla\u015fma<\/h3>\n
Bu ad\u0131m, Tinc mesh a\u011f\u0131n\u0131n \u00e7al\u0131\u015fmas\u0131 i\u00e7in kritik \u00f6neme sahiptir. Her d\u00fc\u011f\u00fcm, di\u011fer d\u00fc\u011f\u00fcmlerin herkese a\u00e7\u0131k anahtarlar\u0131n\u0131 ve genel IP adreslerini i\u00e7eren host dosyalar\u0131na sahip olmal\u0131d\u0131r.<\/p>\n
*   node1’den node2’nin host dosyas\u0131n\u0131 al\u0131n:<\/strong>
\n    *   node2<\/code> \u00fczerinde \/etc\/tinc\/myvpn\/hosts\/node2<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fini kopyalay\u0131n.
\n    *   node1<\/code> \u00fczerinde \/etc\/tinc\/myvpn\/hosts\/node2<\/code> ad\u0131nda yeni bir dosya olu\u015fturun ve kopyalad\u0131\u011f\u0131n\u0131z i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n.<\/p>\n
*   node2’den node1’in host dosyas\u0131n\u0131 al\u0131n:<\/strong>
\n    *   node1<\/code> \u00fczerinde \/etc\/tinc\/myvpn\/hosts\/node1<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fini kopyalay\u0131n.
\n    *   node2<\/code> \u00fczerinde \/etc\/tinc\/myvpn\/hosts\/node1<\/code> ad\u0131nda yeni bir dosya olu\u015fturun ve kopyalad\u0131\u011f\u0131n\u0131z i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n.<\/p>\n
\u00d6zetle, her d\u00fc\u011f\u00fcm\u00fcn \/etc\/tinc\/myvpn\/hosts\/<\/code> dizininde kendi host dosyas\u0131 (\u00f6zel anahtar\u0131 da i\u00e7eren) ve a\u011fdaki di\u011fer her d\u00fc\u011f\u00fcm\u00fcn host dosyas\u0131 (sadece herkese a\u00e7\u0131k anahtar\u0131 i\u00e7eren) bulunmal\u0131d\u0131r.<\/p>\n
\u00d6rnek (node1 \u00fczerinde):<\/strong><\/p>\n
# node1 \u00fczerinde\nls -l \/etc\/tinc\/myvpn\/hosts\/<\/code><\/pre>\n
\u00c7\u0131kt\u0131 \u015f\u00f6yle olmal\u0131:<\/p>\n
-rw------- 1 root root 1000 Tem 20 10:00 node1  # Kendi host dosyas\u0131 (private key i\u00e7erir)\n-rw-r--r-- 1 root root  500 Tem 20 10:05 node2  # node2'den kopyalanm\u0131\u015f host dosyas\u0131 (sadece public key i\u00e7erir)<\/code><\/pre>\n
\u00d6rnek (node2 \u00fczerinde):<\/strong><\/p>\n
# node2 \u00fczerinde\nls -l \/etc\/tinc\/myvpn\/hosts\/<\/code><\/pre>\n
\u00c7\u0131kt\u0131 \u015f\u00f6yle olmal\u0131:<\/p>\n
-rw-r--r-- 1 root root  500 Tem 20 10:05 node1  # node1'den kopyalanm\u0131\u015f host dosyas\u0131 (sadece public key i\u00e7erir)\n-rw------- 1 root root 1000 Tem 20 10:00 node2  # Kendi host dosyas\u0131 (private key i\u00e7erir)<\/code><\/pre>\n
Bu kopyalama i\u015flemini SCP (Secure Copy Protocol) ile yapabilirsiniz:<\/p>\n
\u00d6rne\u011fin, node1<\/code>‘den node2<\/code>‘nin host dosyas\u0131n\u0131 almak i\u00e7in node1<\/code> \u00fczerinde:<\/p>\n
# node1 \u00fczerinde\nscp user@203.0.113.2:\/etc\/tinc\/myvpn\/hosts\/node2 \/etc\/tinc\/myvpn\/hosts\/node2<\/code><\/pre>\n
Ve node2<\/code>‘den node1<\/code>‘in host dosyas\u0131n\u0131 almak i\u00e7in node2<\/code> \u00fczerinde:<\/p>\n
# node2 \u00fczerinde\nscp user@203.0.113.1:\/etc\/tinc\/myvpn\/hosts\/node1 \/etc\/tinc\/myvpn\/hosts\/node1<\/code><\/pre>\n
user<\/code> yerine SSH kullan\u0131c\u0131 ad\u0131n\u0131z\u0131 ve IP adresleri yerine sunucular\u0131n\u0131z\u0131n ger\u00e7ek genel IP adreslerini kullanmay\u0131 unutmay\u0131n.<\/p>\n
G\u00fcvenlik Duvar\u0131 Ayarlar\u0131 (UFW)<\/h3>\n
Tinc’in d\u00fczg\u00fcn \u00e7al\u0131\u015fabilmesi i\u00e7in, d\u00fc\u011f\u00fcmlerin Tinc portu \u00fczerinden birbirleriyle ileti\u015fim kurabilmesi gerekir. Varsay\u0131lan olarak Tinc UDP portu 655’i kullan\u0131r. Her d\u00fc\u011f\u00fcm \u00fczerinde bu portu a\u00e7man\u0131z gerekmektedir.<\/p>\n
sudo ufw allow 655\/udp\nsudo ufw enable # E\u011fer UFW etkin de\u011filse\nsudo ufw status # Kontrol etmek i\u00e7in<\/code><\/pre>\n
IP Y\u00f6nlendirmeyi Etkinle\u015ftirme (Gerekirse)<\/h4>\n
E\u011fer Tinc VPN’i sadece d\u00fc\u011f\u00fcmler aras\u0131nda ileti\u015fim kurmak i\u00e7in de\u011fil, ayn\u0131 zamanda VPN \u00fczerinden ba\u015fka alt a\u011flara veya internete eri\u015fim sa\u011flamak i\u00e7in kullanacaksan\u0131z, IP y\u00f6nlendirmeyi etkinle\u015ftirmeniz gerekebilir. Bu, \u00f6zellikle bir d\u00fc\u011f\u00fcm\u00fcn di\u011fer alt a\u011flar i\u00e7in bir a\u011f ge\u00e7idi (gateway) olarak i\u015flev g\u00f6rmesini istedi\u011finizde \u00f6nemlidir.<\/p>\n
\/etc\/sysctl.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyin:<\/p>\n
sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n
A\u015fa\u011f\u0131daki sat\u0131r\u0131 bulun ve yorum sat\u0131r\u0131 #<\/code> i\u015faretini kald\u0131rarak etkinle\u015ftirin (veya ekleyin):<\/p>\n
net.ipv4.ip_forward = 1<\/code><\/pre>\n
De\u011fi\u015fiklikleri kaydettikten sonra sysctl ayarlar\u0131n\u0131 yeniden y\u00fckleyin:<\/p>\n
sudo sysctl -p<\/code><\/pre>\n
Bu, her iki d\u00fc\u011f\u00fcmde de yap\u0131lmal\u0131d\u0131r, ancak sadece y\u00f6nlendirme yapacak d\u00fc\u011f\u00fcmde bu ayar\u0131n aktif olmas\u0131 yeterlidir.<\/p>\n
Tinc Servisini Ba\u015flatma ve Y\u00f6netme<\/h3>\n
T\u00fcm yap\u0131land\u0131rma ad\u0131mlar\u0131n\u0131 tamamlad\u0131ktan sonra, Tinc servisini ba\u015flatabilir ve a\u00e7\u0131l\u0131\u015fta otomatik olarak ba\u015flamas\u0131n\u0131 sa\u011flayabilirsiniz.<\/p>\n
Servisi Ba\u015flatma<\/h4>\n
Her d\u00fc\u011f\u00fcmde a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
sudo systemctl start tinc@myvpn<\/code><\/pre>\n
tinc@myvpn<\/code> ifadesindeki @myvpn<\/code>, Tinc’e myvpn<\/code> a\u011f yap\u0131land\u0131rmas\u0131n\u0131 kullanmas\u0131n\u0131 s\u00f6yler.<\/p>\n
Servisin Durumunu Kontrol Etme<\/h4>\n
Servisin d\u00fczg\u00fcn \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in:<\/p>\n
sudo systemctl status tinc@myvpn<\/code><\/pre>\n
\u00c7\u0131kt\u0131 Active: active (running)<\/code> ve Loaded: loaded<\/code> gibi ifadeler i\u00e7ermelidir. Ayr\u0131ca, Tinc’in di\u011fer d\u00fc\u011f\u00fcmlere ba\u011flanmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 veya ba\u011fland\u0131\u011f\u0131n\u0131 g\u00f6steren log mesajlar\u0131 da g\u00f6rebilirsiniz.<\/p>\n
A\u00e7\u0131l\u0131\u015fta Otomatik Ba\u015flatma<\/h4>\n
Sistemin yeniden ba\u015flat\u0131lmas\u0131ndan sonra Tinc’in otomatik olarak ba\u015flamas\u0131n\u0131 sa\u011flamak i\u00e7in:<\/p>\n
sudo systemctl enable tinc@myvpn<\/code><\/pre>\n
G\u00fcnl\u00fckleri Kontrol Etme<\/h4>\n
Herhangi bir sorun ya\u015faman\u0131z durumunda, Tinc’in g\u00fcnl\u00fcklerini kontrol etmek faydal\u0131 olacakt\u0131r:<\/p>\n
sudo journalctl -u tinc@myvpn -f<\/code><\/pre>\n
Bu komut, Tinc servisinin ger\u00e7ek zamanl\u0131 g\u00fcnl\u00fcklerini g\u00f6sterecektir (-f<\/code> bayra\u011f\u0131 “follow” anlam\u0131na gelir).<\/p>\n
Ba\u011flant\u0131y\u0131 Test Etme<\/h3>\n
Tinc servisi her iki d\u00fc\u011f\u00fcmde de \u00e7al\u0131\u015fmaya ba\u015flad\u0131ktan sonra, VPN ba\u011flant\u0131s\u0131n\u0131n ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131n\u0131 test edebiliriz.<\/p>\n
Sanal Aray\u00fcz\u00fc Kontrol Etme<\/h4>\n
Her iki d\u00fc\u011f\u00fcmde de myvpn<\/code> aray\u00fcz\u00fcn\u00fcn olu\u015ftu\u011funu ve do\u011fru IP adresini ald\u0131\u011f\u0131n\u0131 kontrol edin:<\/p>\n
ip a show myvpn<\/code><\/pre>\n
Veya eski ifconfig<\/code> komutu ile:<\/p>\n
ifconfig myvpn<\/code><\/pre>\n
\u00c7\u0131kt\u0131da myvpn<\/code> aray\u00fcz\u00fcn\u00fcn 10.0.0.1<\/code> (node1 i\u00e7in) veya 10.0.0.2<\/code> (node2 i\u00e7in) IP adresini ald\u0131\u011f\u0131n\u0131 g\u00f6rmelisiniz.<\/p>\n
Ping ile Test Etme<\/h4>\n
\u015eimdi bir d\u00fc\u011f\u00fcmden di\u011ferinin VPN IP adresine ping atarak ba\u011flant\u0131y\u0131 test edin.<\/p>\n
node1 \u00fczerinden node2’ye ping at\u0131n:<\/strong><\/p>\n
ping 10.0.0.2<\/code><\/pre>\n
node2 \u00fczerinden node1’e ping at\u0131n:<\/strong><\/p>\n
ping 10.0.0.1<\/code><\/pre>\n
E\u011fer ping komutlar\u0131 ba\u015far\u0131l\u0131 olursa, Tinc VPN a\u011f\u0131n\u0131z ba\u015far\u0131yla kurulmu\u015f ve \u00e7al\u0131\u015f\u0131yor demektir! Art\u0131k bu iki d\u00fc\u011f\u00fcm, internet \u00fczerinden g\u00fcvenli ve \u015fifreli bir \u015fekilde ileti\u015fim kurabilir.<\/p>\n
Geli\u015fmi\u015f Yap\u0131land\u0131rma ve \u0130pu\u00e7lar\u0131<\/h3>\n
Temel bir Tinc VPN a\u011f\u0131 kurmu\u015f olsan\u0131z da, Tinc’in daha geli\u015fmi\u015f \u00f6zellikleri ve kullan\u0131m senaryolar\u0131 mevcuttur.<\/p>\n
Daha Fazla D\u00fc\u011f\u00fcm Ekleme<\/h4>\n
Mesh yap\u0131n\u0131n g\u00fczelli\u011fi, a\u011fa yeni d\u00fc\u011f\u00fcmler eklemenin kolay olmas\u0131d\u0131r. Yeni bir d\u00fc\u011f\u00fcm eklemek i\u00e7in:<\/p>\n
1.  Yeni d\u00fc\u011f\u00fcme Tinc’i kurun.
\n2.  Yeni d\u00fc\u011f\u00fcm i\u00e7in anahtar \u00e7ifti olu\u015fturun (sudo tincd -n myvpn -K<\/code>).
\n3.  Yeni d\u00fc\u011f\u00fcm\u00fcn tinc.conf<\/code>, tinc-up<\/code> ve tinc-down<\/code> dosyalar\u0131n\u0131 uygun \u015fekilde yap\u0131land\u0131r\u0131n (kendi ad\u0131 ve VPN IP adresi ile).
\n4.  Yeni d\u00fc\u011f\u00fcm\u00fcn host dosyas\u0131n\u0131 (public key ve genel IP i\u00e7eren) t\u00fcm mevcut d\u00fc\u011f\u00fcmlere kopyalay\u0131n.
\n5.  T\u00fcm mevcut d\u00fc\u011f\u00fcmlerin host dosyalar\u0131n\u0131 (public key i\u00e7eren) yeni d\u00fc\u011f\u00fcme kopyalay\u0131n.
\n6.  Yeni d\u00fc\u011f\u00fcm\u00fcn tinc.conf<\/code> dosyas\u0131na a\u011fdaki mevcut bir d\u00fc\u011f\u00fcme ConnectTo<\/code> sat\u0131r\u0131 ekleyin.
\n7.  G\u00fcvenlik duvar\u0131nda 655\/udp portunu a\u00e7\u0131n.
\n8.  Tinc servisini ba\u015flat\u0131n ve etkinle\u015ftirin.<\/p>\n
Tinc, otomatik olarak yeni d\u00fc\u011f\u00fcmle di\u011ferleri aras\u0131ndaki ba\u011flant\u0131lar\u0131 ke\u015ffedecek ve kuracakt\u0131r.<\/p>\n
Routing (Y\u00f6nlendirme) Senaryolar\u0131<\/h4>\n
Tinc sadece d\u00fc\u011f\u00fcmler aras\u0131nda do\u011frudan ileti\u015fim sa\u011flamakla kalmaz, ayn\u0131 zamanda farkl\u0131 alt a\u011flar\u0131 da birbirine ba\u011flayabilir. E\u011fer bir d\u00fc\u011f\u00fcm, kendi yerel a\u011f\u0131ndaki ba\u015fka bir alt a\u011f\u0131 Tinc VPN \u00fczerinden eri\u015filebilir k\u0131lmak isterse, o d\u00fc\u011f\u00fcm\u00fcn host dosyas\u0131na Subnet<\/code> sat\u0131r\u0131na ilgili alt a\u011f\u0131 eklemesi gerekir.<\/p>\n
\u00d6rne\u011fin, node1<\/code>‘in 192.168.1.0\/24<\/code> alt a\u011f\u0131na sahip oldu\u011funu ve bu alt a\u011f\u0131n VPN \u00fczerinden eri\u015filebilir olmas\u0131n\u0131 istedi\u011fini varsayal\u0131m. node1<\/code>‘in \/etc\/tinc\/myvpn\/hosts\/node1<\/code> dosyas\u0131na a\u015fa\u011f\u0131daki sat\u0131r\u0131 eklersiniz:<\/p>\n
Subnet = 192.168.1.0\/24<\/code><\/pre>\n
Bu, Tinc’e 192.168.1.0\/24<\/code> alt a\u011f\u0131na g\u00f6nderilen trafi\u011fin node1<\/code> \u00fczerinden y\u00f6nlendirilmesi gerekti\u011fini s\u00f6yler. Ayr\u0131ca, node1<\/code>‘in bu alt a\u011fa y\u00f6nlendirme yapabilmesi i\u00e7in IP y\u00f6nlendirme (net.ipv4.ip_forward = 1<\/code>) ayar\u0131n\u0131n etkin olmas\u0131 ve gerekirse NAT kurallar\u0131 tan\u0131mlanmas\u0131 gerekebilir.<\/p>\n
Persistent Keepalive<\/h4>\n
Baz\u0131 a\u011f ortamlar\u0131nda (\u00f6zellikle NAT arkas\u0131nda), ba\u011flant\u0131lar belirli bir s\u00fcre etkinlik olmad\u0131\u011f\u0131nda kapanabilir. Tinc’in tinc.conf<\/code> dosyas\u0131nda PingInterval<\/code> ayar\u0131n\u0131 kullanarak d\u00fczenli aral\u0131klarla “keepalive” paketleri g\u00f6ndermesini sa\u011flayabilirsiniz.<\/p>\n
# \/etc\/tinc\/myvpn\/tinc.conf\nPingInterval = 10 # Her 10 saniyede bir ping g\u00f6nderir<\/code><\/pre>\n
Bu, ba\u011flant\u0131n\u0131n canl\u0131 kalmas\u0131na yard\u0131mc\u0131 olur.<\/p>\n
Sorun Giderme<\/h3>\n
Tinc kurulumu s\u0131ras\u0131nda veya sonras\u0131nda baz\u0131 sorunlarla kar\u015f\u0131la\u015fabilirsiniz. \u0130\u015fte yayg\u0131n sorunlar ve \u00e7\u00f6z\u00fcmleri:<\/p>\n
*   D\u00fc\u011f\u00fcmler Birbirine Ping Atam\u0131yor:<\/strong>
\n    *   G\u00fcvenlik Duvar\u0131:<\/strong> En yayg\u0131n sorun budur. Her iki d\u00fc\u011f\u00fcmde de Tinc’in kulland\u0131\u011f\u0131 UDP portunun (varsay\u0131lan 655) g\u00fcvenlik duvar\u0131nda a\u00e7\u0131k oldu\u011fundan emin olun (sudo ufw status<\/code>).
\n    *   Genel IP Adresleri:<\/strong> Host dosyalar\u0131ndaki Address<\/code> sat\u0131rlar\u0131n\u0131n do\u011fru genel IP adreslerini i\u00e7erdi\u011finden emin olun.
\n    *   NAT Sorunlar\u0131:<\/strong> E\u011fer d\u00fc\u011f\u00fcmlerden biri veya ikisi de NAT arkas\u0131ndaysa, genel IP adresleri ve port y\u00f6nlendirmelerinin do\u011fru yap\u0131ld\u0131\u011f\u0131ndan emin olun.
\n    *   Host Dosyalar\u0131:<\/strong> Her d\u00fc\u011f\u00fcm\u00fcn \/etc\/tinc\/myvpn\/hosts\/<\/code> dizininde kendi host dosyas\u0131 ve di\u011fer t\u00fcm d\u00fc\u011f\u00fcmlerin host dosyalar\u0131 oldu\u011fundan emin olun. Host dosyalar\u0131n\u0131n i\u00e7eri\u011fini (\u00f6zellikle public key k\u0131s\u0131mlar\u0131n\u0131) kontrol edin.
\n    *   Sanal IP Adresleri:<\/strong> tinc-up<\/code> betiklerinde atanan sanal IP adreslerinin benzersiz oldu\u011fundan ve do\u011fru alt a\u011fda oldu\u011fundan emin olun.
\n    *   Tinc Servis Durumu:<\/strong> Her iki d\u00fc\u011f\u00fcmde de Tinc servisinin \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun (sudo systemctl status tinc@myvpn<\/code>).
\n    *   G\u00fcnl\u00fckleri Kontrol Edin:<\/strong> sudo journalctl -u tinc@myvpn -f<\/code> komutuyla Tinc g\u00fcnl\u00fcklerini kontrol edin. Ba\u011flant\u0131 sorunlar\u0131yla ilgili ipu\u00e7lar\u0131 bulabilirsiniz.<\/p>\n
*   myvpn<\/code> Aray\u00fcz\u00fc Olu\u015fmuyor:<\/strong>
\n    *   tinc-up<\/code> beti\u011finin \u00e7al\u0131\u015ft\u0131r\u0131labilir oldu\u011fundan emin olun (sudo chmod 755 \/etc\/tinc\/myvpn\/tinc-up<\/code>).
\n    *   tinc.conf<\/code> dosyas\u0131ndaki Interface<\/code> ad\u0131n\u0131n do\u011fru oldu\u011fundan emin olun.
\n    *   Tinc servisini yeniden ba\u015flatmay\u0131 deneyin (sudo systemctl restart tinc@myvpn<\/code>).<\/p>\n
*   Y\u00f6nlendirme \u00c7al\u0131\u015fm\u0131yor (Alt A\u011flara Eri\u015fim):<\/strong>
\n    *   net.ipv4.ip_forward = 1<\/code> ayar\u0131n\u0131n \/etc\/sysctl.conf<\/code> i\u00e7inde etkin oldu\u011fundan ve sudo sysctl -p<\/code> ile uyguland\u0131\u011f\u0131ndan emin olun.
\n    *   Host dosyalar\u0131ndaki Subnet<\/code> sat\u0131rlar\u0131n\u0131n do\u011fru alt a\u011flar\u0131 i\u00e7erdi\u011finden emin olun.
\n    *   Gerekirse, Tinc aray\u00fcz\u00fc \u00fczerinden gelen trafi\u011fi yerel a\u011fa y\u00f6nlendirmek i\u00e7in iptables<\/code> kurallar\u0131 (NAT\/MASQUERADE) tan\u0131mlaman\u0131z gerekebilir.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu makalede, Ubuntu 18.04 \u00fczerinde Tinc VPN’i kurma ve temel bir mesh a\u011f\u0131 yap\u0131land\u0131rma ad\u0131mlar\u0131n\u0131 ayr\u0131nt\u0131l\u0131 bir \u015fekilde inceledik. Tinc, da\u011f\u0131t\u0131k sistemler i\u00e7in esnek, g\u00fcvenli ve merkeziyetsiz bir VPN \u00e7\u00f6z\u00fcm\u00fc sunar. \u0130ki d\u00fc\u011f\u00fcml\u00fc basit bir yap\u0131land\u0131rma ile ba\u015flayarak, Tinc’in nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve temel ayarlar\u0131n\u0131n neler oldu\u011funu anlad\u0131k.<\/p>\n
Tinc’in mesh mimarisi, geleneksel istemci-sunucu VPN’lerine g\u00f6re daha fazla dayan\u0131kl\u0131l\u0131k ve esneklik sa\u011flar. Bir d\u00fc\u011f\u00fcm\u00fcn \u00e7\u00f6kmesi durumunda bile, di\u011fer d\u00fc\u011f\u00fcmlerin birbirleriyle ileti\u015fim kurmaya devam edebilmesi, \u00f6zellikle kritik altyap\u0131lar i\u00e7in \u00f6nemli bir avantajd\u0131r. Ayr\u0131ca, Tinc’in g\u00fc\u00e7l\u00fc \u015fifreleme yetenekleri sayesinde, t\u00fcnellenen t\u00fcm veriler g\u00fcvenli bir \u015fekilde aktar\u0131l\u0131r.<\/p>\n
Bu temel kurulumu tamamlad\u0131ktan sonra, Tinc’i daha karma\u015f\u0131k senaryolara (\u00f6rne\u011fin, farkl\u0131 alt a\u011flar\u0131 birbirine ba\u011flama, daha fazla d\u00fc\u011f\u00fcm ekleme, NAT ge\u00e7i\u015fi optimizasyonlar\u0131) uyarlayabilirsiniz. Tinc’in sa\u011flad\u0131\u011f\u0131 bu yetenekler, modern a\u011f altyap\u0131lar\u0131nda g\u00fcvenli ve esnek ba\u011flant\u0131 ihtiya\u00e7lar\u0131n\u0131 kar\u015f\u0131lamak i\u00e7in g\u00fc\u00e7l\u00fc bir ara\u00e7t\u0131r. Unutmay\u0131n, herhangi bir a\u011f yap\u0131land\u0131rmas\u0131nda oldu\u011fu gibi, g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131z\u0131 ve a\u011f topolojinizi dikkatlice planlamak, sorunsuz ve g\u00fcvenli bir \u00e7al\u0131\u015fma ortam\u0131 i\u00e7in hayati \u00f6neme sahiptir.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131\nTinc, \u00e7ok y\u00f6nl\u00fc ve esnek bir a\u011f sanalla\u015ft\u0131rma yaz\u0131l\u0131m\u0131d\u0131r. Geleneks","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-30659","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nTinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131\" \/>\n<meta property=\"og:description\" content=\"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 Tinc, \u00e7ok y\u00f6nl\u00fc ve esnek bir a\u011f sanalla\u015ft\u0131rma yaz\u0131l\u0131m\u0131d\u0131r. Geleneks\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-30T07:40:56+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"20 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131\",\"datePublished\":\"2025-09-30T07:40:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\"},\"wordCount\":3223,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\",\"name\":\"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-09-30T07:40:56+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131","og_description":"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 Tinc, \u00e7ok y\u00f6nl\u00fc ve esnek bir a\u011f sanalla\u015ft\u0131rma yaz\u0131l\u0131m\u0131d\u0131r. Geleneks","og_url":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-09-30T07:40:56+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"20 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131","datePublished":"2025-09-30T07:40:56+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/"},"wordCount":3223,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","url":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","name":"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-09-30T07:40:56+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-18-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Tinc Kurulumu ve Ubuntu 18.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/30659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=30659"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/30659\/revisions"}],"predecessor-version":[{"id":30660,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/30659\/revisions\/30660"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=30659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=30659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=30659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}