{"id":31615,"date":"2025-10-11T23:41:43","date_gmt":"2025-10-11T20:41:43","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=31615"},"modified":"2025-10-11T23:41:43","modified_gmt":"2025-10-11T20:41:43","slug":"giris-sshnin-temelleri-ve-onemi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/","title":{"rendered":"Giri\u015f: SSH&#8217;nin Temelleri ve \u00d6nemi"},"content":{"rendered":"<p><body><\/p>\n<h2>Giri\u015f: SSH&#8217;nin Temelleri ve \u00d6nemi<\/h2>\n<p>G\u00fcn\u00fcm\u00fcz\u00fcn birbirine ba\u011fl\u0131 d\u00fcnyas\u0131nda, uzak sunuculara veya cihazlara g\u00fcvenli bir \u015fekilde eri\u015fmek, y\u00f6netmek ve veri transferi yapmak hayati \u00f6nem ta\u015f\u0131maktad\u0131r. \u0130\u015fte tam da bu noktada Secure Shell (SSH) protokol\u00fc devreye girer. SSH, g\u00fcvensiz bir a\u011f \u00fczerinden g\u00fcvenli a\u011f hizmetleri sa\u011flamak i\u00e7in tasarlanm\u0131\u015f bir kriptografik a\u011f protokol\u00fcd\u00fcr. Geli\u015ftiricilerden sistem y\u00f6neticilerine kadar geni\u015f bir yelpazede profesyonellerin g\u00fcnl\u00fck i\u015f ak\u0131\u015f\u0131n\u0131n ayr\u0131lmaz bir par\u00e7as\u0131d\u0131r. Bu rehberde, SSH&#8217;nin alt\u0131nda yatan \u015fifreleme ve ba\u011flant\u0131 s\u00fcrecini derinlemesine inceleyecek, nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131, neden bu kadar g\u00fcvenli oldu\u011funu ve pratik kullan\u0131mda nelere dikkat etmeniz gerekti\u011fini a\u00e7\u0131klayaca\u011f\u0131z.<\/p>\n<h2>SSH Nedir ve Neden G\u00fcvenlik \u0130\u00e7in Vazge\u00e7ilmezdir?<\/h2>\n<p>SSH, &#8220;Secure Shell&#8221; kelimelerinin k\u0131saltmas\u0131d\u0131r ve genellikle uzak bir bilgisayara komut sat\u0131r\u0131 eri\u015fimi sa\u011flamak i\u00e7in kullan\u0131l\u0131r. Ancak yetenekleri sadece bununla s\u0131n\u0131rl\u0131 de\u011fildir. SSH, ayn\u0131 zamanda g\u00fcvenli dosya transferi (SFTP, SCP), port y\u00f6nlendirme (port forwarding) ve hatta X11 oturumlar\u0131 gibi \u00e7e\u015fitli a\u011f hizmetlerini de g\u00fcvenli bir \u015fekilde t\u00fcnelleyebilir. Temel amac\u0131, istemci ile sunucu aras\u0131nda kurulan ba\u011flant\u0131y\u0131 \u015fifreleyerek yetkisiz eri\u015fimi, veri s\u0131z\u0131nt\u0131s\u0131n\u0131 ve &#8220;ortadaki adam&#8221; (Man-in-the-Middle &#8211; MITM) sald\u0131r\u0131lar\u0131n\u0131 engellemektir.<\/p>\n<p>SSH&#8217;nin g\u00fcvenlik i\u00e7in vazge\u00e7ilmez olmas\u0131n\u0131n ana nedenleri \u015funlard\u0131r:<\/p>\n<ul>\n<li><strong>\u015eifreleme:<\/strong> T\u00fcm ileti\u015fim (komutlar, \u00e7\u0131kt\u0131lar, parolalar) \u015fifrelenir, b\u00f6ylece k\u00f6t\u00fc niyetli ki\u015filer taraf\u0131ndan ele ge\u00e7irilse bile okunamaz hale gelir.<\/li>\n<li><strong>Do\u011frulama (Authentication):<\/strong> Hem sunucunun istemciye hem de istemcinin sunucuya kimli\u011fini kan\u0131tlamas\u0131n\u0131 sa\u011flar. Bu, yanl\u0131\u015f bir sunucuya ba\u011flanman\u0131z\u0131 veya yetkisiz bir kullan\u0131c\u0131n\u0131n sunucuya eri\u015fmesini engeller.<\/li>\n<li><strong>B\u00fct\u00fcnl\u00fck (Integrity):<\/strong> Aktar\u0131lan verilerin de\u011fi\u015ftirilmedi\u011fini veya bozulmad\u0131\u011f\u0131n\u0131 garanti eder.<\/li>\n<\/ul>\n<p>SSH, a\u00e7\u0131k anahtarl\u0131 \u015fifreleme ve simetrik \u015fifreleme gibi modern kriptografik teknikleri bir araya getirerek bu g\u00fcvenlik seviyesini sunar. Bu, onu uzak sistem y\u00f6netimi ve veri transferi i\u00e7in alt\u0131n standart haline getirmi\u015ftir.<\/p>\n<h2>SSH Ba\u011flant\u0131 S\u00fcrecine Derinlemesine Bak\u0131\u015f<\/h2>\n<p>Bir SSH ba\u011flant\u0131s\u0131 kurmak, arka planda karma\u015f\u0131k ancak iyi tan\u0131mlanm\u0131\u015f bir dizi ad\u0131mdan olu\u015fur. Bu ad\u0131mlar, g\u00fcvenli bir oturumun anahtar de\u011fi\u015fimi, kimlik do\u011frulama ve veri \u015fifrelemesi gibi temel unsurlar\u0131n\u0131 kapsar. S\u00fcreci ana hatlar\u0131yla d\u00f6rt a\u015famada inceleyebiliriz:<\/p>\n<h3>1. Algoritma Anla\u015fmas\u0131 ve Anahtar De\u011fi\u015fimi (Key Exchange)<\/h3>\n<p>\u0130stemci (client) bir sunucuya (server) ba\u011flanmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131nda, ilk ad\u0131m hangi \u015fifreleme, do\u011frulama ve b\u00fct\u00fcnl\u00fck algoritmalar\u0131n\u0131n kullan\u0131laca\u011f\u0131 konusunda anla\u015fmakt\u0131r. Hem istemci hem de sunucu destekledi\u011fi algoritmalar\u0131n bir listesini g\u00f6nderir ve her iki taraf\u0131n da destekledi\u011fi en g\u00fc\u00e7l\u00fc algoritmalarda mutab\u0131k kal\u0131rlar.<\/p>\n<p>Bu a\u015faman\u0131n en kritik par\u00e7as\u0131, oturum i\u00e7in kullan\u0131lacak simetrik anahtar\u0131n g\u00fcvenli bir \u015fekilde olu\u015fturulmas\u0131d\u0131r. Bunun i\u00e7in genellikle Diffie-Hellman (DH) veya ElGamal gibi anahtar de\u011fi\u015fim algoritmalar\u0131 kullan\u0131l\u0131r. Bu algoritmalar, istemci ve sunucunun, a\u011f \u00fczerinde dinleme yapan birinin anahtar\u0131 \u00f6\u011frenemeyece\u011fi \u015fekilde ortak bir gizli anahtar \u00fczerinde anla\u015fmas\u0131n\u0131 sa\u011flar. Bu anahtara &#8220;oturum anahtar\u0131&#8221; denir ve t\u00fcm veri transferi boyunca simetrik \u015fifreleme i\u00e7in kullan\u0131l\u0131r. Diffie-Hellman&#8217;\u0131n \u00f6nemli bir \u00f6zelli\u011fi, &#8220;M\u00fckemmel \u0130leri Gizlilik&#8221; (Perfect Forward Secrecy &#8211; PFS) sa\u011flamas\u0131d\u0131r; yani, e\u011fer oturum anahtar\u0131 daha sonra ele ge\u00e7irilirse bile, ge\u00e7mi\u015f oturumlar\u0131n \u015fifresinin \u00e7\u00f6z\u00fclmesini imkans\u0131z k\u0131lar.<\/p>\n<pre><code class=\"language-bash\"># SSH istemcisinin destekledi\u011fi algoritmalar\u0131 g\u00f6rmek i\u00e7in\nssh -vvv user@host 2>&1 | grep \"kex algorithms\"\nssh -vvv user@host 2>&1 | grep \"cipher algorithms\"\nssh -vvv user@host 2>&1 | grep \"mac algorithms\"\n<\/code><\/pre>\n<h3>2. Sunucu Do\u011frulamas\u0131 (Host Authentication)<\/h3>\n<p>Ortak oturum anahtar\u0131 olu\u015fturulduktan sonra, istemci, ba\u011fland\u0131\u011f\u0131 sunucunun ger\u00e7ekten iddia etti\u011fi sunucu olup olmad\u0131\u011f\u0131n\u0131 do\u011frulamal\u0131d\u0131r. Bu, &#8220;ortadaki adam&#8221; sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemek i\u00e7in kritik bir ad\u0131md\u0131r. Sunucu, kendi \u00f6zel anahtar\u0131n\u0131 kullanarak istemciye bir &#8220;imza&#8221; g\u00f6nderir. \u0130stemci, sunucunun daha \u00f6nce kaydetti\u011fi genel anahtar\u0131n\u0131 (<code>~\/.ssh\/known_hosts<\/code> dosyas\u0131nda saklan\u0131r) kullanarak bu imzay\u0131 do\u011frular.<\/p>\n<ul>\n<li>E\u011fer sunucunun genel anahtar\u0131 <code>known_hosts<\/code> dosyas\u0131nda yoksa, istemci kullan\u0131c\u0131ya sunucunun parmak izini (fingerprint) g\u00f6sterir ve ba\u011flant\u0131ya devam edip etmeyece\u011fini sorar. Kullan\u0131c\u0131n\u0131n bu parmak izini g\u00fcvenilir bir kaynaktan (\u00f6rne\u011fin sunucu y\u00f6neticisinden) teyit etmesi \u015fiddetle tavsiye edilir.<\/li>\n<li>E\u011fer sunucunun genel anahtar\u0131 <code>known_hosts<\/code> dosyas\u0131nda varsa ancak mevcut anahtar ile sunucudan gelen anahtar uyu\u015fmuyorsa, SSH istemcisi bir uyar\u0131 verir ve ba\u011flant\u0131y\u0131 keser. Bu durum, sunucunun anahtar\u0131n\u0131n de\u011fi\u015fti\u011fi (\u00f6rne\u011fin sunucu yeniden kurulduysa) veya bir MITM sald\u0131r\u0131s\u0131 alt\u0131nda olundu\u011fu anlam\u0131na gelebilir.<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"># known_hosts dosyas\u0131ndaki bir kayd\u0131 g\u00f6r\u00fcnt\u00fcleme\nssh-keygen -lf ~\/.ssh\/known_hosts\n<\/code><\/pre>\n<h3>3. Kullan\u0131c\u0131 Do\u011frulamas\u0131 (User Authentication)<\/h3>\n<p>Sunucunun kimli\u011fi do\u011fruland\u0131ktan sonra, s\u0131ra istemcinin (kullan\u0131c\u0131n\u0131n) kimli\u011fini sunucuya kan\u0131tlamas\u0131na gelir. SSH, kullan\u0131c\u0131 do\u011frulama i\u00e7in birka\u00e7 y\u00f6ntem sunar:<\/p>\n<ul>\n<li><strong>Parola Tabanl\u0131 Do\u011frulama:<\/strong> En basit ve en az g\u00fcvenli y\u00f6ntemdir. Kullan\u0131c\u0131 ad\u0131 ve parola \u015fifreli kanal \u00fczerinden g\u00f6nderilir. Brute-force sald\u0131r\u0131lar\u0131na kar\u015f\u0131 savunmas\u0131zd\u0131r.<\/li>\n<li><strong>A\u00e7\u0131k Anahtar Do\u011frulamas\u0131 (Public Key Authentication):<\/strong> En g\u00fcvenli ve \u00f6nerilen y\u00f6ntemdir. Kullan\u0131c\u0131, bir anahtar \u00e7ifti (\u00f6zel anahtar ve genel anahtar) olu\u015fturur. Genel anahtar sunucudaki <code>~\/.ssh\/authorized_keys<\/code> dosyas\u0131na yerle\u015ftirilirken, \u00f6zel anahtar kullan\u0131c\u0131n\u0131n yerel makinesinde tutulur. Ba\u011flant\u0131 s\u0131ras\u0131nda sunucu bir &#8220;meydan okuma&#8221; (challenge) g\u00f6nderir ve istemci bu meydan okumay\u0131 \u00f6zel anahtar\u0131 ile \u015fifreleyip geri g\u00f6nderir. Sunucu, kullan\u0131c\u0131n\u0131n genel anahtar\u0131 ile bu \u015fifreli mesaj\u0131 do\u011frulayarak kullan\u0131c\u0131n\u0131n kimli\u011fini teyit eder. \u00d6zel anahtar hi\u00e7bir zaman a\u011f \u00fczerinden g\u00f6nderilmez.<\/li>\n<li><strong>Di\u011fer Y\u00f6ntemler:<\/strong> Klavye-etkile\u015fimli (keyboard-interactive) veya GSSAPI gibi daha az yayg\u0131n y\u00f6ntemler de mevcuttur.<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"># Anahtar \u00e7ifti olu\u015fturma (e\u011fer yoksa)\nssh-keygen -t rsa -b 4096 -C \"your_email@example.com\"\n\n<h2>Genel anahtar\u0131 sunucuya kopyalama (en kolay yol)<\/h2>\nssh-copy-id user@host\n\n<h2>Manuel olarak genel anahtar\u0131 kopyalama<\/h2>\ncat ~\/.ssh\/id_rsa.pub | ssh user@host \"mkdir -p ~\/.ssh && chmod 700 ~\/.ssh && cat >> ~\/.ssh\/authorized_keys && chmod 600 ~\/.ssh\/authorized_keys\"\n<\/code><\/pre>\n<h3>4. Oturum Kurulumu ve Veri Transferi<\/h3>\n<p>Hem sunucu hem de kullan\u0131c\u0131 kimlikleri ba\u015far\u0131yla do\u011fruland\u0131ktan sonra, g\u00fcvenli bir oturum kurulur. Bu noktadan itibaren, istemci ve sunucu aras\u0131ndaki t\u00fcm ileti\u015fim, ilk a\u015famada anla\u015f\u0131lan oturum anahtar\u0131 ve simetrik \u015fifreleme algoritmas\u0131 (\u00f6rne\u011fin AES-256, ChaCha20-Poly1305) kullan\u0131larak \u015fifrelenir. Ayr\u0131ca, verilerin b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc sa\u011flamak i\u00e7in bir Mesaj Do\u011frulama Kodu (Message Authentication Code &#8211; MAC), genellikle HMAC-SHA2, her pakete eklenir. Bu, verilerin transfer s\u0131ras\u0131nda de\u011fi\u015ftirilmedi\u011fini garanti eder.<\/p>\n<p>Kullan\u0131c\u0131 art\u0131k g\u00fcvenli bir \u015fekilde komutlar\u0131 y\u00fcr\u00fctebilir, dosya transferi yapabilir veya di\u011fer SSH tabanl\u0131 hizmetleri kullanabilir. Oturum kapat\u0131ld\u0131\u011f\u0131nda, oturum anahtar\u0131 at\u0131l\u0131r ve bir sonraki ba\u011flant\u0131 i\u00e7in yeni bir anahtar de\u011fi\u015fim s\u00fcreci ba\u015flat\u0131l\u0131r.<\/p>\n<h2>Pratik Kullan\u0131m ve G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h2>\n<p>SSH&#8217;nin temel prensiplerini anlamak, onu daha etkin ve g\u00fcvenli bir \u015fekilde kullanman\u0131z\u0131 sa\u011flar. \u0130\u015fte baz\u0131 pratik ipu\u00e7lar\u0131:<\/p>\n<ol>\n<li><strong>A\u00e7\u0131k Anahtar Do\u011frulamay\u0131 Kullan\u0131n:<\/strong> Parola tabanl\u0131 do\u011frulama yerine her zaman anahtar tabanl\u0131 do\u011frulamay\u0131 tercih edin. Bu, hem daha g\u00fcvenli hem de daha otomatiktir.<\/li>\n<li><strong>\u00d6zel Anahtarlar\u0131n\u0131z\u0131 Koruyun:<\/strong> \u00d6zel anahtar dosyan\u0131z (\u00f6rn. <code>id_rsa<\/code>) asla kimseyle payla\u015f\u0131lmamal\u0131d\u0131r. Ayr\u0131ca, \u00f6zel anahtar\u0131n\u0131z\u0131 bir parola (passphrase) ile koruyun. Bu parola, anahtar\u0131n\u0131z \u00e7al\u0131nsa bile yetkisiz kullan\u0131m\u0131n\u0131 zorla\u015ft\u0131r\u0131r.<\/li>\n<li><strong><code>ssh-agent<\/code> Kullan\u0131n:<\/strong> E\u011fer anahtarlar\u0131n\u0131z parolal\u0131 ise, her ba\u011flant\u0131da parolay\u0131 tekrar girmemek i\u00e7in <code>ssh-agent<\/code>&#8216;\u0131 kullan\u0131n. Bu ara\u00e7, anahtarlar\u0131n\u0131z\u0131n \u015fifresini bir kez \u00e7\u00f6zer ve oturumunuz boyunca bellekte tutar.<\/li>\n<li><strong><code>~\/.ssh\/config<\/code> Dosyas\u0131n\u0131 Kullan\u0131n:<\/strong> S\u0131k\u00e7a ba\u011fland\u0131\u011f\u0131n\u0131z sunucular i\u00e7in takma adlar, \u00f6zel portlar, kullan\u0131c\u0131 adlar\u0131 veya anahtar dosyalar\u0131 gibi ayarlar\u0131 bu dosyada tan\u0131mlayarak SSH kullan\u0131m\u0131n\u0131z\u0131 kolayla\u015ft\u0131r\u0131n.<\/li>\n<pre><code class=\"language-ini\"># ~\/.ssh\/config \u00f6rne\u011fi\nHost myserver\n    Hostname 192.168.1.100\n    User admin\n    Port 2222\n    IdentityFile ~\/.ssh\/id_rsa_myserver\n    ForwardAgent yes # ssh-agent'\u0131 iletmek i\u00e7in\n\nHost *\n    ServerAliveInterval 60\n    ServerAliveCountMax 3\n<\/code><\/pre>\n<li><strong><code>known_hosts<\/code> Dosyas\u0131n\u0131 Kontrol Edin:<\/strong> Bir sunucuya ilk ba\u011fland\u0131\u011f\u0131n\u0131zda g\u00f6sterilen parmak izini her zaman do\u011frulay\u0131n. E\u011fer sunucunun anahtar\u0131 de\u011fi\u015firse ve bir uyar\u0131 al\u0131rsan\u0131z, durumu ara\u015ft\u0131rmadan ba\u011flant\u0131ya devam etmeyin.<\/li>\n<li><strong>Sunucu Taraf\u0131 G\u00fcvenlik Ayarlar\u0131:<\/strong>\n<ul>\n<li><code>\/etc\/ssh\/sshd_config<\/code> dosyas\u0131nda <code>PasswordAuthentication no<\/code> yaparak parola ile giri\u015fi devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li>\n<li><code>PermitRootLogin no<\/code> ile root kullan\u0131c\u0131s\u0131n\u0131n do\u011frudan SSH ile ba\u011flanmas\u0131n\u0131 engelleyin.<\/li>\n<li>Varsay\u0131lan SSH portunu (22) de\u011fi\u015ftirmek, otomatik bot sald\u0131r\u0131lar\u0131n\u0131 azaltabilir (ancak ger\u00e7ek bir g\u00fcvenlik \u00f6nlemi de\u011fildir).<\/li>\n<li><code>Fail2ban<\/code> gibi ara\u00e7lar kullanarak ba\u015far\u0131s\u0131z giri\u015f denemelerini izleyin ve k\u00f6t\u00fc niyetli IP&#8217;leri engelleyin.<\/li>\n<\/ul>\n<\/li>\n<li><strong>SSH T\u00fcnelleme (Port Forwarding):<\/strong> G\u00fcvenli olmayan servisleri (\u00f6rne\u011fin bir veritaban\u0131 veya web aray\u00fcz\u00fc) yerel makinenize g\u00fcvenli bir \u015fekilde t\u00fcnellemek i\u00e7in SSH t\u00fcnellemesini kullan\u0131n.<\/li>\n<\/ol>\n<h2>Sonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h2>\n<p>SSH, modern bili\u015fim altyap\u0131s\u0131n\u0131n temel ta\u015flar\u0131ndan biridir. \u015eifreleme, g\u00fc\u00e7l\u00fc do\u011frulama ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fc mekanizmalar\u0131 sayesinde, uzak sistemlerle g\u00fcvenli ileti\u015fim kurmam\u0131z\u0131 sa\u011flar. Bu rehberde, SSH ba\u011flant\u0131s\u0131n\u0131n temel a\u015famalar\u0131n\u0131, anahtar de\u011fi\u015fiminden kullan\u0131c\u0131 do\u011frulamas\u0131na kadar t\u00fcm detaylar\u0131yla inceledik ve g\u00fcvenli kullan\u0131m i\u00e7in pratik ipu\u00e7lar\u0131 sunduk. SSH&#8217;nin alt\u0131nda yatan prensipleri anlamak, hem sistemlerinizi daha iyi koruman\u0131za hem de olas\u0131 g\u00fcvenlik tehditlerini daha kolay tespit etmenize yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n<h3>S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n<ol>\n<li><strong>SSH anahtarlar\u0131 neden parola (passphrase) ile korumal\u0131 olmal\u0131?<\/strong><br \/>\n        \u00d6zel anahtar\u0131n\u0131z\u0131n \u00e7al\u0131nmas\u0131 durumunda, parola olmadan sald\u0131rgan do\u011frudan sunucular\u0131n\u0131za eri\u015febilir. Parola, anahtar\u0131n\u0131za ekstra bir g\u00fcvenlik katman\u0131 ekler; sanki bir kasan\u0131n anahtar\u0131n\u0131 bir ba\u015fka kasada saklamak gibidir. Anahtar \u00e7al\u0131nsa bile, sald\u0131rgan\u0131n parolay\u0131 da k\u0131rmas\u0131 gerekir.<\/li>\n<li><strong><code>known_hosts<\/code> dosyas\u0131ndaki bir sunucunun anahtar\u0131 de\u011fi\u015firse ne yapmal\u0131y\u0131m?<\/strong><br \/>\n        SSH istemcisi bir uyar\u0131 verdi\u011finde, \u00f6ncelikle sunucu y\u00f6neticinizle ileti\u015fime ge\u00e7erek anahtar de\u011fi\u015fikli\u011finin nedenini teyit edin. E\u011fer de\u011fi\u015fiklik me\u015fru ise, <code>ssh-keygen -R hostname<\/code> komutunu kullanarak eski anahtar\u0131 <code>known_hosts<\/code> dosyas\u0131ndan kald\u0131r\u0131n ve bir sonraki ba\u011flant\u0131da yeni anahtar\u0131 kabul edin. E\u011fer nedenini teyit edemiyorsan\u0131z, bir MITM sald\u0131r\u0131s\u0131 olma ihtimaline kar\u015f\u0131 ba\u011flant\u0131y\u0131 keskin ve durumu ara\u015ft\u0131r\u0131n.<\/li>\n<li><strong>SSH portunu de\u011fi\u015ftirmek ger\u00e7ekten g\u00fcvenli\u011fi art\u0131r\u0131r m\u0131?<\/strong><br \/>\n        SSH portunu varsay\u0131lan 22&#8217;den ba\u015fka bir porta de\u011fi\u015ftirmek, &#8220;security by obscurity&#8221; (gizleyerek g\u00fcvenlik sa\u011flama) olarak bilinir. Bu, do\u011frudan bir g\u00fcvenlik \u00f6nlemi olmaktan ziyade, otomatik botlar\u0131n ve basit taramalar\u0131n hedefi olmaktan kurtulmaya yard\u0131mc\u0131 olur, b\u00f6ylece sunucu loglar\u0131n\u0131zdaki g\u00fcr\u00fclt\u00fcy\u00fc azalt\u0131r. Ancak, kararl\u0131 bir sald\u0131rgan yine de portunuzu bulabilir. As\u0131l g\u00fcvenlik, g\u00fc\u00e7l\u00fc anahtar tabanl\u0131 do\u011frulama ve g\u00fcncel \u015fifreleme algoritmalar\u0131 kullanmaktan gelir.<\/li>\n<li><strong>SSH t\u00fcnelleme (port forwarding) nedir?<\/strong><br \/>\n        SSH t\u00fcnelleme, g\u00fcvenli SSH ba\u011flant\u0131s\u0131 \u00fczerinden ba\u015fka bir a\u011f hizmetini y\u00f6nlendirme (t\u00fcnelleme) yetene\u011fidir. Bu, yerel (local), uzak (remote) veya dinamik (dynamic) olabilir. \u00d6rne\u011fin, yerel bir portu uzak bir sunucudaki bir veritaban\u0131 portuna y\u00f6nlendirerek, bu veritaban\u0131na do\u011frudan eri\u015fim sa\u011flamadan g\u00fcvenli bir \u015fekilde ba\u011flanabilirsiniz.<\/li>\n<pre><code class=\"language-bash\"># \u00d6rnek: Uzak sunucudaki 8080 portunu yerel makinenin 9000 portuna t\u00fcnelleme\nssh -L 9000:localhost:8080 user@remote_server\n<\/code><\/pre>\n<li><strong>Perfect Forward Secrecy (PFS) SSH&#8217;de ne anlama gelir?<\/strong><br \/>\n        PFS, bir oturum i\u00e7in kullan\u0131lan anahtar\u0131n (oturum anahtar\u0131) yaln\u0131zca o oturum i\u00e7in ge\u00e7erli oldu\u011fu ve gelecekteki veya ge\u00e7mi\u015fteki di\u011fer oturumlarla ba\u011flant\u0131l\u0131 olmad\u0131\u011f\u0131 anlam\u0131na gelir. SSH&#8217;de Diffie-Hellman anahtar de\u011fi\u015fimi sayesinde PFS sa\u011flan\u0131r. Bu, e\u011fer sunucunun uzun vadeli \u00f6zel anahtar\u0131 bir g\u00fcn ele ge\u00e7irilirse bile, ge\u00e7mi\u015f oturumlar\u0131n \u015fifresinin \u00e7\u00f6z\u00fclemeyece\u011fi anlam\u0131na gelir. Her oturum i\u00e7in yeni, tek kullan\u0131ml\u0131k bir anahtar olu\u015fturulur.<\/li>\n<\/ol>\n<p><\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Giri\u015f: SSH&#8217;nin Temelleri ve \u00d6nemi\nG\u00fcn\u00fcm\u00fcz\u00fcn birbirine ba\u011fl\u0131 d\u00fcnyas\u0131nda, uzak sunuculara veya cihazlara g\u00fcvenli bir \u015fekilde eri\u015fmek, y\u00f6","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-31615","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Giri\u015f: SSH&#039;nin Temelleri ve \u00d6nemi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Giri\u015f: SSH&#039;nin Temelleri ve \u00d6nemi\" \/>\n<meta property=\"og:description\" content=\"Giri\u015f: SSH&#039;nin Temelleri ve \u00d6nemi G\u00fcn\u00fcm\u00fcz\u00fcn birbirine ba\u011fl\u0131 d\u00fcnyas\u0131nda, uzak sunuculara veya cihazlara g\u00fcvenli bir \u015fekilde eri\u015fmek, y\u00f6\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-11T20:41:43+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Giri\u015f: SSH&#8217;nin Temelleri ve \u00d6nemi\",\"datePublished\":\"2025-10-11T20:41:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/\"},\"wordCount\":1962,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/\",\"name\":\"Giri\u015f: SSH'nin Temelleri ve \u00d6nemi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-10-11T20:41:43+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Giri\u015f: SSH&#8217;nin Temelleri ve \u00d6nemi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Giri\u015f: SSH'nin Temelleri ve \u00d6nemi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/","og_locale":"tr_TR","og_type":"article","og_title":"Giri\u015f: SSH'nin Temelleri ve \u00d6nemi","og_description":"Giri\u015f: SSH'nin Temelleri ve \u00d6nemi G\u00fcn\u00fcm\u00fcz\u00fcn birbirine ba\u011fl\u0131 d\u00fcnyas\u0131nda, uzak sunuculara veya cihazlara g\u00fcvenli bir \u015fekilde eri\u015fmek, y\u00f6","og_url":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-10-11T20:41:43+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"11 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Giri\u015f: SSH&#8217;nin Temelleri ve \u00d6nemi","datePublished":"2025-10-11T20:41:43+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/"},"wordCount":1962,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/","url":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/","name":"Giri\u015f: SSH'nin Temelleri ve \u00d6nemi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-10-11T20:41:43+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/giris-sshnin-temelleri-ve-onemi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Giri\u015f: SSH&#8217;nin Temelleri ve \u00d6nemi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/31615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=31615"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/31615\/revisions"}],"predecessor-version":[{"id":31616,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/31615\/revisions\/31616"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=31615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=31615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=31615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}