{"id":33232,"date":"2025-10-31T09:41:09","date_gmt":"2025-10-31T06:41:09","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=33232"},"modified":"2025-10-31T09:41:09","modified_gmt":"2025-10-31T06:41:09","slug":"ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/","title":{"rendered":"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber"},"content":{"rendered":"

<\/p>\n

Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber<\/h2>\n

Sanalla\u015fma ve uzaktan \u00e7al\u0131\u015fma \u00e7a\u011f\u0131nda, g\u00fcvenli a\u011f ba\u011flant\u0131lar\u0131 her zamankinden daha \u00f6nemli hale gelmi\u015ftir. Sanal \u00d6zel A\u011flar (VPN’ler), internet \u00fczerinden g\u00fcvenli ve \u015fifreli bir t\u00fcnel olu\u015fturarak bu ihtiyac\u0131 kar\u015f\u0131lar. Bu sayede, halka a\u00e7\u0131k Wi-Fi a\u011flar\u0131nda bile verilerinizin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc koruyabilirsiniz. OpenVPN, a\u00e7\u0131k kaynak kodlu, esnek ve olduk\u00e7a g\u00fcvenli bir VPN \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Bu makalede, Ubuntu 18.04 i\u015fletim sistemi \u00fczerinde kendi OpenVPN sunucunuzu ad\u0131m ad\u0131m nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ve yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 ayr\u0131nt\u0131l\u0131 bir \u015fekilde ele alaca\u011f\u0131z.<\/p>\n

Giri\u015f: OpenVPN ve G\u00fcvenli Ba\u011flant\u0131n\u0131n \u00d6nemi<\/h3>\n

G\u00fcn\u00fcm\u00fczde internet kullan\u0131m\u0131, ki\u015fisel verilerden kurumsal bilgilere kadar geni\u015f bir yelpazeyi kapsar. Bu verilerin g\u00fcvenli bir \u015fekilde aktar\u0131lmas\u0131, siber sald\u0131r\u0131lara ve veri s\u0131z\u0131nt\u0131lar\u0131na kar\u015f\u0131 korunmak i\u00e7in hayati \u00f6neme sahiptir. VPN’ler, internet trafi\u011finizi \u015fifreleyerek ve verilerinizi anonimle\u015ftirerek bu g\u00fcvenli\u011fi sa\u011flar.<\/p>\n

OpenVPN, end\u00fcstri standard\u0131 \u015fifreleme algoritmalar\u0131 (AES-256 gibi) ve SSL\/TLS tabanl\u0131 kimlik do\u011frulama y\u00f6ntemleri kullanarak y\u00fcksek d\u00fczeyde g\u00fcvenlik sunar. Esnekli\u011fi sayesinde, farkl\u0131 a\u011f topolojilerine ve g\u00fcvenlik gereksinimlerine uyarlanabilir. Ubuntu 18.04 ise kararl\u0131l\u0131\u011f\u0131, geni\u015f topluluk deste\u011fi ve a\u00e7\u0131k kaynak ekosistemiyle OpenVPN sunucusu kurmak i\u00e7in ideal bir platformdur. Bu rehber, ki\u015fisel kullan\u0131m\u0131n\u0131zdan k\u00fc\u00e7\u00fck \u00f6l\u00e7ekli i\u015fletme ihtiya\u00e7lar\u0131n\u0131za kadar \u00e7e\u015fitli senaryolar i\u00e7in g\u00fcvenli bir OpenVPN sunucusu olu\u015fturman\u0131za yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n

\u00d6n Gereksinimler<\/h3>\n

Kuruluma ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6n gereksinimleri kar\u015f\u0131lad\u0131\u011f\u0131n\u0131zdan emin olun:<\/p>\n

* Ubuntu 18.04 Sunucusu:<\/strong> \u0130nternet eri\u015fimi olan ve sudo yetkilerine sahip bir Ubuntu 18.04 sunucusu. Bu bir bulut sunucusu (AWS, DigitalOcean, Linode vb.) veya yerel a\u011f\u0131n\u0131zdaki bir sanal\/fiziksel makine olabilir.
\n* SSH Eri\u015fimi:<\/strong> Sunucunuza SSH ile uzaktan eri\u015fim sa\u011flayabilmelisiniz.
\n* Statik Genel IP Adresi:<\/strong> Sunucunuzun sabit bir genel IP adresine sahip olmas\u0131, istemcilerin sunucuya her zaman ayn\u0131 adresten eri\u015fmesini sa\u011flar. Dinamik IP kullan\u0131yorsan\u0131z, bir DDNS (Dinamik DNS) hizmeti kurman\u0131z gerekebilir.
\n* G\u00fcvenlik Duvar\u0131 Bilgisi:<\/strong> Ubuntu’da varsay\u0131lan olarak gelen UFW (Uncomplicated Firewall) veya ba\u015fka bir g\u00fcvenlik duvar\u0131 hakk\u0131nda temel bilgi.<\/p>\n

Ad\u0131m 1: Sunucuyu G\u00fcncelleme ve Gerekli Paketleri Kurma<\/h3>\n

Herhangi bir kurulum i\u015flemine ba\u015flamadan \u00f6nce, sunucunuzun paket listesini g\u00fcncellemek ve mevcut paketleri y\u00fckseltmek iyi bir uygulamad\u0131r. Bu, en son g\u00fcvenlik yamalar\u0131n\u0131 ve yaz\u0131l\u0131m s\u00fcr\u00fcmlerini alman\u0131z\u0131 sa\u011flar.<\/p>\n

Sunucunuza SSH ile ba\u011flan\u0131n ve a\u015fa\u011f\u0131daki komutlar\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n

sudo apt update\nsudo apt upgrade -y<\/code><\/pre>\n
Ard\u0131ndan, OpenVPN sunucusunu ve sertifika olu\u015fturmak i\u00e7in kullanaca\u011f\u0131m\u0131z easy-rsa<\/code> paketini kurun:<\/p>\n
sudo apt install openvpn easy-rsa -y<\/code><\/pre>\n
easy-rsa<\/code>, OpenVPN i\u00e7in gerekli olan SSL\/TLS sertifikalar\u0131n\u0131 ve anahtarlar\u0131n\u0131 kolayca olu\u015fturman\u0131z\u0131 sa\u011flayan bir betik koleksiyonudur.<\/p>\n
Ad\u0131m 2: Kolay RSA (Easy-RSA) Yap\u0131land\u0131rmas\u0131 ve Sertifika Otoritesi (CA) Olu\u015fturma<\/h3>\n
OpenVPN, istemciler ve sunucu aras\u0131nda g\u00fcvenli bir ba\u011flant\u0131 kurmak i\u00e7in SSL\/TLS sertifikalar\u0131n\u0131 kullan\u0131r. Bu sertifikalar, bir Sertifika Otoritesi (CA) taraf\u0131ndan imzalan\u0131r. easy-rsa<\/code> arac\u0131, bu CA’y\u0131 ve di\u011fer t\u00fcm sertifikalar\u0131 olu\u015fturmak i\u00e7in kullan\u0131l\u0131r.<\/p>\n
\u0130lk olarak, easy-rsa<\/code> dosyalar\u0131n\u0131 g\u00fcvenli bir konuma kopyalayal\u0131m. Genellikle \/etc\/openvpn\/easy-rsa<\/code> dizini tercih edilir:<\/p>\n
sudo mkdir \/etc\/openvpn\/easy-rsa\nsudo cp -r \/usr\/share\/easy-rsa\/* \/etc\/openvpn\/easy-rsa\/\nsudo chown -R $USER \/etc\/openvpn\/easy-rsa # Ge\u00e7ici olarak kendi kullan\u0131c\u0131n\u0131za yetki verin<\/code><\/pre>\n
\u015eimdi easy-rsa<\/code> dizinine ge\u00e7in:<\/p>\n
cd \/etc\/openvpn\/easy-rsa<\/code><\/pre>\n
Bu dizin i\u00e7inde, CA’n\u0131z\u0131n ve sertifikalar\u0131n\u0131z\u0131n varsay\u0131lan de\u011ferlerini i\u00e7eren bir vars<\/code> dosyas\u0131 bulunur. Bu dosyay\u0131 d\u00fczenleyerek kendi bilgilerinizi girebilirsiniz. Ubuntu 18.04 \u00fczerindeki Easy-RSA 3 i\u00e7in bu dosya genellikle vars.example<\/code> olarak adland\u0131r\u0131l\u0131r ve pki\/<\/code> dizini kullan\u0131lmaz. Do\u011frudan easyrsa<\/code> komutlar\u0131 ile \u00e7al\u0131\u015f\u0131l\u0131r.<\/p>\n
Easy-RSA 3’te, vars<\/code> dosyas\u0131n\u0131 d\u00fczenlemek yerine, \u00e7o\u011fu ayar komut sat\u0131r\u0131 arg\u00fcmanlar\u0131 ile veya pki\/vars<\/code> dosyas\u0131 olu\u015fturularak yap\u0131l\u0131r. Ancak, varsay\u0131lan de\u011ferleri de\u011fi\u015ftirmek istiyorsan\u0131z, vars<\/code> dosyas\u0131n\u0131 d\u00fczenleyebilirsiniz.<\/p>\n
Biz do\u011frudan komutlarla ilerleyelim. \u0130lk olarak bir PKI (Public Key Infrastructure) ba\u015flat\u0131n:<\/p>\n
.\/easyrsa init-pki<\/code><\/pre>\n
\u015eimdi Sertifika Otoritesi (CA) olu\u015ftural\u0131m. Bu CA, t\u00fcm sunucu ve istemci sertifikalar\u0131n\u0131 imzalayacakt\u0131r. CA anahtar\u0131n\u0131z i\u00e7in bir parola belirlemeniz istenecektir. Bu parolay\u0131 g\u00fcvenli bir yerde saklay\u0131n.<\/p>\n
.\/easyrsa build-ca nopass # E\u011fer parola istemiyorsan\u0131z 'nopass' kullan\u0131n<\/code><\/pre>\n
nopass<\/code> kullanmak, CA anahtar\u0131n\u0131n parolas\u0131z olaca\u011f\u0131 anlam\u0131na gelir. Bu, otomasyon i\u00e7in uygun olabilir ancak g\u00fcvenlik a\u00e7\u0131s\u0131ndan bir parola kullanmak daha iyidir. E\u011fer parola kullanmak isterseniz nopass<\/code> arg\u00fcman\u0131n\u0131 kald\u0131r\u0131n. Sizden bir “Common Name” (Ortak Ad) girmeniz istenecektir. Varsay\u0131lan\u0131 (Easy-RSA CA<\/code>) kabul edebilir veya kendi ad\u0131n\u0131z\u0131 girebilirsiniz.<\/p>\n
Ad\u0131m 3: Sunucu Sertifikas\u0131 ve Anahtar\u0131 Olu\u015fturma<\/h3>\n
CA olu\u015fturulduktan sonra, OpenVPN sunucunuz i\u00e7in bir sertifika ve \u00f6zel anahtar olu\u015fturman\u0131z gerekir.<\/p>\n
Sunucu anahtar \u00e7iftini olu\u015fturun. Yine bir parola belirlemeniz istenecektir. nopass<\/code> kullanarak parolas\u0131z bir anahtar olu\u015fturabilirsiniz:<\/p>\n
.\/easyrsa gen-req server nopass<\/code><\/pre>\n
Ortak Ad (Common Name) i\u00e7in server<\/code> olarak girmeniz \u00f6nerilir.<\/p>\n
\u015eimdi sunucu sertifikas\u0131n\u0131 CA ile imzalay\u0131n. Bu, CA’n\u0131z\u0131n sunucu sertifikas\u0131na g\u00fcvendi\u011fini g\u00f6sterir:<\/p>\n
.\/easyrsa sign-req server server<\/code><\/pre>\n
Onaylamak i\u00e7in yes<\/code> yaz\u0131n.<\/p>\n
Son olarak, Diffie-Hellman (DH) parametrelerini olu\u015fturun. Bu, OpenVPN’in istemcilerle g\u00fcvenli anahtar de\u011fi\u015fimi yapmas\u0131n\u0131 sa\u011flar. Bu i\u015flem biraz zaman alabilir (2048 bit i\u00e7in birka\u00e7 dakika, 4096 bit i\u00e7in daha uzun s\u00fcrebilir):<\/p>\n
.\/easyrsa gen-dh<\/code><\/pre>\n
Ek bir g\u00fcvenlik katman\u0131 olarak TLS kimlik do\u011frulama anahtar\u0131 (ta.key) olu\u015fturun. Bu anahtar, sunucu ve istemci aras\u0131nda DoS sald\u0131r\u0131lar\u0131n\u0131 ve UDP port taramalar\u0131n\u0131 \u00f6nlemeye yard\u0131mc\u0131 olur:<\/p>\n
openvpn --genkey --secret ta.key<\/code><\/pre>\n
\u015eimdi t\u00fcm olu\u015fturulan sertifika ve anahtar dosyalar\u0131n\u0131 OpenVPN’in kullanaca\u011f\u0131 dizine kopyalamam\u0131z gerekiyor. Bu dizin genellikle \/etc\/openvpn<\/code>‘dir.<\/p>\n
sudo cp pki\/ca.crt \/etc\/openvpn\/\nsudo cp pki\/issued\/server.crt \/etc\/openvpn\/\nsudo cp pki\/private\/server.key \/etc\/openvpn\/\nsudo cp pki\/dh.pem \/etc\/openvpn\/dh.pem\nsudo cp ta.key \/etc\/openvpn\/<\/code><\/pre>\n
Yetkileri tekrar root<\/code> kullan\u0131c\u0131s\u0131na verelim:<\/p>\n
sudo chown -R root:root \/etc\/openvpn\/easy-rsa<\/code><\/pre>\n
Ad\u0131m 4: OpenVPN Yap\u0131land\u0131rma Dosyalar\u0131n\u0131 Olu\u015fturma<\/h3>\n
\u015eimdi OpenVPN sunucusunun nas\u0131l \u00e7al\u0131\u015faca\u011f\u0131n\u0131 belirleyecek olan yap\u0131land\u0131rma dosyas\u0131n\u0131 olu\u015fturaca\u011f\u0131z: \/etc\/openvpn\/server.conf<\/code>.<\/p>\n
Bu dosyay\u0131 bir metin d\u00fczenleyici ile a\u00e7\u0131n:<\/p>\n
sudo nano \/etc\/openvpn\/server.conf<\/code><\/pre>\n
A\u015fa\u011f\u0131daki yap\u0131land\u0131rma i\u00e7eri\u011fini dosyaya yap\u0131\u015ft\u0131r\u0131n. Her bir sat\u0131r\u0131n ne anlama geldi\u011fini a\u00e7\u0131klayaca\u011f\u0131m:<\/p>\n
port 1194\nproto udp\ndev tun\nca ca.crt\ncert server.crt\nkey server.key\ndh dh.pem\nauth SHA256\ntls-auth ta.key 0\ntopology subnet\nserver 10.8.0.0 255.255.255.0\nifconfig-pool-persist ipp.txt\npush \"redirect-gateway def1 bypass-dhcp\"\npush \"dhcp-option DNS 8.8.8.8\"\npush \"dhcp-option DNS 8.8.4.4\"\nkeepalive 10 120\ncipher AES-256-CBC\ncompress lzo\nuser nobody\ngroup nogroup\npersist-key\npersist-tun\nstatus openvpn-status.log\nverb 3\nexplicit-exit-notify 1<\/code><\/pre>\n
\u015eimdi bu yap\u0131land\u0131rma direktiflerini a\u00e7\u0131klayal\u0131m:<\/p>\n
*   port 1194<\/code><\/strong>: OpenVPN’in dinleyece\u011fi port numaras\u0131. Varsay\u0131lan 1194’t\u00fcr.
\n*   proto udp<\/code><\/strong>: \u0130leti\u015fim protokol\u00fc. UDP, TCP’ye g\u00f6re daha h\u0131zl\u0131d\u0131r ve genellikle VPN i\u00e7in tercih edilir.
\n*   dev tun<\/code><\/strong>: Sanal a\u011f aray\u00fcz\u00fc tipi. tun<\/code> IP katman\u0131 (Katman 3) t\u00fcnellemesi sa\u011flar.
\n*   ca ca.crt<\/code><\/strong>: Sertifika Otoritesi (CA) sertifika dosyas\u0131n\u0131n yolu.
\n*   cert server.crt<\/code><\/strong>: Sunucu sertifika dosyas\u0131n\u0131n yolu.
\n*   key server.key<\/code><\/strong>: Sunucu \u00f6zel anahtar dosyas\u0131n\u0131n yolu.
\n*   dh dh.pem<\/code><\/strong>: Diffie-Hellman parametreleri dosyas\u0131n\u0131n yolu.
\n*   auth SHA256<\/code><\/strong>: Veri kanal\u0131 i\u00e7in kullan\u0131lacak kimlik do\u011frulama algoritmas\u0131.
\n*   tls-auth ta.key 0<\/code><\/strong>: TLS kimlik do\u011frulama anahtar\u0131n\u0131 etkinle\u015ftirir. 0<\/code> sunucu taraf\u0131n\u0131 belirtir.
\n*   topology subnet<\/code><\/strong>: \u0130stemcilere IP adreslerinin alt a\u011f \u015feklinde atanmas\u0131n\u0131 sa\u011flar. Bu, Windows istemcileri i\u00e7in genellikle daha iyi \u00e7al\u0131\u015f\u0131r.
\n*   server 10.8.0.0 255.255.255.0<\/code><\/strong>: OpenVPN sunucusunun kullanaca\u011f\u0131 VPN alt a\u011f\u0131. \u0130stemciler bu a\u011fdan IP adresi alacakt\u0131r. Bu a\u011f\u0131n yerel a\u011f\u0131n\u0131zla \u00e7ak\u0131\u015fmad\u0131\u011f\u0131ndan emin olun.
\n*   ifconfig-pool-persist ipp.txt<\/code><\/strong>: \u0130stemci IP adreslerinin bir dosyaya kaydedilmesini sa\u011flar, b\u00f6ylece bir istemci yeniden ba\u011fland\u0131\u011f\u0131nda ayn\u0131 IP adresini al\u0131r.
\n*   push \"redirect-gateway def1 bypass-dhcp\"<\/code><\/strong>: \u0130stemcilere t\u00fcm trafi\u011fi VPN \u00fczerinden y\u00f6nlendirmelerini s\u00f6yler. def1<\/code> varsay\u0131lan a\u011f ge\u00e7idi tan\u0131m\u0131n\u0131 zorlar, bypass-dhcp<\/code> ise DHCP ile ilgili sorunlar\u0131 \u00f6nler.
\n*   push \"dhcp-option DNS 8.8.8.8\"<\/code><\/strong>: \u0130stemcilere Google’\u0131n DNS sunucular\u0131n\u0131 kullanmalar\u0131n\u0131 s\u00f6yler. \u0130sterseniz farkl\u0131 DNS sunucular\u0131 (\u00f6rn. Cloudflare 1.1.1.1, OpenDNS 208.67.222.222) veya kendi DNS sunucunuzu kullanabilirsiniz.
\n*   keepalive 10 120<\/code><\/strong>: Ba\u011flant\u0131n\u0131n canl\u0131 kalmas\u0131n\u0131 sa\u011flamak i\u00e7in ping aral\u0131klar\u0131n\u0131 belirler. 10 saniyede bir ping g\u00f6nderilir, 120 saniye i\u00e7inde yan\u0131t al\u0131nmazsa ba\u011flant\u0131 kesilir.
\n*   cipher AES-256-CBC<\/code><\/strong>: Veri kanal\u0131 i\u00e7in kullan\u0131lacak \u015fifreleme algoritmas\u0131. AES-256-CBC g\u00fc\u00e7l\u00fc bir se\u00e7imdir.
\n*   compress lzo<\/code><\/strong>: VPN ba\u011flant\u0131s\u0131 \u00fczerinden veri s\u0131k\u0131\u015ft\u0131rmay\u0131 etkinle\u015ftirir. Performans\u0131 art\u0131rabilir. (Not: OpenVPN’in daha yeni s\u00fcr\u00fcmlerinde compress<\/code> yerine lz4<\/code> veya zstd<\/code> \u00f6nerilir, ancak 18.04’te lzo<\/code> hala yayg\u0131n ve desteklenir.)
\n*   user nobody<\/code><\/strong>: OpenVPN’in \u00e7al\u0131\u015faca\u011f\u0131 ayr\u0131cal\u0131ks\u0131z kullan\u0131c\u0131.
\n*   group nogroup<\/code><\/strong>: OpenVPN’in \u00e7al\u0131\u015faca\u011f\u0131 ayr\u0131cal\u0131ks\u0131z grup.
\n*   persist-key<\/code><\/strong>: Yeniden ba\u015flatmalarda \u00f6zel anahtarlar\u0131n yeniden y\u00fcklenmesini engeller.
\n*   persist-tun<\/code><\/strong>: Yeniden ba\u015flatmalarda TUN cihaz\u0131n\u0131n yeniden ba\u015flat\u0131lmas\u0131n\u0131 engeller.
\n*   status openvpn-status.log<\/code><\/strong>: Ba\u011flant\u0131 durumunun yaz\u0131laca\u011f\u0131 log dosyas\u0131.
\n*   verb 3<\/code><\/strong>: Loglama detay seviyesi. 3, \u00e7o\u011fu sorun giderme i\u00e7in yeterlidir.
\n*   explicit-exit-notify 1<\/code><\/strong>: \u0130stemcilere sunucu ba\u011flant\u0131s\u0131n\u0131n kesildi\u011fini bildirir.<\/p>\n
Dosyay\u0131 kaydedin ve kapat\u0131n (CTRL+O, Enter, CTRL+X).<\/p>\n
Ad\u0131m 5: A\u011f Y\u00f6nlendirmeyi Etkinle\u015ftirme<\/h3>\n
OpenVPN sunucusu, istemcilerden gelen trafi\u011fi internete y\u00f6nlendirebilmek i\u00e7in IP y\u00f6nlendirmeyi etkinle\u015ftirmelidir.<\/p>\n
\/etc\/sysctl.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyin:<\/p>\n
sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n
Dosyada a\u015fa\u011f\u0131daki sat\u0131r\u0131 bulun ve ba\u015f\u0131ndaki #<\/code> i\u015faretini kald\u0131rarak etkinle\u015ftirin (veya yoksa ekleyin):<\/p>\n
net.ipv4.ip_forward = 1<\/code><\/pre>\n
Dosyay\u0131 kaydedin ve kapat\u0131n. De\u011fi\u015fiklikleri uygulamak i\u00e7in a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
sudo sysctl -p<\/code><\/pre>\n
Ad\u0131m 6: G\u00fcvenlik Duvar\u0131n\u0131 Yap\u0131land\u0131rma (UFW)<\/h3>\n
OpenVPN sunucusunun \u00e7al\u0131\u015fabilmesi i\u00e7in g\u00fcvenlik duvar\u0131nda gerekli portlar\u0131n a\u00e7\u0131lmas\u0131 ve NAT (Network Address Translation) kurallar\u0131n\u0131n eklenmesi gerekmektedir. Ubuntu’da UFW (Uncomplicated Firewall) kullanaca\u011f\u0131z.<\/p>\n
\u0130lk olarak, UFW’nin varsay\u0131lan politikalar\u0131n\u0131 ayarlayal\u0131m. Giden ba\u011flant\u0131lara izin verip, gelen ba\u011flant\u0131lar\u0131 reddedece\u011fiz:<\/p>\n
sudo ufw default deny incoming\nsudo ufw default allow outgoing<\/code><\/pre>\n
\u015eimdi SSH ba\u011flant\u0131lar\u0131na izin verin (genellikle 22\/TCP):<\/p>\n
sudo ufw allow ssh<\/code><\/pre>\n
OpenVPN sunucusunun dinledi\u011fi porta (varsay\u0131lan 1194\/UDP) izin verin:<\/p>\n
sudo ufw allow 1194\/udp<\/code><\/pre>\n
\u015eimdi NAT kurallar\u0131n\u0131 yap\u0131land\u0131rmam\u0131z gerekiyor. UFW, varsay\u0131lan olarak NAT kurallar\u0131n\u0131 \/etc\/ufw\/before.rules<\/code> dosyas\u0131na eklememize izin verir.<\/p>\n
Bu dosyay\u0131 a\u00e7\u0131n:<\/p>\n
sudo nano \/etc\/ufw\/before.rules<\/code><\/pre>\n
Dosyan\u0131n en ba\u015f\u0131na, # START OPENVPN RULES<\/code> ve # END OPENVPN RULES<\/code> yorumlar\u0131 aras\u0131na a\u015fa\u011f\u0131daki kurallar\u0131 ekleyin. YOUR_SERVER_PUBLIC_IP<\/code><\/strong> yerine sunucunuzun genel IP adresini yazmay\u0131 unutmay\u0131n. E\u011fer dinamik IP kullan\u0131yorsan\u0131z bu kural\u0131 dikkatli uygulay\u0131n veya bir DDNS servisi kullan\u0131n.<\/p>\n
# START OPENVPN RULES\n
Allow traffic from OpenVPN client to tun0<\/h2>\n-A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE\n
Allow traffic from OpenVPN client to eth0 (replace eth0 with your public network interface)<\/h2>\n-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A FORWARD -s 10.8.0.0\/24 -o eth0 -j ACCEPT\n
END OPENVPN RULES<\/code><\/pre>\n<\/h2>\n
\u00d6nemli:<\/strong> Yukar\u0131daki eth0<\/code> ifadesini sunucunuzun genel a\u011f aray\u00fcz\u00fc ad\u0131 ile de\u011fi\u015ftirmelisiniz. \u00c7o\u011fu bulut sa\u011flay\u0131c\u0131s\u0131nda eth0<\/code> veya ens3<\/code> gibi isimler kullan\u0131l\u0131r. A\u011f aray\u00fcz\u00fcn\u00fcz\u00fcn ad\u0131n\u0131 \u00f6\u011frenmek i\u00e7in ip a<\/code> komutunu kullanabilirsiniz. 10.8.0.0\/24<\/code> OpenVPN a\u011f\u0131n\u0131zd\u0131r, e\u011fer server.conf<\/code> dosyas\u0131nda farkl\u0131 bir a\u011f kulland\u0131ysan\u0131z buray\u0131 da g\u00fcncelleyin.<\/p>\n
Dosyay\u0131 kaydedin ve kapat\u0131n.<\/p>\n
Son olarak, UFW’nin DEFAULT_FORWARD_POLICY<\/code> ayar\u0131n\u0131 de\u011fi\u015ftirmemiz gerekiyor. \/etc\/default\/ufw<\/code> dosyas\u0131n\u0131 a\u00e7\u0131n:<\/p>\n
sudo nano \/etc\/default\/ufw<\/code><\/pre>\n
A\u015fa\u011f\u0131daki sat\u0131r\u0131 bulun ve de\u011ferini ACCEPT<\/code> olarak de\u011fi\u015ftirin:<\/p>\n
DEFAULT_FORWARD_POLICY=\"ACCEPT\"<\/code><\/pre>\n
Dosyay\u0131 kaydedin ve kapat\u0131n.<\/p>\n
\u015eimdi UFW’yi etkinle\u015ftirin ve kurallar\u0131 yeniden y\u00fckleyin:<\/p>\n
sudo ufw disable\nsudo ufw enable<\/code><\/pre>\n
Bir uyar\u0131 mesaj\u0131 alabilirsiniz. y<\/code> yazarak onaylay\u0131n.<\/p>\n
UFW durumunu kontrol edin:<\/p>\n
sudo ufw status<\/code><\/pre>\n
\u00c7\u0131kt\u0131da SSH ve OpenVPN portlar\u0131n\u0131n izinli oldu\u011funu ve NAT kurallar\u0131n\u0131n etkin oldu\u011funu g\u00f6rmelisiniz.<\/p>\n
Ad\u0131m 7: OpenVPN Sunucusunu Ba\u015flatma ve Etkinle\u015ftirme<\/h3>\n
T\u00fcm yap\u0131land\u0131rmalar tamamland\u0131ktan sonra OpenVPN sunucusunu ba\u015flatabiliriz.<\/p>\n
sudo systemctl start openvpn@server<\/code><\/pre>\n
Sunucunun sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131n\u0131 sa\u011flamak i\u00e7in etkinle\u015ftirin:<\/p>\n
sudo systemctl enable openvpn@server<\/code><\/pre>\n
Sunucunun durumunu kontrol ederek d\u00fczg\u00fcn \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 do\u011frulayabilirsiniz:<\/p>\n
sudo systemctl status openvpn@server<\/code><\/pre>\n
E\u011fer her \u015fey yolundaysa, active (running)<\/code> durumunu g\u00f6rmelisiniz. Herhangi bir hata durumunda, loglar\u0131 kontrol etmek i\u00e7in a\u015fa\u011f\u0131daki komutu kullanabilirsiniz:<\/p>\n
sudo journalctl -u openvpn@server -f<\/code><\/pre>\n
Ad\u0131m 8: \u0130stemci Yap\u0131land\u0131rma Dosyalar\u0131n\u0131 Olu\u015fturma<\/h3>\n
\u0130stemcilerin OpenVPN sunucusuna ba\u011flanabilmesi i\u00e7in kendi sertifikalar\u0131na ve bir yap\u0131land\u0131rma dosyas\u0131na ihtiya\u00e7lar\u0131 vard\u0131r. Her istemci i\u00e7in benzersiz bir sertifika ve anahtar \u00e7ifti olu\u015fturmak en iyi g\u00fcvenlik uygulamas\u0131d\u0131r.<\/p>\n
\u00d6nceki Easy-RSA dizinine geri d\u00f6n\u00fcn:<\/p>\n
cd \/etc\/openvpn\/easy-rsa<\/code><\/pre>\n
Bir istemci anahtar \u00e7ifti olu\u015fturun. \u00d6rne\u011fin client1<\/code> ad\u0131nda bir istemci i\u00e7in:<\/p>\n
.\/easyrsa gen-req client1 nopass<\/code><\/pre>\n
Ortak Ad (Common Name) i\u00e7in client1<\/code> girin.<\/p>\n
\u015eimdi istemci sertifikas\u0131n\u0131 CA ile imzalay\u0131n:<\/p>\n
.\/easyrsa sign-req client client1<\/code><\/pre>\n
Onaylamak i\u00e7in yes<\/code> yaz\u0131n.<\/p>\n
Art\u0131k client1<\/code> i\u00e7in gerekli t\u00fcm dosyalar olu\u015fturuldu. \u015eimdi bu dosyalar\u0131 ve di\u011fer OpenVPN yap\u0131land\u0131rma bilgilerini i\u00e7eren bir istemci yap\u0131land\u0131rma dosyas\u0131 (.ovpn<\/code>) olu\u015fturaca\u011f\u0131z.<\/p>\n
\u0130lk olarak, istemci yap\u0131land\u0131rma dosyalar\u0131n\u0131 depolamak i\u00e7in bir dizin olu\u015fturun:<\/p>\n
mkdir -p ~\/client-configs\/files<\/code><\/pre>\n
\u015eimdi bir temel istemci yap\u0131land\u0131rma dosyas\u0131 olu\u015ftural\u0131m:<\/p>\n
nano ~\/client-configs\/base.conf<\/code><\/pre>\n
A\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n:<\/p>\n
client\ndev tun\nproto udp\nremote YOUR_SERVER_IP 1194\nresolv-retry infinite\nnobind\npersist-key\npersist-tun\nremote-cert-tls server\ncipher AES-256-CBC\nauth SHA256\ncompress lzo\nverb 3<\/code><\/pre>\n
\u00d6nemli:<\/strong> YOUR_SERVER_IP<\/code> yerine OpenVPN sunucunuzun genel IP adresini yaz\u0131n. E\u011fer bir DDNS kullan\u0131yorsan\u0131z, buraya DDNS ad\u0131n\u0131z\u0131 yazabilirsiniz.<\/p>\n
Dosyay\u0131 kaydedin ve kapat\u0131n.<\/p>\n
\u015eimdi, bu temel yap\u0131land\u0131rma dosyas\u0131n\u0131 kullanarak her istemci i\u00e7in \u00f6zel bir .ovpn<\/code> dosyas\u0131 olu\u015fturacak bir betik haz\u0131rlayal\u0131m.<\/p>\n
nano ~\/client-configs\/make_config.sh<\/code><\/pre>\n
A\u015fa\u011f\u0131daki betik i\u00e7eri\u011fini yap\u0131\u015ft\u0131r\u0131n:<\/p>\n
#!\/bin\/bash\n\n
Client ad\u0131 arg\u00fcman olarak verilir<\/h2>\nCLIENT=$1\nif [ -z \"$CLIENT\" ]; then\n    echo \"Kullan\u0131m: $0 \"\n    exit 1\nfi\n\n
Gerekli dosyalar\u0131n varl\u0131\u011f\u0131n\u0131 kontrol et<\/h2>\nif [ ! -f \"\/etc\/openvpn\/easy-rsa\/pki\/issued\/${CLIENT}.crt\" ] || \\\n   [ ! -f \"\/etc\/openvpn\/easy-rsa\/pki\/private\/${CLIENT}.key\" ] || \\\n   [ ! -f \"\/etc\/openvpn\/ca.crt\" ] || \\\n   [ ! -f \"\/etc\/openvpn\/ta.key\" ]; then\n    echo \"Hata: Gerekli istemci veya CA\/TLS dosyalar\u0131 bulunamad\u0131. \u0130stemci sertifikas\u0131n\u0131 olu\u015fturdu\u011funuzdan emin olun.\"\n    exit 1\nfi\n\n
\u00c7\u0131k\u0131\u015f dizini<\/h2>\nOUTPUT_DIR=~\/client-configs\/files\nmkdir -p \"$OUTPUT_DIR\"\n\n
.ovpn dosyas\u0131n\u0131 olu\u015ftur<\/h2>\ncat ~\/client-configs\/base.conf \\\n    <(echo -e '') \\\n    \/etc\/openvpn\/ca.crt \\\n    <(echo -e '<\/ca>\\n') \\\n    \"\/etc\/openvpn\/easy-rsa\/pki\/issued\/${CLIENT}.crt\" \\\n    <(echo -e '<\/cert>\\n') \\\n    \"\/etc\/openvpn\/easy-rsa\/pki\/private\/${CLIENT}.key\" \\\n    <(echo -e '<\/key>\\n') \\\n    \/etc\/openvpn\/ta.key \\\n    <(echo -e '<\/tls-auth>') \\\n    > \"${OUTPUT_DIR}\/${CLIENT}.ovpn\"\n\necho \"\u0130stemci yap\u0131land\u0131rma dosyas\u0131 '${OUTPUT_DIR}\/${CLIENT}.ovpn' olu\u015fturuldu.\"<\/code><\/pre>\n
Dosyay\u0131 kaydedin ve kapat\u0131n. Beti\u011fi \u00e7al\u0131\u015ft\u0131r\u0131labilir yap\u0131n:<\/p>\n
chmod +x ~\/client-configs\/make_config.sh<\/code><\/pre>\n
\u015eimdi client1<\/code> i\u00e7in .ovpn<\/code> dosyas\u0131n\u0131 olu\u015ftural\u0131m:<\/p>\n
~\/client-configs\/make_config.sh client1<\/code><\/pre>\n
Bu komut, ~\/client-configs\/files\/client1.ovpn<\/code> ad\u0131nda bir dosya olu\u015fturacakt\u0131r. Bu dosya, client1<\/code>‘in OpenVPN sunucusuna ba\u011flanmas\u0131 i\u00e7in gerekli t\u00fcm sertifikalar\u0131, anahtarlar\u0131 ve yap\u0131land\u0131rma bilgilerini i\u00e7erir.<\/p>\n
Ad\u0131m 9: \u0130stemci Cihazlarda OpenVPN Kurulumu ve Ba\u011flant\u0131<\/h3>\n
Olu\u015fturdu\u011funuz .ovpn<\/code> dosyas\u0131n\u0131 istemci cihaz\u0131n\u0131za aktarman\u0131z gerekmektedir. Bunu SCP, SFTP gibi g\u00fcvenli y\u00f6ntemlerle yapabilirsiniz.<\/p>\n
\u00d6rne\u011fin, yerel makinenize indirmek i\u00e7in:<\/p>\n
scp user@your_server_ip:~\/client-configs\/files\/client1.ovpn .<\/code><\/pre>\n
\u0130stemci taraf\u0131nda OpenVPN yaz\u0131l\u0131m\u0131n\u0131 kurman\u0131z gerekecektir:<\/p>\n
*   Windows:<\/strong> OpenVPN GUI uygulamas\u0131n\u0131 resmi web sitesinden indirin ve kurun. .ovpn<\/code> dosyas\u0131n\u0131 C:\\Program Files\\OpenVPN\\config<\/code> dizinine kopyalay\u0131n.
\n*   macOS:<\/strong> Tunnelblick veya OpenVPN Connect uygulamas\u0131n\u0131 kullanabilirsiniz. .ovpn<\/code> dosyas\u0131n\u0131 uygulamaya s\u00fcr\u00fckleyip b\u0131rakman\u0131z yeterlidir.
\n*   Linux:<\/strong> openvpn<\/code> paketini kurun (sudo apt install openvpn<\/code> veya da\u011f\u0131t\u0131m\u0131n\u0131za uygun komut) ve terminalden sudo openvpn --config client1.ovpn<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n. Grafik aray\u00fcz i\u00e7in NetworkManager entegrasyonlar\u0131n\u0131 kullanabilirsiniz.
\n*   Android\/iOS:<\/strong> Resmi OpenVPN Connect uygulamas\u0131n\u0131 uygulama ma\u011fazalar\u0131ndan indirin. .ovpn<\/code> dosyas\u0131n\u0131 e-posta, bulut depolama veya do\u011frudan aktar\u0131m yoluyla cihaza aktar\u0131n ve uygulama i\u00e7inden i\u00e7e aktar\u0131n.<\/p>\n
\u0130stemci uygulamas\u0131n\u0131 ba\u015flatt\u0131ktan ve .ovpn<\/code> dosyas\u0131n\u0131 i\u00e7e aktard\u0131ktan sonra, ba\u011flant\u0131y\u0131 ba\u015flatabilirsiniz. Ba\u011flant\u0131 ba\u015far\u0131l\u0131 oldu\u011funda, istemciniz art\u0131k OpenVPN sunucunuz \u00fczerinden internete ba\u011flanacakt\u0131r. Ba\u011flant\u0131n\u0131z\u0131n ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in bir web taray\u0131c\u0131s\u0131 \u00fczerinden IP adresinizi sorgulayabilir veya whatismyip.com<\/code> gibi siteleri ziyaret ederek sunucunuzun IP adresini g\u00f6r\u00fcp g\u00f6rmedi\u011finizi kontrol edebilirsiniz.<\/p>\n
Sorun Giderme (Troubleshooting)<\/h3>\n
Kurulum s\u0131ras\u0131nda veya sonras\u0131nda sorunlarla kar\u015f\u0131la\u015fman\u0131z durumunda a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyebilirsiniz:<\/p>\n
*   Sunucu Loglar\u0131n\u0131 Kontrol Edin:<\/strong><\/p>\n
sudo journalctl -u openvpn@server -f<\/code><\/pre>\n
    Bu komut, OpenVPN sunucusunun loglar\u0131n\u0131 ger\u00e7ek zamanl\u0131 olarak g\u00f6sterir ve hatalar\u0131 tespit etmenize yard\u0131mc\u0131 olur.
\n*   G\u00fcvenlik Duvar\u0131 (UFW) Ayarlar\u0131n\u0131 Kontrol Edin:<\/strong><\/p>\n
sudo ufw status verbose<\/code><\/pre>\n
    OpenVPN portunun (1194\/UDP) ve SSH portunun a\u00e7\u0131k oldu\u011fundan, ayr\u0131ca NAT kurallar\u0131n\u0131n do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olun. sudo nano \/etc\/ufw\/before.rules<\/code> dosyas\u0131n\u0131 kontrol edin.
\n*   IP Y\u00f6nlendirme:<\/strong><\/p>\n
cat \/proc\/sys\/net\/ipv4\/ip_forward<\/code><\/pre>\n
    \u00c7\u0131kt\u0131 1<\/code> olmal\u0131d\u0131r. E\u011fer 0<\/code> ise, \/etc\/sysctl.conf<\/code> dosyas\u0131n\u0131 kontrol edin ve sudo sysctl -p<\/code> komutunu tekrar \u00e7al\u0131\u015ft\u0131r\u0131n.
\n*   A\u011f Aray\u00fcz\u00fc Ad\u0131:<\/strong> \/etc\/ufw\/before.rules<\/code> dosyas\u0131ndaki NAT kural\u0131nda kullan\u0131lan a\u011f aray\u00fcz\u00fc ad\u0131n\u0131n (\u00f6rn. eth0<\/code>) do\u011fru oldu\u011fundan emin olun. ip a<\/code> komutuyla kontrol edebilirsiniz.
\n*   Sertifika ve Anahtar Dosyalar\u0131:<\/strong> T\u00fcm sertifika ve anahtar dosyalar\u0131n\u0131n (ca.crt<\/code>, server.crt<\/code>, server.key<\/code>, dh.pem<\/code>, ta.key<\/code>) \/etc\/openvpn\/<\/code> dizininde oldu\u011fundan ve do\u011fru izinlere sahip oldu\u011fundan emin olun.
\n*   \u0130stemci Yap\u0131land\u0131rma Dosyas\u0131:<\/strong> .ovpn<\/code> dosyas\u0131ndaki sunucu IP adresinin do\u011fru oldu\u011fundan ve t\u00fcm sertifika\/anahtar bloklar\u0131n\u0131n (, , , ) do\u011fru i\u00e7eri\u011fe sahip oldu\u011fundan emin olun.
\n*   Protokol ve Port:<\/strong> Sunucu ve istemci yap\u0131land\u0131rma dosyalar\u0131nda kullan\u0131lan protokol ve portun ayn\u0131 oldu\u011fundan emin olun (\u00f6rn. her ikisi de udp<\/code> ve 1194<\/code>).
\n*   VPN Alt A\u011f\u0131 \u00c7ak\u0131\u015fmas\u0131:<\/strong> OpenVPN’in kulland\u0131\u011f\u0131 10.8.0.0\/24<\/code> a\u011f\u0131n\u0131n, istemcinin veya sunucunun yerel a\u011flar\u0131yla \u00e7ak\u0131\u015fmad\u0131\u011f\u0131ndan emin olun.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu kapsaml\u0131 rehberde, Ubuntu 18.04 sunucusu \u00fczerinde g\u00fcvenli bir OpenVPN sunucusu kurmak i\u00e7in gerekli t\u00fcm ad\u0131mlar\u0131 ayr\u0131nt\u0131l\u0131 olarak ele ald\u0131k. Sunucuyu g\u00fcncellemekten Easy-RSA ile sertifika otoritesi olu\u015fturmaya, sunucu ve istemci sertifikalar\u0131n\u0131 yap\u0131land\u0131rmaktan g\u00fcvenlik duvar\u0131 ayarlar\u0131n\u0131 d\u00fczenlemeye kadar her a\u015famay\u0131 tamamlad\u0131k. Art\u0131k kendi g\u00fcvenli VPN ba\u011flant\u0131n\u0131z\u0131 kurabilir ve verilerinizi internet \u00fczerinde koruyabilirsiniz.<\/p>\n
Unutmay\u0131n ki siber g\u00fcvenlik s\u00fcrekli geli\u015fen bir aland\u0131r. Sunucunuzu d\u00fczenli olarak g\u00fcncel tutmak, g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131z\u0131 g\u00f6zden ge\u00e7irmek ve yaln\u0131zca g\u00fcvendi\u011finiz istemcilere eri\u015fim izni vermek, VPN sunucunuzun g\u00fcvenli\u011fini sa\u011flamak i\u00e7in kritik \u00f6neme sahiptir. \u0130htiya\u00e7lar\u0131n\u0131za g\u00f6re ek g\u00fcvenlik \u00f6nlemleri (\u00f6rne\u011fin, iki fakt\u00f6rl\u00fc kimlik do\u011frulama) eklemeyi d\u00fc\u015f\u00fcnebilirsiniz. Bu rehber, ki\u015fisel veya k\u00fc\u00e7\u00fck \u00f6l\u00e7ekli kullan\u0131m i\u00e7in sa\u011flam bir temel sa\u011flamaktad\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber\nSanalla\u015fma ve uzaktan \u00e7al\u0131\u015fma \u00e7a\u011f\u0131nda, g\u00fcvenli a\u011f ba\u011flant\u0131lar\u0131 her","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-33232","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nUbuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber\" \/>\n<meta property=\"og:description\" content=\"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber Sanalla\u015fma ve uzaktan \u00e7al\u0131\u015fma \u00e7a\u011f\u0131nda, g\u00fcvenli a\u011f ba\u011flant\u0131lar\u0131 her\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-31T06:41:09+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber\",\"datePublished\":\"2025-10-31T06:41:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/\"},\"wordCount\":2702,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/\",\"name\":\"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-10-31T06:41:09+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/","og_locale":"tr_TR","og_type":"article","og_title":"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber","og_description":"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber Sanalla\u015fma ve uzaktan \u00e7al\u0131\u015fma \u00e7a\u011f\u0131nda, g\u00fcvenli a\u011f ba\u011flant\u0131lar\u0131 her","og_url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-10-31T06:41:09+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"17 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber","datePublished":"2025-10-31T06:41:09+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/"},"wordCount":2702,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/","url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/","name":"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-10-31T06:41:09+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-18-04-uzerine-openvpn-sunucusu-kurulumu-kapsamli-bir-rehber\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubuntu 18.04 \u00dczerine OpenVPN Sunucusu Kurulumu: Kapsaml\u0131 Bir Rehber"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33232","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=33232"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33232\/revisions"}],"predecessor-version":[{"id":33233,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33232\/revisions\/33233"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=33232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=33232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=33232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}