Kural Setleri:<\/strong> G\u00fcvenlik politikalar\u0131n\u0131 tan\u0131mlayan ve y\u00f6neticilerin belirli tehditlere kar\u015f\u0131 koruma sa\u011flamak i\u00e7in \u00f6zelle\u015ftirebilece\u011fi esnek kural setleri sunar.<\/li>\n<\/ul>\nSafeLine WAF, farkl\u0131 da\u011f\u0131t\u0131m modellerine sahip olabilir: donan\u0131m tabanl\u0131 cihazlar, sanal makineler veya bir konteyner olarak Kubernetes gibi ortamlarda konu\u015fland\u0131r\u0131labilir. Nginx ile entegrasyonumuzda, SafeLine WAF’\u0131 genellikle bir Docker imaj\u0131 olarak veya Ingress-Nginx’in bir upstream<\/code> servisi olarak \u00e7al\u0131\u015ft\u0131raca\u011f\u0131z.<\/p>\nKubernetes’te Ingress-Nginx’in Rol\u00fc Nedir?<\/h3>\n
Kubernetes k\u00fcmelerinde \u00e7al\u0131\u015fan uygulamalar genellikle do\u011frudan internetten eri\u015filebilir de\u011fildir. Bu uygulamalara d\u0131\u015far\u0131dan eri\u015fimi sa\u011flamak i\u00e7in Ingress kaynaklar\u0131 kullan\u0131l\u0131r. Ingress-Nginx Controller ise, bu Ingress kaynaklar\u0131n\u0131 dinleyen ve bunlara g\u00f6re Nginx web sunucusunu dinamik olarak yap\u0131land\u0131ran \u00f6zel bir denetleyicidir. Temel olarak, gelen trafi\u011fi Kubernetes servislerinize y\u00f6nlendiren bir giri\u015f noktas\u0131 (entry point) g\u00f6revi g\u00f6r\u00fcr.<\/p>\n
Ingress-Nginx’in ba\u015fl\u0131ca g\u00f6revleri:<\/p>\n
\n- Y\u00fck Dengeleme:<\/strong> Gelen istekleri birden fazla uygulama pod’una da\u011f\u0131tarak performans\u0131 ve kullan\u0131labilirli\u011fi art\u0131r\u0131r.<\/li>\n
- SSL\/TLS Sonland\u0131rma:<\/strong> \u015eifrelenmi\u015f trafi\u011fi sonland\u0131rarak, uygulaman\u0131z\u0131n bu g\u00f6revi \u00fcstlenmesine gerek kalmadan g\u00fcvenli ileti\u015fim sa\u011flar.<\/li>\n
- Host ve Path Tabanl\u0131 Y\u00f6nlendirme:<\/strong> Farkl\u0131 alan adlar\u0131na veya URL yollar\u0131na (path) g\u00f6re istekleri farkl\u0131 servis ve pod’lara y\u00f6nlendirir.<\/li>\n
- Kimlik Do\u011frulama ve Yetkilendirme:<\/strong> Temel HTTP kimlik do\u011frulama gibi basit g\u00fcvenlik katmanlar\u0131 sa\u011flayabilir.<\/li>\n
- Geni\u015fletilebilirlik:<\/strong> Annotation’lar ve ConfigMap’ler arac\u0131l\u0131\u011f\u0131yla Nginx yap\u0131land\u0131rmas\u0131n\u0131 \u00f6zelle\u015ftirme imkan\u0131 sunar, bu da SafeLine WAF gibi \u00e7\u00f6z\u00fcmlerle entegrasyon i\u00e7in kritik \u00f6neme sahiptir.<\/li>\n<\/ul>\n
\u00d6zetle, Ingress-Nginx d\u0131\u015f trafi\u011fi Kubernetes k\u00fcmenize getirirken, SafeLine WAF bu trafi\u011fi uygulama katman\u0131nda derinlemesine analiz ederek koruma kalkan\u0131 g\u00f6revi g\u00f6r\u00fcr. Bu iki teknolojinin birle\u015fimi, g\u00fc\u00e7l\u00fc ve esnek bir g\u00fcvenlik mimarisi olu\u015fturur.<\/p>\n
\n# Basit bir Ingress-Nginx tan\u0131m\u0131\napiVersion: networking.k8s.io\/v1\nkind: Ingress\nmetadata:\n name: my-app-ingress\n annotations:\n nginx.ingress.kubernetes.io\/rewrite-target: \/\nspec:\n rules:\n - host: myapp.example.com\n http:\n paths:\n - path: \/\n pathType: Prefix\n backend:\n service:\n name: my-app-service\n port:\n number: 80\n<\/pre>\n<\/code><\/p>\n
Bu \u00f6rnekte, myapp.example.com<\/code> adresine gelen istekler my-app-service<\/code> adl\u0131 servise y\u00f6nlendiriliyor. SafeLine WAF'\u0131 entegre ederken, bu t\u00fcr Ingress objelerini ve Ingress-Nginx Controller'\u0131n genel yap\u0131land\u0131rmas\u0131n\u0131 \u00f6zelle\u015ftirece\u011fiz.<\/p>\nSafeLine WAF'\u0131 Ingress-Nginx ile Entegre Etmenin Farkl\u0131 Yollar\u0131 Nelerdir?<\/h2>\n
SafeLine WAF'\u0131 Kubernetes ortam\u0131na ve \u00f6zellikle Ingress-Nginx ile birle\u015ftirmek i\u00e7in birka\u00e7 farkl\u0131 yakla\u015f\u0131m bulunmaktad\u0131r. Her y\u00f6ntemin kendine \u00f6zg\u00fc avantajlar\u0131 ve dezavantajlar\u0131 vard\u0131r. En uygun entegrasyon modelini se\u00e7mek, genellikle uygulaman\u0131z\u0131n gereksinimlerine, performans beklentilerine ve y\u00f6netim kolayl\u0131\u011f\u0131na ba\u011fl\u0131d\u0131r.<\/p>\n
\n- Sidecar Deseni (Yan Kapsay\u0131c\u0131):<\/strong>\n
\n- A\u00e7\u0131klama:<\/strong> Bu desende, SafeLine WAF her bir uygulama pod'unun yan\u0131nda ayr\u0131 bir konteyner olarak \u00e7al\u0131\u015f\u0131r. Uygulama trafi\u011fi \u00f6nce SafeLine sidecar'\u0131na, oradan da ana uygulama konteynerine y\u00f6nlendirilir.<\/li>\n
- Avantajlar\u0131:<\/strong> Uygulamaya \u00f6zg\u00fc ince taneli kontrol, mikroservis d\u00fczeyinde yal\u0131t\u0131m.<\/li>\n
- Dezavantajlar\u0131:<\/strong> Her pod i\u00e7in ayr\u0131 bir WAF \u00f6rne\u011fi \u00e7al\u0131\u015ft\u0131rmak kaynak t\u00fcketimini art\u0131r\u0131r. Y\u00f6netimi ve g\u00fcncellemeleri karma\u015f\u0131kla\u015ft\u0131rabilir, \u00e7\u00fcnk\u00fc her uygulama deployment'\u0131n\u0131 g\u00fcncellemeniz gerekebilir. Bu model genellikle SafeLine WAF'\u0131n bu \u015fekilde konteynerle\u015ftirilebilen hafif bir versiyonu varsa mant\u0131kl\u0131d\u0131r.<\/li>\n<\/ul>\n<\/li>\n
- Ters Proxy Zincirlemesi (Chained Reverse Proxies):<\/strong>\n
\n- A\u00e7\u0131klama:<\/strong> Bu yakla\u015f\u0131mda, Ingress-Nginx gelen trafi\u011fi al\u0131r ve bu trafi\u011fi do\u011frudan uygulama servislerine y\u00f6nlendirmek yerine, \u00f6nce SafeLine WAF'\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131 ayr\u0131 bir Kubernetes servisine iletir. SafeLine WAF trafi\u011fi analiz ettikten sonra, g\u00fcvenli buldu\u011fu istekleri nihai uygulama servislerine y\u00f6nlendirir.<\/li>\n
- Avantajlar\u0131:<\/strong> WAF'\u0131n merkezi bir konumda y\u00f6netilmesini sa\u011flar, uygulama pod'lar\u0131ndan ba\u011f\u0131ms\u0131zd\u0131r. Ingress-Nginx'in esnekli\u011fi sayesinde kolayca yap\u0131land\u0131r\u0131labilir. \u00d6l\u00e7eklenebilirlik i\u00e7in hem Ingress-Nginx hem de SafeLine WAF ayr\u0131 ayr\u0131 \u00f6l\u00e7eklenebilir.<\/li>\n
- Dezavantajlar\u0131:<\/strong> Trafi\u011fin iki ayr\u0131 proxy katman\u0131ndan ge\u00e7mesi nedeniyle ek gecikmeye (latency) neden olabilir, ancak modern a\u011f altyap\u0131lar\u0131yla bu genellikle ihmal edilebilir d\u00fczeydedir. Yap\u0131land\u0131rma biraz daha karma\u015f\u0131k olabilir.<\/li>\n<\/ul>\n<\/li>\n
- Ingress Controller Seviyesinde Entegrasyon (Mod\u00fcl veya Custom Config):<\/strong>\n
\n- A\u00e7\u0131klama:<\/strong> Bu, \u00e7o\u011fu durumda en ideal ve tercih edilen y\u00f6ntemdir. SafeLine WAF, Ingress-Nginx Controller'\u0131n kendisiyle b\u00fct\u00fcnle\u015fir. Bu, iki ana \u015fekilde olabilir:\n
\n- Do\u011frudan Nginx Mod\u00fcl\u00fc Olarak:<\/strong> E\u011fer SafeLine WAF, Nginx i\u00e7in bir mod\u00fcl olarak sunuluyorsa, Ingress-Nginx Controller'\u0131n Nginx imaj\u0131 bu mod\u00fcl ile birlikte derlenebilir veya dinamik olarak y\u00fcklenebilir. Bu sayede SafeLine WAF do\u011frudan Ingress-Nginx i\u015flemine dahil olur.<\/li>\n
- Nginx Yap\u0131land\u0131rmas\u0131 ile \u00d6zelle\u015ftirme:<\/strong> Ingress-Nginx, ConfigMap'ler ve Ingress Annotation'lar\u0131 arac\u0131l\u0131\u011f\u0131yla Nginx ana yap\u0131land\u0131rma dosyas\u0131n\u0131n (
nginx.conf<\/code>) \u00e7e\u015fitli b\u00f6l\u00fcmlerini \u00f6zelle\u015ftirmenize olanak tan\u0131r. Bu sayede, SafeLine WAF'\u0131 ayr\u0131 bir upstream<\/code> olarak tan\u0131mlayabilir ve t\u00fcm trafi\u011fi bu upstream<\/code>'e y\u00f6nlendirebiliriz. Veya Nginx'in lua-nginx-module<\/code> ya da NJS (Nginx JavaScript) mod\u00fcllerini kullanarak SafeLine WAF'\u0131n API'si ile etkile\u015fime ge\u00e7ebilir, istekleri dinamik olarak WAF'a g\u00f6nderebiliriz.<\/li>\n<\/ul>\n<\/li>\n- Avantajlar\u0131:<\/strong> Entegre bir \u00e7\u00f6z\u00fcm sunar, daha az a\u011f atlamas\u0131 (hop), genellikle en iyi performans. Y\u00f6netim ve g\u00fcncellemeler tek bir noktadan (Ingress Controller) yap\u0131labilir.<\/li>\n
- Dezavantajlar\u0131:<\/strong> Nginx imaj\u0131n\u0131 \u00f6zelle\u015ftirmek veya karma\u015f\u0131k Nginx yap\u0131land\u0131rmalar\u0131 yazmak gerekebilir. Bu da ba\u015flang\u0131\u00e7ta biraz daha fazla bilgi ve \u00e7aba gerektirebilir.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
Genellikle, merkezi y\u00f6netim ve performans avantajlar\u0131 nedeniyle Ingress Controller seviyesinde entegrasyon<\/strong> veya Ters Proxy Zincirlemesi<\/strong> en \u00e7ok tercih edilen y\u00f6ntemlerdir. Bu makale, \u00f6zellikle Ingress Controller seviyesinde entegrasyona odaklanacakt\u0131r, \u00e7\u00fcnk\u00fc bu y\u00f6ntem bir\u00e7ok senaryo i\u00e7in en uygun dengeli \u00e7\u00f6z\u00fcm\u00fc sunar. B\u00fcy\u00fck bir medya \u015firketinin, t\u00fcm web sitelerini ve API'lerini tek bir merkezi SafeLine WAF k\u00fcmesi arkas\u0131na alarak nas\u0131l birle\u015fik bir g\u00fcvenlik stratejisi izledi\u011fini d\u00fc\u015f\u00fcn\u00fcn. Geleneksel olarak her bir uygulaman\u0131n kendi WAF'\u0131n\u0131 y\u00f6netmesi yerine, Ingress-Nginx seviyesinde yap\u0131lan bu entegrasyon sayesinde, g\u00fcvenlik politikalar\u0131 tutarl\u0131 bir \u015fekilde uygulanm\u0131\u015f, y\u00f6netim y\u00fck\u00fc azalm\u0131\u015f ve \u00f6l\u00e7eklenebilirlik art\u0131r\u0131lm\u0131\u015ft\u0131r. Bu merkezi yakla\u015f\u0131m, g\u00fcvenlik analistlerinin tehditleri daha h\u0131zl\u0131 tespit edip yan\u0131t vermesini de sa\u011flam\u0131\u015ft\u0131r.<\/p>\nAd\u0131m Ad\u0131m Entegrasyon: SafeLine WAF'\u0131 Ingress-Nginx'e Nas\u0131l Ekleriz?<\/h2>\n
Bu b\u00f6l\u00fcmde, SafeLine WAF'\u0131 Ingress-Nginx Controller ile ad\u0131m ad\u0131m nas\u0131l entegre edece\u011fimizi ele alaca\u011f\u0131z. Tercih edilen y\u00f6ntem, SafeLine WAF'\u0131 ayr\u0131 bir servis olarak da\u011f\u0131tmak ve Ingress-Nginx'i bu servise trafi\u011fi y\u00f6nlendirecek \u015fekilde yap\u0131land\u0131rmakt\u0131r.<\/p>\n
\u00d6n Ko\u015fullar ve Haz\u0131rl\u0131klar<\/h3>\n
Ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6\u011felerin kurulu ve yap\u0131land\u0131r\u0131lm\u0131\u015f oldu\u011fundan emin olun:<\/p>\n
\n- Aktif bir Kubernetes k\u00fcmesi (minikube, kind, EKS, AKS, GKE vb.).<\/li>\n
kubectl<\/code> komut sat\u0131r\u0131 arac\u0131, k\u00fcmenize ba\u011flanmak i\u00e7in yap\u0131land\u0131r\u0131lm\u0131\u015f olmal\u0131.<\/li>\n- Helm 3, Kubernetes paket y\u00f6neticisi olarak kurulu olmal\u0131.<\/li>\n
- Ingress-Nginx Controller k\u00fcmenize kurulu olmal\u0131. (Kurulu de\u011filse, resmi Helm grafi\u011fini kullanarak kurabilirsiniz:\n
\nhelm repo add ingress-nginx https:\/\/kubernetes.github.io\/ingress-nginx\nhelm repo update\nhelm install ingress-nginx ingress-nginx\/ingress-nginx\n <\/pre>\n<\/code>\n <\/li>\n
- SafeLine WAF'\u0131n Docker imaj\u0131na veya da\u011f\u0131t\u0131m paketine eri\u015fiminiz olmal\u0131. Genellikle, SafeLine size \u00f6zel bir Docker imaj\u0131 sa\u011flar veya bir Helm grafi\u011fi arac\u0131l\u0131\u011f\u0131yla da\u011f\u0131t\u0131m kolayl\u0131\u011f\u0131 sunar. Bu \u00f6rnekte, SafeLine'\u0131n bir proxy gibi davrand\u0131\u011f\u0131 bir imaj\u0131 oldu\u011funu varsayaca\u011f\u0131z.<\/li>\n
- Gerekli SafeLine lisans bilgileri ve temel yap\u0131land\u0131rma parametreleri (\u00f6rne\u011fin, y\u00f6netim aray\u00fcz\u00fc eri\u015fimi, kural setleri).<\/li>\n<\/ul>\n
SafeLine WAF'\u0131 Kubernetes Ortam\u0131na Da\u011f\u0131tma<\/h3>\n
\u00d6ncelikle SafeLine WAF'\u0131 Kubernetes k\u00fcmenize bir deployment ve service olarak da\u011f\u0131tmal\u0131y\u0131z. Bu \u00f6rnekte, SafeLine WAF'\u0131n safeline\/waf-proxy<\/code> ad\u0131nda bir Docker imaj\u0131 oldu\u011funu ve 8080 portunda dinledi\u011fini varsayal\u0131m.<\/p>\n\n# safeline-deployment.yaml\napiVersion: apps\/v1\nkind: Deployment\nmetadata:\n name: safeline-waf\n labels:\n app: safeline-waf\nspec:\n replicas: 2 # Y\u00fcksek kullan\u0131labilirlik ve \u00f6l\u00e7eklenebilirlik i\u00e7in replica say\u0131s\u0131n\u0131 art\u0131rabilirsiniz\n selector:\n matchLabels:\n app: safeline-waf\n template:\n metadata:\n labels:\n app: safeline-waf\n spec:\n containers:\n - name: safeline-waf-container\n image: safeline\/waf-proxy:latest # SafeLine WAF'\u0131n g\u00fcncel imaj ad\u0131n\u0131 kullan\u0131n\n ports:\n - containerPort: 8080 # SafeLine WAF'\u0131n dinledi\u011fi port\n env:\n - name: SAFELINE_LICENSE_KEY\n valueFrom:\n secretKeyRef:\n name: safeline-secrets # Lisans anahtar\u0131n\u0131z\u0131 i\u00e7eren Secret ad\u0131\n key: license-key\n # Di\u011fer SafeLine yap\u0131land\u0131rma de\u011fi\u015fkenlerini buraya ekleyebilirsiniz\n # \u00d6rnek: SAFELINE_LOG_LEVEL, SAFELINE_RULES_URL\n resources:\n requests:\n memory: \"256Mi\"\n cpu: \"200m\"\n limits:\n memory: \"512Mi\"\n cpu: \"500m\"\n---\n# safeline-service.yaml\napiVersion: v1\nkind: Service\nmetadata:\n name: safeline-waf-service\n labels:\n app: safeline-waf\nspec:\n selector:\n app: safeline-waf\n ports:\n - protocol: TCP\n port: 80\n targetPort: 8080 # Container'\u0131n dinledi\u011fi port\n type: ClusterIP # Sadece k\u00fcme i\u00e7inden eri\u015filebilir\n<\/pre>\n<\/code><\/p>\n
Bu YAML dosyalar\u0131n\u0131 uygulay\u0131n:<\/p>\n
\nkubectl apply -f safeline-deployment.yaml\nkubectl apply -f safeline-service.yaml\n<\/pre>\n<\/code><\/p>\n
SafeLine WAF'\u0131n lisans anahtar\u0131n\u0131 bir Kubernetes Secret objesi i\u00e7inde saklamak g\u00fcvenlik a\u00e7\u0131s\u0131ndan \u00f6nemlidir. \u00d6nce bir secret olu\u015fturman\u0131z gerekebilir:<\/p>\n
\nkubectl create secret generic safeline-secrets --from-literal=license-key='YOUR_SAFELINE_LICENSE_KEY'\n<\/pre>\n<\/code><\/p>\n
Ingress-Nginx'i SafeLine WAF ile Konfig\u00fcre Etme<\/h3>\n
\u015eimdi Ingress-Nginx Controller'\u0131, gelen t\u00fcm web trafi\u011fini SafeLine WAF servisimize y\u00f6nlendirecek \u015fekilde yap\u0131land\u0131rmam\u0131z gerekiyor. Bunu yapman\u0131n en esnek yolu, Ingress objelerindeki nginx.ingress.kubernetes.io\/upstream-vhosts<\/code> ve nginx.ingress.kubernetes.io\/configuration-snippet<\/code> gibi annotation'lar\u0131 kullanmakt\u0131r. Ancak daha kapsaml\u0131 bir yakla\u015f\u0131m, varsay\u0131lan backend'i veya belirli Ingress kurallar\u0131n\u0131 SafeLine'a y\u00f6nlendirmek olabilir.<\/p>\nY\u00f6ntem 1: Ingress Annotation'lar\u0131 ile Y\u00f6nlendirme<\/strong><\/p>\nHer bir Ingress objesini SafeLine WAF'a y\u00f6nlendirebilirsiniz. Bu, Ingress-Nginx'in trafi\u011fi do\u011frudan uygulaman\u0131za g\u00f6ndermeden \u00f6nce SafeLine WAF servisine iletmesini sa\u011flar.<\/p>\n
\n# my-app-ingress-with-waf.yaml\napiVersion: networking.k8s.io\/v1\nkind: Ingress\nmetadata:\n name: my-app-ingress\n annotations:\n nginx.ingress.kubernetes.io\/backend-protocol: HTTP\n nginx.ingress.kubernetes.io\/proxy-read-timeout: \"180\"\n nginx.ingress.kubernetes.io\/proxy-send-timeout: \"180\"\n # T\u00fcm trafi\u011fi SafeLine WAF servisine y\u00f6nlendir\n nginx.ingress.kubernetes.io\/upstream-vhost: \"safeline-waf-service.default.svc.cluster.local\" # SafeLine servisi ve namespace'i\n nginx.ingress.kubernetes.io\/configuration-snippet: |\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header Host $host;\n proxy_pass http:\/\/safeline-waf-service.default.svc.cluster.local:80;\nspec:\n rules:\n - host: myapp.example.com\n http:\n paths:\n - path: \/\n pathType: Prefix\n backend:\n service:\n name: safeline-waf-service # SafeLine WAF servisini hedefleyin\n port:\n number: 80 # SafeLine WAF servisinin dinledi\u011fi port\n<\/pre>\n<\/code><\/p>\n
Bu Ingress tan\u0131m\u0131nda, myapp.example.com<\/code> adresine gelen t\u00fcm istekler ilk olarak safeline-waf-service<\/code>'e y\u00f6nlendirilir. SafeLine WAF, bu istekleri i\u015fledikten sonra, kendi i\u00e7inde yap\u0131land\u0131rd\u0131\u011f\u0131 kurallara g\u00f6re ger\u00e7ek uygulama servisine iletecektir. Bu, SafeLine WAF'\u0131n bir ters proxy olarak g\u00f6rev yapt\u0131\u011f\u0131 \"Ters Proxy Zincirlemesi\" modelidir. SafeLine WAF'\u0131n kendisi de son kullan\u0131c\u0131 uygulamas\u0131na do\u011fru proxy_pass<\/code> yapmal\u0131d\u0131r.<\/p>\nY\u00f6ntem 2: Ingress-Nginx ConfigMap ile Varsay\u0131lan Backend'i Y\u00f6nlendirme (Daha Geli\u015fmi\u015f)<\/strong><\/p>\nE\u011fer t\u00fcm Ingress trafi\u011fini veya belirli bir host grubunu SafeLine WAF \u00fczerinden ge\u00e7irmek istiyorsan\u0131z, Ingress-Nginx Controller'\u0131n ConfigMap'ini \u00f6zelle\u015ftirerek genel bir kural tan\u0131mlayabilirsiniz. Bu, daha merkezi bir yap\u0131land\u0131rma sa\u011flar.<\/p>\n
\n# ingress-nginx-configmap-custom.yaml\napiVersion: v1\nkind: ConfigMap\nmetadata:\n name: ingress-nginx-controller\n namespace: ingress-nginx # Ingress-Nginx Controller'\u0131n kurulu oldu\u011fu namespace\ndata:\n # Varsay\u0131lan Nginx config'ini SafeLine WAF'a y\u00f6nlendirmek i\u00e7in custom http block\n # Bu yakla\u015f\u0131m, sadece Ingress-Nginx'in temel yap\u0131land\u0131rmas\u0131n\u0131 etkiler.\n # Daha kesin kontrol i\u00e7in annotation'lar veya Ingress objesindeki backend override daha iyidir.\n # E\u011fer SafeLine WAF'\u0131 ayr\u0131 bir Nginx mod\u00fcl\u00fc olarak entegre ediyorsan\u0131z, buradaki http-snippet kullan\u0131\u015fl\u0131 olabilir.\n # Bu \u00f6rnek, genellikle SafeLine WAF'\u0131n do\u011frudan bir Nginx mod\u00fcl\u00fc olarak \u00e7al\u0131\u015ft\u0131\u011f\u0131 senaryolar i\u00e7in daha uygundur.\n # Aksi takdirde, yukar\u0131daki Ingress Annotation'\u0131 y\u00f6ntemi daha basittir.\n\n # \u00d6rnek: E\u011fer SafeLine WAF, Nginx'in kendi bir mod\u00fcl\u00fc ise\n # http-snippet: |\n # safeline_enable on;\n # safeline_rules \/etc\/nginx\/safeline_rules.conf;\n # # Di\u011fer SafeLine mod\u00fcl konfig\u00fcrasyonlar\u0131...\n\n # Alternatif olarak, e\u011fer SafeLine WAF bir upstream ise ve onu genel olarak kullanmak istiyorsan\u0131z:\n # server-snippet: |\n # location \/ {\n # proxy_pass http:\/\/safeline-waf-service.default.svc.cluster.local:80;\n # proxy_set_header Host $host;\n # proxy_set_header X-Real-IP $remote_addr;\n # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n # proxy_set_header X-Forwarded-Proto $scheme;\n # }\n<\/pre>\n<\/code><\/p>\n
Yukar\u0131daki ConfigMap \u00f6rne\u011fi, SafeLine WAF'\u0131n Nginx'e do\u011frudan bir mod\u00fcl olarak entegre edildi\u011fi veya Ingress-Nginx'in varsay\u0131lan davran\u0131\u015f\u0131n\u0131 tamamen de\u011fi\u015ftirmek istedi\u011finiz durumlarda daha alakal\u0131d\u0131r. \u00c7o\u011fu SafeLine entegrasyonunda, \"Y\u00f6ntem 1: Ingress Annotation'lar\u0131 ile Y\u00f6nlendirme\" veya SafeLine WAF'\u0131n kendi Helm grafi\u011fi daha pratik ve y\u00f6netilebilirdir.<\/p>\n
E\u011fer SafeLine WAF'\u0131n kendi Helm grafi\u011fi veya Kubernetes operat\u00f6r\u00fc varsa, entegrasyon s\u00fcreci \u00e7ok daha basit olacakt\u0131r. Bu ara\u00e7lar, SafeLine WAF'\u0131 otomatik olarak da\u011f\u0131t\u0131r ve Ingress-Nginx ile entegrasyon i\u00e7in gerekli ConfigMap'leri, Ingress objelerini veya \u00f6zel Controller'lar\u0131 yap\u0131land\u0131rabilir. Her zaman WAF sat\u0131c\u0131n\u0131z\u0131n sa\u011flad\u0131\u011f\u0131 resmi entegrasyon y\u00f6ntemlerini tercih etmelisiniz.<\/p>\n
Performans, \u00d6l\u00e7eklenebilirlik ve Geli\u015fmi\u015f Optimizasyon \u0130pu\u00e7lar\u0131<\/h2>\n
SafeLine WAF ve Ingress-Nginx entegrasyonunu kurduktan sonra, sisteminizin performans\u0131n\u0131, \u00f6l\u00e7eklenebilirli\u011fini ve g\u00fcvenilirli\u011fini en \u00fcst d\u00fczeye \u00e7\u0131karmak i\u00e7in baz\u0131 geli\u015fmi\u015f optimizasyon teknikleri uygulamak \u00f6nemlidir. \u00d6zellikle y\u00fcksek trafikli ortamlarda, bu ipu\u00e7lar\u0131 kritik fark yaratabilir.<\/p>\n
SafeLine WAF ve Ingress-Nginx'in \u00d6l\u00e7eklenmesi<\/h3>\n\n- Yatay \u00d6l\u00e7ekleme (Horizontal Scaling):<\/strong> Hem SafeLine WAF deployment'\u0131n\u0131z\u0131 hem de Ingress-Nginx Controller'\u0131n\u0131z\u0131 Horizontal Pod Autoscaler (HPA) ile yap\u0131land\u0131r\u0131n. CPU veya bellek kullan\u0131m\u0131na dayal\u0131 olarak pod say\u0131s\u0131n\u0131 otomatik olarak art\u0131r\u0131p azaltmak, ani trafik dalgalanmalar\u0131na kar\u015f\u0131 sisteminizi dayan\u0131kl\u0131 hale getirir.\n
\n# SafeLine WAF i\u00e7in HPA \u00f6rne\u011fi\napiVersion: autoscaling\/v2\nkind: HorizontalPodAutoscaler\nmetadata:\n name: safeline-waf-hpa\nspec:\n scaleTargetRef:\n apiVersion: apps\/v1\n kind: Deployment\n name: safeline-waf\n minReplicas: 2\n maxReplicas: 10\n metrics:\n - type: Resource\n resource:\n name: cpu\n target:\n type: Utilization\n averageUtilization: 70 # CPU kullan\u0131m\u0131 %70'e ula\u015ft\u0131\u011f\u0131nda \u00f6l\u00e7eklendir\n <\/pre>\n<\/code>
\n Benzer bir HPA'y\u0131 Ingress-Nginx Controller deployment'\u0131n\u0131z i\u00e7in de uygulay\u0131n.<\/li>\n
- Kaynak Y\u00f6netimi (Resource Management):<\/strong> SafeLine WAF ve Ingress-Nginx pod'lar\u0131n\u0131z i\u00e7in do\u011fru CPU ve bellek
requests<\/code> ve limits<\/code> de\u011ferlerini belirleyin. Yetersiz kaynaklar performans\u0131 d\u00fc\u015f\u00fcrebilirken, a\u015f\u0131r\u0131 kaynak atamas\u0131 k\u00fcme kaynaklar\u0131n\u0131 israf edebilir. \u0130lk ba\u015fta g\u00f6zlemleyerek ve kademeli olarak optimize ederek ideal de\u011ferleri bulun.<\/li>\n- \u00d6zel Nginx Optimizasyonlar\u0131:<\/strong> Ingress-Nginx ConfigMap'i arac\u0131l\u0131\u011f\u0131yla Nginx'in performans ayarlar\u0131n\u0131 (\u00f6rne\u011fin,
worker_processes<\/code>, worker_connections<\/code>, keepalive_timeout<\/code>) \u00f6zelle\u015ftirebilirsiniz. Bu ayarlar, a\u011f ortam\u0131n\u0131z ve beklenen trafik y\u00fck\u00fcn\u00fczle e\u015fle\u015fmelidir.<\/li>\n<\/ul>\nCaching Stratejileri ve Performans \u0130yile\u015ftirmeleri<\/h3>\n\n- Ingress-Nginx Cache Kullan\u0131m\u0131:<\/strong> Statik i\u00e7erikler veya s\u0131k eri\u015filen API yan\u0131tlar\u0131 i\u00e7in Ingress-Nginx'in yerle\u015fik \u00f6nbellek mekanizmas\u0131n\u0131 kullanabilirsiniz. Bu, SafeLine WAF'\u0131n ayn\u0131 istekleri tekrar tekrar i\u015flemesini engelleyerek hem WAF'\u0131n y\u00fck\u00fcn\u00fc azalt\u0131r hem de genel yan\u0131t s\u00fcresini d\u00fc\u015f\u00fcr\u00fcr.\n
\n# Ingress objesine eklenen Nginx cache annotation'lar\u0131\napiVersion: networking.k8s.io\/v1\nkind: Ingress\nmetadata:\n name: my-app-ingress\n annotations:\n nginx.ingress.kubernetes.io\/proxy-buffering: \"on\"\n nginx.ingress.kubernetes.io\/proxy-buffers: \"8 16k\"\n nginx.ingress.kubernetes.io\/proxy-buffer-size: \"32k\"\n nginx.ingress.kubernetes.io\/proxy-cache-valid: \"200 302 10m\" # 200 ve 302 durum kodlar\u0131 i\u00e7in 10 dakika cache\n nginx.ingress.kubernetes.io\/proxy-cache-key: \"$scheme$host$request_uri\"\n nginx.ingress.kubernetes.io\/proxy-cache: \"my-cache\" # ConfigMap'te tan\u0131mlanm\u0131\u015f cache alan\u0131\n # Di\u011fer cache ayarlar\u0131...\n<\/pre>\n<\/code>
\n Bu cache mekanizmas\u0131n\u0131 aktif etmek i\u00e7in Ingress-Nginx Controller'\u0131n ConfigMap'inde bir proxy-cache-path<\/code> tan\u0131mlaman\u0131z gerekebilir.<\/li>\n- WAF Y\u00fck\u00fcn\u00fc Hafifletme:<\/strong> G\u00fcvenli oldu\u011fu bilinen (\u00f6rne\u011fin, sadece statik dosya sunan) belirli URL yollar\u0131n\u0131 SafeLine WAF bypass kurallar\u0131 ile direkt olarak uygulamaya y\u00f6nlendirebilirsiniz. Bu, WAF'\u0131n sadece ger\u00e7ekten riskli trafi\u011fe odaklanmas\u0131n\u0131 sa\u011flar.<\/li>\n<\/ul>\n
Monitoring, Logging ve G\u00f6zlemlenebilirlik<\/h3>\n
G\u00fcvenli\u011finizi ve performans\u0131n\u0131z\u0131 s\u00fcrekli olarak izlemek i\u00e7in kapsaml\u0131 bir g\u00f6zlemlenebilirlik (observability) stratejisi uygulay\u0131n:<\/p>\n
\n- Metrik Toplama:<\/strong> Prometheus ve Grafana kullanarak hem Ingress-Nginx hem de SafeLine WAF pod'lar\u0131ndan metrikleri toplay\u0131n. Ingress-Nginx,
\/metrics<\/code> endpoint'i \u00fczerinden zengin metrikler sunar. SafeLine WAF da benzer \u015fekilde kendi performans ve g\u00fcvenlik metriklerini d\u0131\u015fa aktarmal\u0131d\u0131r.<\/li>\n- Merkezi Loglama:<\/strong> SafeLine WAF'\u0131n ve Ingress-Nginx'in \u00fcretti\u011fi t\u00fcm loglar\u0131 ELK Stack (Elasticsearch, Logstash, Kibana) veya Loki gibi merkezi bir loglama sistemine g\u00f6nderin. Bu, g\u00fcvenlik olaylar\u0131n\u0131, performans sorunlar\u0131n\u0131 ve anormal davran\u0131\u015flar\u0131 h\u0131zl\u0131 bir \u015fekilde tespit etmenizi sa\u011flar.<\/li>\n
- Uyar\u0131lar (Alerting):<\/strong> Belirli g\u00fcvenlik olaylar\u0131 (\u00f6rne\u011fin, \u00e7ok say\u0131da WAF engellemesi) veya performans d\u00fc\u015f\u00fc\u015fleri (\u00f6rne\u011fin, y\u00fcksek gecikme s\u00fcresi) i\u00e7in Prometheus Alertmanager veya benzeri ara\u00e7larla uyar\u0131lar tan\u0131mlay\u0131n.<\/li>\n<\/ul>\n
Uzman \u0130pucu: Kubernetes k\u00fcmenizde g\u00fcvenlik ve performans\u0131 bir b\u00fct\u00fcn olarak ele al\u0131n. SafeLine WAF sadece bir katmand\u0131r. Network Policy'ler, Pod Security Standard'lar\u0131 ve RBAC gibi Kubernetes'in yerel g\u00fcvenlik mekanizmalar\u0131n\u0131 da aktif olarak kullanarak \u00e7ok katmanl\u0131 bir savunma stratejisi olu\u015fturun. Bu b\u00fct\u00fcnsel yakla\u015f\u0131m, siber tehditlere kar\u015f\u0131 en g\u00fc\u00e7l\u00fc korumay\u0131 sa\u011flar.<\/div>\n
Mobil Uyumlu Tasar\u0131m ve HTTP Ba\u015fl\u0131klar\u0131<\/h3>\n
Makale gereksinimlerinden biri de mobil uyumlu HTML \u00fcretmek ve media query \u00f6rnekleri eklemekti. Do\u011frudan Ingress-Nginx veya SafeLine WAF bu i\u015fi yapmasa da, uygulaman\u0131z\u0131n mobil uyumlu i\u00e7eri\u011fi do\u011fru bir \u015fekilde sunuldu\u011fundan emin olmak i\u00e7in Ingress-Nginx arac\u0131l\u0131\u011f\u0131yla baz\u0131 HTTP ba\u015fl\u0131klar\u0131n\u0131 y\u00f6netebilir veya uygulaman\u0131z\u0131n kendisinde uygun medya sorgular\u0131 kullanabilirsiniz. \u0130\u015fte bir \u00f6rnek:<\/p>\n
\n\n\n\n\n \n \n Mobil Uyumlu Sayfa \u00d6rne\u011fi<\/title>\n <style>\n body {\n font-family: Arial, sans-serif;\n margin: 0;\n padding: 0;\n background-color: #f4f4f4;\n }\n .container {\n width: 90%;\n margin: 20px auto;\n padding: 20px;\n background-color: #fff;\n box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);\n }\n h1 {\n color: #333;\n }\n p {\n color: #666;\n line-height: 1.6;\n }\n\n \/* Ekran geni\u015fli\u011fi 768px veya daha az oldu\u011funda uygulanacak stiller (tabletler ve mobil cihazlar) *\/\n @media screen and (max-width: 768px) {\n .container {\n width: 95%; \/* Konteyner daha geni\u015f olur *\/\n margin: 10px auto;\n padding: 15px;\n }\n h1 {\n font-size: 24px;\n }\n p {\n font-size: 14px;\n }\n }\n\n \/* Ekran geni\u015fli\u011fi 480px veya daha az oldu\u011funda uygulanacak stiller (k\u00fc\u00e7\u00fck mobil cihazlar) *\/\n @media screen and (max-width: 480px) {\n .container {\n padding: 10px;\n }\n h1 {\n font-size: 20px;\n }\n p {\n font-size: 12px;\n }\n }\n <\/style>\n<\/head>\n<body>\n <div class=\"container\">\n <h1>Mobil Uyumlu Ba\u015fl\u0131k<\/h1>\n <p>Bu paragraf, farkl\u0131 ekran boyutlar\u0131na g\u00f6re font b\u00fcy\u00fckl\u00fc\u011f\u00fcn\u00fc ve konteyner geni\u015fli\u011fini otomatik olarak ayarlayan bir tasar\u0131ma sahiptir. Ingress-Nginx ve SafeLine WAF, bu i\u00e7eri\u011fin g\u00fcvenli ve performansl\u0131 bir \u015fekilde son kullan\u0131c\u0131lara ula\u015fmas\u0131n\u0131 sa\u011flar.<\/p>\n <\/div>\n<\/body>\n<\/html>\n<\/pre>\n<p><\/code><\/p>\n<p>Bu HTML ve CSS \u00f6rne\u011fi, web uygulaman\u0131z\u0131n kendisinde nas\u0131l mobil uyumlulu\u011fu sa\u011flayaca\u011f\u0131n\u0131z\u0131 g\u00f6stermektedir. Ingress-Nginx, bu HTML i\u00e7eri\u011fini performansl\u0131 bir \u015fekilde sunarken, SafeLine WAF ise bu i\u00e7eri\u011fe y\u00f6nelik sald\u0131r\u0131lar\u0131 engeller.<\/p>\n<h2>S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h2>\n<p>SafeLine WAF'\u0131 Ingress-Nginx ile entegre etme s\u00fcreci hakk\u0131nda s\u0131k\u00e7a sorulan baz\u0131 sorular ve cevaplar\u0131 a\u015fa\u011f\u0131dad\u0131r:<\/p>\n<ol>\n<li><strong>SafeLine WAF, Ingress-Nginx performans\u0131n\u0131 d\u00fc\u015f\u00fcr\u00fcr m\u00fc?<\/strong>\n<p>Her ek g\u00fcvenlik katman\u0131 gibi, SafeLine WAF da trafi\u011fi analiz etti\u011fi i\u00e7in belirli bir miktarda gecikmeye (latency) neden olabilir. Ancak modern WAF \u00e7\u00f6z\u00fcmleri, y\u00fcksek performans g\u00f6z \u00f6n\u00fcnde bulundurularak tasarlanm\u0131\u015ft\u0131r. Do\u011fru \u00f6l\u00e7ekleme, kaynak tahsisi ve optimizasyonlarla (\u00f6rne\u011fin, \u00f6nbellekleme), bu performans d\u00fc\u015f\u00fc\u015f\u00fc genellikle ihmal edilebilir d\u00fczeyde tutulabilir. \u00dcstelik, g\u00fcvenli\u011fin sa\u011flad\u0131\u011f\u0131 faydalar genellikle olas\u0131 k\u00fc\u00e7\u00fck performans kay\u0131plar\u0131ndan \u00e7ok daha a\u011f\u0131r basar.<\/p>\n<\/li>\n<li><strong>Entegrasyon i\u00e7in en iyi da\u011f\u0131t\u0131m modeli nedir?<\/strong>\n<p>Genellikle, SafeLine WAF'\u0131n Ingress-Nginx Controller'\u0131n arkas\u0131nda ayr\u0131 bir servis olarak \u00e7al\u0131\u015ft\u0131\u011f\u0131 ve Ingress-Nginx'in trafi\u011fi bu WAF servisine y\u00f6nlendirdi\u011fi \"Ters Proxy Zincirlemesi\" veya \"Ingress Controller seviyesinde entegrasyon\" modeli en \u00e7ok tercih edilenidir. Bu model, y\u00f6netim kolayl\u0131\u011f\u0131, merkezi kontrol ve \u00f6l\u00e7eklenebilirlik a\u00e7\u0131s\u0131ndan iyi bir denge sunar. Sidecar deseni, \u00f6zellikle \u00e7ok ince taneli g\u00fcvenlik kontrolleri gerekti\u011finde veya WAF \u00e7ok hafif bir konteyner olarak sunuluyorsa d\u00fc\u015f\u00fcn\u00fclebilir.<\/p>\n<\/li>\n<li><strong>TLS sonland\u0131rmay\u0131 nerede yapmal\u0131y\u0131z?<\/strong>\n<p>TLS sonland\u0131rmay\u0131 Ingress-Nginx Controller seviyesinde yapmak en yayg\u0131n ve \u00f6nerilen yakla\u015f\u0131md\u0131r. Bu, Ingress-Nginx'in gelen \u015fifreli trafi\u011fi \u015fifresini \u00e7\u00f6zerek SafeLine WAF'a ve ard\u0131ndan uygulaman\u0131za HTTP olarak iletmesini sa\u011flar. SafeLine WAF, \u015fifre \u00e7\u00f6z\u00fclm\u00fc\u015f trafi\u011fi analiz edebilir. E\u011fer SafeLine WAF kendisi de TLS sonland\u0131rma yetene\u011fine sahipse ve ek bir g\u00fcvenlik katman\u0131 olarak bu i\u015flevi yerine getirmesini istiyorsan\u0131z, TLS'i SafeLine WAF'ta sonland\u0131r\u0131p, WAF'\u0131n uygulaman\u0131za giden trafi\u011fi tekrar \u015fifrelemesini (veya HTTP olarak g\u00f6ndermesini) sa\u011flayabilirsiniz. Ancak bu, yap\u0131land\u0131rmay\u0131 karma\u015f\u0131kla\u015ft\u0131rabilir.<\/p>\n<\/li>\n<li><strong>SafeLine WAF kurallar\u0131n\u0131 nas\u0131l g\u00fcncellerim?<\/strong>\n<p>SafeLine WAF kurallar\u0131 genellikle WAF'\u0131n kendi y\u00f6netim aray\u00fcz\u00fc veya API'si arac\u0131l\u0131\u011f\u0131yla g\u00fcncellenir. E\u011fer WAF konteyner olarak \u00e7al\u0131\u015f\u0131yorsa, bu kurallar\u0131 bir ConfigMap olarak Kubernetes'e ekleyip WAF pod'una mount edebilir veya bir Persistent Volume kullanabilirsiniz. Otomatik kural g\u00fcncellemeleri i\u00e7in, SafeLine'\u0131n sa\u011flad\u0131\u011f\u0131 mekanizmalar\u0131 (\u00f6rne\u011fin, bir CI\/CD hatt\u0131 veya bir operat\u00f6r arac\u0131l\u0131\u011f\u0131yla) takip etmek en iyisidir.<\/p>\n<\/li>\n<li><strong>Hangi loglar\u0131 izlemeliyim?<\/strong>\n<p>Sistemin sa\u011fl\u0131\u011f\u0131 ve g\u00fcvenli\u011fi i\u00e7in hem Ingress-Nginx hem de SafeLine WAF'\u0131n loglar\u0131n\u0131 yak\u0131ndan izlemelisiniz. Ingress-Nginx loglar\u0131, trafik ak\u0131\u015f\u0131n\u0131, hatalar\u0131 ve y\u00f6nlendirme sorunlar\u0131n\u0131 g\u00f6sterirken, SafeLine WAF loglar\u0131 tespit edilen sald\u0131r\u0131lar\u0131, engellenen istekleri, kural tetiklenmelerini ve genel g\u00fcvenlik olaylar\u0131n\u0131 detayland\u0131r\u0131r. Merkezi bir loglama sistemi kullanarak bu loglar\u0131 korele etmek, tehditleri ve performans sorunlar\u0131n\u0131 daha h\u0131zl\u0131 anlaman\u0131za yard\u0131mc\u0131 olur.<\/p>\n<\/li>\n<\/ol>\n<h2>Sonu\u00e7<\/h2>\n<p>Kubernetes tabanl\u0131 uygulamalar\u0131n g\u00fcvenli\u011fi, modern BT altyap\u0131lar\u0131n\u0131n en kritik bile\u015fenlerinden biridir. SafeLine WAF'\u0131 Ingress-Nginx Controller ile entegre etmek, uygulamalar\u0131n\u0131za g\u00fc\u00e7l\u00fc bir uygulama katman\u0131 g\u00fcvenlik duvar\u0131 korumas\u0131 eklemenin etkili bir yoludur. Bu entegrasyon, bilinen web sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flarken, ayn\u0131 zamanda geli\u015fmi\u015f tehditleri de davran\u0131\u015fsal analiz yetenekleriyle engellemeye yard\u0131mc\u0131 olur. Ad\u0131m ad\u0131m kurulum, do\u011fru yap\u0131land\u0131rma ve s\u00fcrekli optimizasyon ile hem performanstan \u00f6d\u00fcn vermeden g\u00fcvenli\u011fi sa\u011flayabilir hem de siber tehditlere kar\u015f\u0131 g\u00fc\u00e7l\u00fc bir savunma hatt\u0131 olu\u015fturabilirsiniz.<\/p>\n<p>Unutmay\u0131n ki g\u00fcvenlik s\u00fcrekli bir yolculuktur. Entegrasyonu tamamlad\u0131ktan sonra bile, g\u00fcvenlik politikalar\u0131n\u0131z\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irmeli, SafeLine WAF kurallar\u0131n\u0131z\u0131 g\u00fcncellemeli ve sisteminizi izlemeye devam etmelisiniz. Bu yakla\u015f\u0131m, dinamik tehdit ortam\u0131nda uygulamalar\u0131n\u0131z\u0131n her zaman g\u00fcvende kalmas\u0131n\u0131 sa\u011flayacakt\u0131r.<\/p>\n<p><\/body><\/p>\n","protected":false},"excerpt":{"rendered":"G\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zla de\u011fi\u015fen dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131n\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik hale geldi. \u00d6zellikle Kubernetes gibi dinamik…","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1504],"tags":[],"class_list":{"0":"post-33796","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-nginx","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi<\/title>\n<meta name=\"description\" content=\"G\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zla de\u011fi\u015fen dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131n\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik hale geldi. \u00d6zellikle Kubernetes gibi dinamik ve mikroservis tabanl\u0131 ortamlarda, uygulamalar\u0131 siber sald\u0131r\u0131lardan korumak karma\u015f\u0131k bir s\u00fcre\u00e7tir. Bu kapsaml\u0131 rehber, pop\u00fcler Ingress-Nginx Controller'\u0131 ile g\u00fc\u00e7l\u00fc bir Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) olan SafeLine WAF'\u0131 Kubernetes k\u00fcmenize nas\u0131l entegre edece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131klayacak, b\u00f6ylece uygulamalar\u0131n\u0131z\u0131 g\u00fcvende tutarken performans kayb\u0131 ya\u015famayacaks\u0131n\u0131z.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi\" \/>\n<meta property=\"og:description\" content=\"G\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zla de\u011fi\u015fen dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131n\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik hale geldi. \u00d6zellikle Kubernetes gibi dinamik ve mikroservis tabanl\u0131 ortamlarda, uygulamalar\u0131 siber sald\u0131r\u0131lardan korumak karma\u015f\u0131k bir s\u00fcre\u00e7tir. Bu kapsaml\u0131 rehber, pop\u00fcler Ingress-Nginx Controller'\u0131 ile g\u00fc\u00e7l\u00fc bir Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) olan SafeLine WAF'\u0131 Kubernetes k\u00fcmenize nas\u0131l entegre edece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131klayacak, b\u00f6ylece uygulamalar\u0131n\u0131z\u0131 g\u00fcvende tutarken performans kayb\u0131 ya\u015famayacaks\u0131n\u0131z.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-07T03:01:06+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"22 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi\",\"datePublished\":\"2025-11-07T03:01:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/\"},\"wordCount\":3685,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Nginx\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/\",\"name\":\"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-07T03:01:06+00:00\",\"description\":\"G\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zla de\u011fi\u015fen dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131n\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik hale geldi. \u00d6zellikle Kubernetes gibi dinamik ve mikroservis tabanl\u0131 ortamlarda, uygulamalar\u0131 siber sald\u0131r\u0131lardan korumak karma\u015f\u0131k bir s\u00fcre\u00e7tir. Bu kapsaml\u0131 rehber, pop\u00fcler Ingress-Nginx Controller'\u0131 ile g\u00fc\u00e7l\u00fc bir Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) olan SafeLine WAF'\u0131 Kubernetes k\u00fcmenize nas\u0131l entegre edece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131klayacak, b\u00f6ylece uygulamalar\u0131n\u0131z\u0131 g\u00fcvende tutarken performans kayb\u0131 ya\u015famayacaks\u0131n\u0131z.\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi","description":"G\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zla de\u011fi\u015fen dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131n\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik hale geldi. \u00d6zellikle Kubernetes gibi dinamik ve mikroservis tabanl\u0131 ortamlarda, uygulamalar\u0131 siber sald\u0131r\u0131lardan korumak karma\u015f\u0131k bir s\u00fcre\u00e7tir. Bu kapsaml\u0131 rehber, pop\u00fcler Ingress-Nginx Controller'\u0131 ile g\u00fc\u00e7l\u00fc bir Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) olan SafeLine WAF'\u0131 Kubernetes k\u00fcmenize nas\u0131l entegre edece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131klayacak, b\u00f6ylece uygulamalar\u0131n\u0131z\u0131 g\u00fcvende tutarken performans kayb\u0131 ya\u015famayacaks\u0131n\u0131z.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi","og_description":"G\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zla de\u011fi\u015fen dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131n\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik hale geldi. \u00d6zellikle Kubernetes gibi dinamik ve mikroservis tabanl\u0131 ortamlarda, uygulamalar\u0131 siber sald\u0131r\u0131lardan korumak karma\u015f\u0131k bir s\u00fcre\u00e7tir. Bu kapsaml\u0131 rehber, pop\u00fcler Ingress-Nginx Controller'\u0131 ile g\u00fc\u00e7l\u00fc bir Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) olan SafeLine WAF'\u0131 Kubernetes k\u00fcmenize nas\u0131l entegre edece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131klayacak, b\u00f6ylece uygulamalar\u0131n\u0131z\u0131 g\u00fcvende tutarken performans kayb\u0131 ya\u015famayacaks\u0131n\u0131z.","og_url":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-07T03:01:06+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"22 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi","datePublished":"2025-11-07T03:01:06+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/"},"wordCount":3685,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Nginx"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/","name":"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-07T03:01:06+00:00","description":"G\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zla de\u011fi\u015fen dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131n\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik hale geldi. \u00d6zellikle Kubernetes gibi dinamik ve mikroservis tabanl\u0131 ortamlarda, uygulamalar\u0131 siber sald\u0131r\u0131lardan korumak karma\u015f\u0131k bir s\u00fcre\u00e7tir. Bu kapsaml\u0131 rehber, pop\u00fcler Ingress-Nginx Controller'\u0131 ile g\u00fc\u00e7l\u00fc bir Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) olan SafeLine WAF'\u0131 Kubernetes k\u00fcmenize nas\u0131l entegre edece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131klayacak, b\u00f6ylece uygulamalar\u0131n\u0131z\u0131 g\u00fcvende tutarken performans kayb\u0131 ya\u015famayacaks\u0131n\u0131z.","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/safeline-waf-ile-ingress-nginx-entegrasyonu-kubernetes-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SafeLine WAF ile Ingress-Nginx Entegrasyonu: Kubernetes Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33796","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=33796"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/33796\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=33796"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=33796"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=33796"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}