{"id":34141,"date":"2025-11-11T22:41:07","date_gmt":"2025-11-11T19:41:07","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=34141"},"modified":"2025-11-11T22:41:07","modified_gmt":"2025-11-11T19:41:07","slug":"ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/","title":{"rendered":"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi"},"content":{"rendered":"

<\/p>\n

IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi<\/h2>\n

G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda internet \u00fczerindeki gizlili\u011fimizi ve g\u00fcvenli\u011fimizi korumak her zamankinden daha kritik bir hale gelmi\u015ftir. Sanal \u00d6zel A\u011f (VPN) teknolojisi, internet trafi\u011finizi \u015fifreleyerek ve IP adresinizi maskeleyerek bu korumay\u0131 sa\u011flaman\u0131n en etkili yollar\u0131ndan biridir. Kendi VPN sunucunuzu kurmak, \u00fc\u00e7\u00fcnc\u00fc taraf VPN sa\u011flay\u0131c\u0131lar\u0131na g\u00fcvenmek yerine verileriniz \u00fczerinde tam kontrol sahibi olman\u0131z\u0131 sa\u011flar. Bu kapsaml\u0131 rehberde, Ubuntu 20.04 i\u015fletim sistemi \u00fczerinde StrongSwan yaz\u0131l\u0131m\u0131n\u0131 kullanarak g\u00fcvenli ve modern bir IKEv2 VPN sunucusunu nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m anlataca\u011f\u0131z.<\/p>\n

IKEv2 (Internet Key Exchange version 2), \u00f6zellikle mobil cihazlar i\u00e7in optimize edilmi\u015f, h\u0131zl\u0131 ve g\u00fcvenilir bir VPN protokol\u00fcd\u00fcr. A\u011f de\u011fi\u015fikliklerinde (\u00f6rne\u011fin, Wi-Fi’dan mobil veriye ge\u00e7i\u015f) ba\u011flant\u0131y\u0131 kesmeden yeniden kurma yetene\u011fi sayesinde kesintisiz bir deneyim sunar. StrongSwan ise a\u00e7\u0131k kaynakl\u0131, g\u00fc\u00e7l\u00fc ve esnek bir IPsec (Internet Protocol Security) uygulamas\u0131d\u0131r. Bu kombinasyon, hem g\u00fcvenlik hem de performans a\u00e7\u0131s\u0131ndan \u00fcst d\u00fczey bir VPN \u00e7\u00f6z\u00fcm\u00fc sunar.<\/p>\n

Bu rehber, teknik bilgiye sahip kullan\u0131c\u0131lar d\u00fc\u015f\u00fcn\u00fclerek haz\u0131rlanm\u0131\u015ft\u0131r ve sunucu y\u00f6netimi, komut sat\u0131r\u0131 kullan\u0131m\u0131 ve a\u011f kavramlar\u0131 hakk\u0131nda temel bir anlay\u0131\u015fa sahip oldu\u011funuz varsay\u0131lmaktad\u0131r. Rehberin sonunda, kendi g\u00fcvenli IKEv2 VPN sunucunuzu ba\u015far\u0131yla kurmu\u015f ve \u00e7e\u015fitli cihazlar\u0131n\u0131zdan (Windows, macOS, iOS, Android) ba\u011flanabilir duruma gelmi\u015f olacaks\u0131n\u0131z.<\/p>\n

\u00d6n Gereksinimler<\/h3>\n

Kuruluma ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki gereksinimlerin kar\u015f\u0131land\u0131\u011f\u0131ndan emin olun:<\/p>\n

* Ubuntu 20.04 Sunucusu:<\/strong> Yeni kurulmu\u015f veya g\u00fcncel bir Ubuntu 20.04 (Focal Fossa) sunucusuna ihtiyac\u0131n\u0131z var. Bu bir sanal makine (AWS EC2, DigitalOcean Droplet, Vultr VPS vb.) veya fiziksel bir sunucu olabilir.
\n* SSH Eri\u015fimi:<\/strong> Sunucunuza SSH \u00fczerinden eri\u015fiminiz olmal\u0131.
\n* sudo<\/code> Yetkileri:<\/strong> Kurulum ve yap\u0131land\u0131rma i\u015flemleri i\u00e7in sudo<\/code> yetkilerine sahip bir kullan\u0131c\u0131 hesab\u0131n\u0131z olmal\u0131.
\n* Statik Genel IP Adresi:<\/strong> VPN sunucunuzun internetten eri\u015filebilir statik bir genel IP adresi olmal\u0131d\u0131r.
\n* Alan Ad\u0131 (Domain Name) (\u0130ste\u011fe Ba\u011fl\u0131 ama \u015eiddetle \u00d6nerilir):<\/strong> VPN sunucunuz i\u00e7in bir alan ad\u0131 kullanmak (\u00f6rne\u011fin, vpn.example.com<\/code>), sertifika y\u00f6netimini kolayla\u015ft\u0131r\u0131r ve baz\u0131 istemcilerde ba\u011flant\u0131 sorunlar\u0131n\u0131 \u00f6nleyebilir. Let’s Encrypt gibi hizmetlerle \u00fccretsiz SSL sertifikalar\u0131 alman\u0131z m\u00fcmk\u00fcn olur. Bu rehberde hem IP adresi hem de alan ad\u0131 ile kurulumu ele alaca\u011f\u0131z.
\n* G\u00fcvenlik Duvar\u0131 Bilgisi:<\/strong> Ubuntu’nun varsay\u0131lan g\u00fcvenlik duvar\u0131 olan UFW (Uncomplicated Firewall) hakk\u0131nda temel bilgiye sahip olman\u0131z faydal\u0131 olacakt\u0131r.<\/p>\n

Ad\u0131m 1: Sunucuyu G\u00fcncelleme ve Gerekli Paketleri Kurma<\/h3>\n

Herhangi bir kuruluma ba\u015flamadan \u00f6nce sunucunuzun paket listesini g\u00fcncellemek ve mevcut paketleri en son s\u00fcr\u00fcmlerine y\u00fckseltmek iyi bir uygulamad\u0131r. Bu, g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapat\u0131r ve yaz\u0131l\u0131m uyumlulu\u011funu sa\u011flar.<\/p>\n

sudo apt update\nsudo apt upgrade -y<\/code><\/pre>\n
Ard\u0131ndan, StrongSwan ve onunla birlikte \u00e7al\u0131\u015facak gerekli PKI (Public Key Infrastructure) ara\u00e7lar\u0131n\u0131 ve eklentilerini kuraca\u011f\u0131z. PKI ara\u00e7lar\u0131, VPN sunucusu ve istemcileri i\u00e7in dijital sertifikalar olu\u015fturmam\u0131za olanak tan\u0131r.<\/p>\n
sudo apt install strongswan strongswan-pki libcharon-extra-plugins libswanctl-etcd-plugins -y<\/code><\/pre>\n
*   strongswan<\/code>: StrongSwan IPsec VPN yaz\u0131l\u0131m\u0131n\u0131n ana paketi.
\n*   strongswan-pki<\/code>: Sertifika Yetkilisi (CA) ve sunucu\/istemci sertifikalar\u0131 olu\u015fturmak i\u00e7in gerekli komut sat\u0131r\u0131 ara\u00e7lar\u0131n\u0131 i\u00e7erir.
\n*   libcharon-extra-plugins<\/code>: StrongSwan’\u0131n charon<\/code> daemon’\u0131 i\u00e7in ek eklentiler sa\u011flar.
\n*   libswanctl-etcd-plugins<\/code>: Bu rehber i\u00e7in do\u011frudan gerekli olmasa da, StrongSwan’\u0131n y\u00f6netim ara\u00e7lar\u0131 i\u00e7in ek i\u015flevsellik sunabilir.<\/p>\n
Kurulum tamamland\u0131ktan sonra StrongSwan servisi otomatik olarak ba\u015flayabilir. Ancak, hen\u00fcz yap\u0131land\u0131rmad\u0131\u011f\u0131m\u0131z i\u00e7in i\u015flevsel de\u011fildir.<\/p>\n
Ad\u0131m 2: G\u00fcvenlik Duvar\u0131n\u0131 Yap\u0131land\u0131rma (UFW)<\/h3>\n
G\u00fcvenlik duvar\u0131, sunucunuzu istenmeyen eri\u015fimlere kar\u015f\u0131 korumak i\u00e7in hayati \u00f6neme sahiptir. UFW, Ubuntu’da g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 y\u00f6netmeyi kolayla\u015ft\u0131ran bir aray\u00fczd\u00fcr. VPN’in d\u00fczg\u00fcn \u00e7al\u0131\u015fabilmesi i\u00e7in belirli portlar\u0131n a\u00e7\u0131lmas\u0131 gerekmektedir.<\/p>\n
\u00d6ncelikle, UFW’nin etkin oldu\u011fundan emin olun ve SSH ba\u011flant\u0131n\u0131za izin verin:<\/p>\n
sudo ufw enable\nsudo ufw allow ssh<\/code><\/pre>\n
VPN ba\u011flant\u0131lar\u0131 i\u00e7in IKEv2 protokol\u00fcn\u00fcn kulland\u0131\u011f\u0131 UDP portlar\u0131 olan 500 (IKE) ve 4500 (NAT Traversal) portlar\u0131n\u0131 a\u00e7mam\u0131z gerekiyor:<\/p>\n
sudo ufw allow 500\/udp\nsudo ufw allow 4500\/udp<\/code><\/pre>\n
Ayr\u0131ca, IPsec t\u00fcnelinin \u00e7al\u0131\u015fabilmesi i\u00e7in ESP (Encapsulating Security Payload) protokol\u00fcne izin vermemiz gerekir. UFW, IPsec’i otomatik olarak tan\u0131r ve buna izin veren bir kural\u0131 basitle\u015ftirir:<\/p>\n
sudo ufw allow proto esp<\/code><\/pre>\n
Bu kural, IPsec trafi\u011finin ge\u00e7i\u015fine izin verir. Kurallar\u0131 kontrol etmek i\u00e7in:<\/p>\n
sudo ufw status verbose<\/code><\/pre>\n
\u00c7\u0131kt\u0131da SSH, 500\/udp, 4500\/udp ve ESP protokol\u00fcne izin verildi\u011fini g\u00f6rmelisiniz.<\/p>\n
IP Y\u00f6nlendirmeyi Etkinle\u015ftirme:<\/strong><\/p>\n
VPN sunucunuzun istemcilerden gelen trafi\u011fi internete y\u00f6nlendirebilmesi i\u00e7in IP y\u00f6nlendirme (IP Forwarding) \u00f6zelli\u011finin etkin olmas\u0131 gerekir. Bu, kernel d\u00fczeyinde bir ayard\u0131r.<\/p>\n
\/etc\/sysctl.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyerek bu ayar\u0131 kal\u0131c\u0131 hale getirebiliriz:<\/p>\n
sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n
Dosyan\u0131n i\u00e7inde a\u015fa\u011f\u0131daki sat\u0131r\u0131 bulun veya ekleyin:<\/p>\n
net.ipv4.ip_forward = 1<\/code><\/pre>\n
De\u011fi\u015fiklikleri kaydedin ve d\u00fczenleyiciden \u00e7\u0131k\u0131n (CTRL+O, Enter, CTRL+X). Ayarlar\u0131 hemen uygulamak i\u00e7in:<\/p>\n
sudo sysctl -p<\/code><\/pre>\n
Bu komut, \/etc\/sysctl.conf<\/code> dosyas\u0131ndaki ayarlar\u0131 yeniden y\u00fckler ve IP y\u00f6nlendirmeyi etkinle\u015ftirir.<\/p>\n
Ad\u0131m 3: PKI (Public Key Infrastructure) Olu\u015fturma<\/h3>\n
StrongSwan, kimlik do\u011frulama i\u00e7in sertifikalar\u0131 kullan\u0131r. Bu ad\u0131mda, bir Sertifika Yetkilisi (CA) olu\u015fturacak, ard\u0131ndan bu CA taraf\u0131ndan imzalanm\u0131\u015f bir sunucu sertifikas\u0131 olu\u015fturaca\u011f\u0131z. Bu sertifikalar, VPN sunucunuzun g\u00fcvenilirli\u011fini kan\u0131tlayacak ve istemcilerin sunucuyu do\u011frulamas\u0131n\u0131 sa\u011flayacakt\u0131r.<\/p>\n
Ge\u00e7ici olarak sertifikalar\u0131 olu\u015fturmak i\u00e7in bir dizin olu\u015ftural\u0131m:<\/p>\n
mkdir ~\/pki\ncd ~\/pki<\/code><\/pre>\n
VPN Sunucusu i\u00e7in Sertifika Yetkilisi (CA) Olu\u015fturma<\/strong><\/p>\n
\u00d6nce, k\u00f6k Sertifika Yetkilisi (CA) anahtar\u0131n\u0131 olu\u015fturuyoruz. Bu anahtar, di\u011fer t\u00fcm sertifikalar\u0131 imzalamak i\u00e7in kullan\u0131lacakt\u0131r. G\u00fcvenlik i\u00e7in 4096 bit RSA anahtar\u0131 kullan\u0131yoruz.<\/p>\n
ipsec pki --gen --type rsa --size 4096 --outform pem > ca.key.pem<\/code><\/pre>\n
Ard\u0131ndan, bu anahtar\u0131 kullanarak bir kendinden imzal\u0131 CA sertifikas\u0131 olu\u015fturuyoruz. Bu sertifika, istemcilerinizin sunucuya g\u00fcvenmesi i\u00e7in kullan\u0131lacakt\u0131r. CN<\/code> (Common Name) alan\u0131, CA’n\u0131n ad\u0131n\u0131 temsil eder.<\/p>\n
ipsec pki --self --ca --lifetime 3650 --in ca.key.pem --type rsa --dn \"CN=VPN Root CA\" --outform pem > ca.cert.pem<\/code><\/pre>\n
*   --lifetime 3650<\/code>: Sertifikan\u0131n 10 y\u0131l ge\u00e7erli olmas\u0131n\u0131 sa\u011flar.
\n*   --dn \"CN=VPN Root CA\"<\/code>: Sertifikan\u0131n ortak ad\u0131n\u0131 belirler.<\/p>\n
VPN Sunucusu Sertifikas\u0131 Olu\u015fturma<\/strong><\/p>\n
\u015eimdi, VPN sunucumuz i\u00e7in bir anahtar ve sertifika olu\u015fturaca\u011f\u0131z. Bu sertifika, sunucunun kendisini istemcilere tan\u0131tmas\u0131n\u0131 sa\u011flayacakt\u0131r.<\/p>\n
Sunucu anahtar\u0131n\u0131 olu\u015fturun:<\/p>\n
ipsec pki --gen --type rsa --size 4096 --outform pem > server.key.pem<\/code><\/pre>\n
Sunucu genel anahtar\u0131n\u0131 olu\u015fturun:<\/p>\n
ipsec pki --pub --in server.key.pem --outform pem > server.pub.pem<\/code><\/pre>\n
CA’m\u0131z\u0131 kullanarak sunucu sertifikas\u0131n\u0131 imzalay\u0131n. --dn<\/code> (Common Name) ve --san<\/code> (Subject Alternative Name) alanlar\u0131 sunucunuzun alan ad\u0131n\u0131 (\u00f6rne\u011fin, vpn.example.com<\/code>) ve\/veya genel IP adresini i\u00e7ermelidir. Bu de\u011ferler, istemcilerin VPN sunucusunu do\u011fru bir \u015fekilde do\u011frulayabilmesi i\u00e7in \u00f6nemlidir. VPN_SUNUCU_IP_ADRES\u0130<\/code> yerine sunucunuzun ger\u00e7ek IP adresini, vpn.example.com<\/code> yerine ise kendi alan ad\u0131n\u0131z\u0131 yaz\u0131n.<\/p>\n
ipsec pki --issue --lifetime 1825 --in server.pub.pem --type rsa --dn \"CN=vpn.example.com\" --san \"vpn.example.com\" --san IP_ADRES\u0130N\u0130Z --ca ca.cert.pem --cacert ca.cert.pem --outform pem > server.cert.pem<\/code><\/pre>\n
*   --lifetime 1825<\/code>: Sertifikan\u0131n 5 y\u0131l ge\u00e7erli olmas\u0131n\u0131 sa\u011flar.
\n*   --dn \"CN=vpn.example.com\"<\/code>: Sunucunun ortak ad\u0131n\u0131 belirler.
\n*   --san \"vpn.example.com\" --san IP_ADRES\u0130N\u0130Z<\/code>: Sertifikay\u0131 alan ad\u0131 ve IP adresi i\u00e7in ge\u00e7erli k\u0131lar. Bu, istemcilerin DNS ad\u0131 veya IP adresi ile ba\u011flanmas\u0131na olanak tan\u0131r.<\/p>\n
Sertifikalar\u0131 Do\u011fru Konuma Kopyalama<\/strong><\/p>\n
Olu\u015fturdu\u011fumuz CA ve sunucu sertifikalar\u0131n\u0131 StrongSwan’\u0131n bekledi\u011fi dizinlere ta\u015f\u0131y\u0131n:<\/p>\n
sudo mv ca.cert.pem \/etc\/ipsec.d\/cacerts\/\nsudo mv server.cert.pem \/etc\/ipsec.d\/certs\/\nsudo mv server.key.pem \/etc\/ipsec.d\/private\/<\/code><\/pre>\n
\u00d6zel anahtar\u0131n (server.key.pem) izinlerini yaln\u0131zca root kullan\u0131c\u0131s\u0131n\u0131n okuyabilece\u011fi \u015fekilde ayarlamak \u00e7ok \u00f6nemlidir:<\/p>\n
sudo chmod 600 \/etc\/ipsec.d\/private\/server.key.pem<\/code><\/pre>\n
Bu ad\u0131m, \u00f6zel anahtar\u0131n\u0131z\u0131n g\u00fcvenli\u011fini sa\u011flar ve yetkisiz eri\u015fimi engeller.<\/p>\n
Ad\u0131m 4: StrongSwan’\u0131 Yap\u0131land\u0131rma<\/h3>\n
StrongSwan’\u0131n ana yap\u0131land\u0131rma dosyas\u0131 \/etc\/ipsec.conf<\/code>‘tur. Bu dosyay\u0131 d\u00fczenleyerek VPN ba\u011flant\u0131m\u0131z\u0131n nas\u0131l kurulaca\u011f\u0131n\u0131 ve hangi parametreleri kullanaca\u011f\u0131n\u0131 belirleyece\u011fiz.<\/p>\n
sudo nano \/etc\/ipsec.conf<\/code><\/pre>\n
Dosyan\u0131n i\u00e7eri\u011fini a\u015fa\u011f\u0131daki gibi d\u00fczenleyin. Mevcut i\u00e7eri\u011fi silebilir veya yorum sat\u0131r\u0131 yapabilirsiniz.<\/p>\n
config setup\n    charondebug=\"ike 2, knl 2, cfg 2, net 2, esp 2, dmn 2, mgr 2\"\n    strictcrlpolicy=no\n    uniqueids = no\n\nconn %default\n    keyexchange=ikev2\n    dpdaction=clear\n    dpddelay=300s\n    rekey=no\n    reauth=no\n    leftfirewall=yes\n    leftauth=pubkey\n    leftsendcert=always\n    rightauth=eap-mschapv2 # veya pubkey\n    rightsendcert=never # EAP kullan\u0131l\u0131yorsa, pubkey kullan\u0131l\u0131yorsa always\n    eap_identity=%any\n\nconn ikev2-vpn\n    # Sunucu taraf\u0131 ayarlar\u0131\n    left=%any # Sunucunun genel IP adresini otomatik alg\u0131lar\n    leftid=\"CN=vpn.example.com\" # Sunucu sertifikas\u0131ndaki CN ile ayn\u0131 olmal\u0131\n    leftcert=server.cert.pem # Sunucu sertifikas\u0131\n    leftsubnet=0.0.0.0\/0 # T\u00fcm trafi\u011fi VPN \u00fczerinden y\u00f6nlendir\n\n    # \u0130stemci taraf\u0131 ayarlar\u0131\n    right=%any\n    rightsourceip=10.10.10.0\/24 # VPN istemcilerine atanacak IP aral\u0131\u011f\u0131\n    rightdns=8.8.8.8,8.8.4.4 # VPN istemcileri i\u00e7in DNS sunucular\u0131 (Google DNS)\n\n    # \u015eifreleme algoritmalar\u0131\n    ike=aes256-sha256-modp1024,aes256-sha256-modp2048,aes128-sha256-modp1024,aes128-sha256-modp2048,aes256-sha384-modp4096!\n    esp=aes256-sha256,aes128-sha256,aes256-sha384,aes256-sha512,aes128-sha512,chacha20poly1305-sha256!\n\n    # Ba\u011flant\u0131y\u0131 otomatik ba\u015flat\n    auto=start<\/code><\/pre>\n
Yap\u0131land\u0131rma A\u00e7\u0131klamalar\u0131:<\/strong><\/p>\n
*   config setup<\/code><\/strong>: StrongSwan’\u0131n genel davran\u0131\u015f\u0131n\u0131 yap\u0131land\u0131r\u0131r.
\n    *   charondebug<\/code>: Hata ay\u0131klama seviyesini ayarlar. Sorun giderme i\u00e7in faydal\u0131d\u0131r.
\n    *   strictcrlpolicy=no<\/code>: Sertifika iptal listesi (CRL) kontrol\u00fcn\u00fc devre d\u0131\u015f\u0131 b\u0131rak\u0131r. \u00dcretim ortamlar\u0131nda yes<\/code> olarak ayarlanmal\u0131 ve CRL y\u00f6netimi yap\u0131lmal\u0131d\u0131r.
\n    *   uniqueids = no<\/code>: Ayn\u0131 kimlik ile birden fazla ba\u011flant\u0131ya izin verir.
\n*   conn %default<\/code><\/strong>: T\u00fcm ba\u011flant\u0131lar i\u00e7in varsay\u0131lan ayarlar\u0131 tan\u0131mlar.
\n    *   keyexchange=ikev2<\/code>: IKEv2 anahtar de\u011fi\u015fimi protokol\u00fcn\u00fc kullan\u0131r.
\n    *   dpdaction=clear<\/code>, dpddelay<\/code>, rekey<\/code>, reauth<\/code>: Ba\u011flant\u0131 kopmalar\u0131n\u0131 y\u00f6netmek ve yeniden anahtarlama\/kimlik do\u011frulamay\u0131 ayarlamak i\u00e7in kullan\u0131l\u0131r.
\n    *   leftfirewall=yes<\/code>: StrongSwan’\u0131n g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 otomatik olarak y\u00f6netmesine izin verir.
\n    *   leftauth=pubkey<\/code>: Sunucu taraf\u0131n\u0131n ortak anahtar kimlik do\u011frulamas\u0131 kullanaca\u011f\u0131n\u0131 belirtir (sertifika tabanl\u0131).
\n    *   leftsendcert=always<\/code>: Sunucunun her zaman sertifikas\u0131n\u0131 g\u00f6ndermesini sa\u011flar.
\n    *   rightauth=eap-mschapv2<\/code>: \u0130stemci taraf\u0131n\u0131n EAP-MSCHAPv2 kimlik do\u011frulamas\u0131 kullanaca\u011f\u0131n\u0131 belirtir (kullan\u0131c\u0131 ad\u0131\/\u015fifre). E\u011fer istemciler de sertifika kullanacaksa, buray\u0131 pubkey<\/code> olarak de\u011fi\u015ftirmelisiniz.
\n    *   rightsendcert=never<\/code>: EAP kullan\u0131l\u0131yorsa istemcinin sertifika g\u00f6ndermemesi gerekti\u011fini belirtir. pubkey<\/code> kullan\u0131l\u0131yorsa always<\/code> olmal\u0131.
\n    *   eap_identity=%any<\/code>: EAP kimlik do\u011frulamas\u0131 i\u00e7in istemcinin herhangi bir kimlik g\u00f6nderebilece\u011fini belirtir.
\n*   conn ikev2-vpn<\/code><\/strong>: Ger\u00e7ek VPN ba\u011flant\u0131m\u0131z\u0131n ayarlar\u0131n\u0131 tan\u0131mlar.
\n    *   left=%any<\/code>: Sunucunun genel IP adresini otomatik olarak alg\u0131lar.
\n    *   leftid=\"CN=vpn.example.com\"<\/code>: Sunucu sertifikas\u0131nda belirtti\u011finiz CN<\/code> de\u011feri ile ayn\u0131 olmal\u0131d\u0131r.
\n    *   leftcert=server.cert.pem<\/code>: Kullan\u0131lacak sunucu sertifikas\u0131n\u0131n ad\u0131n\u0131 belirtir.
\n    *   leftsubnet=0.0.0.0\/0<\/code>: \u0130stemcilere t\u00fcm internet trafi\u011fini VPN \u00fczerinden g\u00f6ndermelerini s\u00f6yler.
\n    *   rightsourceip=10.10.10.0\/24<\/code>: VPN istemcilerine atanacak dahili IP adres aral\u0131\u011f\u0131n\u0131 tan\u0131mlar. Bu aral\u0131k, yerel a\u011f\u0131n\u0131zdaki ba\u015fka bir aral\u0131kla \u00e7ak\u0131\u015fmamal\u0131d\u0131r.
\n    *   rightdns=8.8.8.8,8.8.4.4<\/code>: VPN istemcilerinin kullanaca\u011f\u0131 DNS sunucular\u0131n\u0131 belirtir. Google DNS veya ba\u015fka bir g\u00fcvenilir DNS kullanabilirsiniz.
\n    *   ike<\/code> ve esp<\/code>: IKE ve ESP fazlar\u0131 i\u00e7in kullan\u0131lacak \u015fifreleme ve b\u00fct\u00fcnl\u00fck algoritmalar\u0131n\u0131 tan\u0131mlar. En g\u00fcvenli ve g\u00fcncel algoritmalar\u0131 se\u00e7mek \u00f6nemlidir.
\n    *   auto=start<\/code>: StrongSwan servisi ba\u015flad\u0131\u011f\u0131nda bu ba\u011flant\u0131n\u0131n otomatik olarak kurulmas\u0131n\u0131 sa\u011flar.<\/p>\n
De\u011fi\u015fiklikleri kaydedin ve d\u00fczenleyiciden \u00e7\u0131k\u0131n.<\/p>\n
Kullan\u0131c\u0131 Kimlik Do\u011frulama Bilgilerini Ayarlama (\/etc\/ipsec.secrets<\/code>)<\/strong><\/p>\n
E\u011fer EAP-MSCHAPv2 kimlik do\u011frulamas\u0131n\u0131 se\u00e7tiyseniz (yani rightauth=eap-mschapv2<\/code>), kullan\u0131c\u0131 ad\u0131 ve \u015fifre bilgilerini \/etc\/ipsec.secrets<\/code> dosyas\u0131na eklemeniz gerekir.<\/p>\n
sudo nano \/etc\/ipsec.secrets<\/code><\/pre>\n
Dosyan\u0131n en alt\u0131na a\u015fa\u011f\u0131daki formatta kullan\u0131c\u0131 bilgileri ekleyin:<\/p>\n
# Sunucu \u00f6zel anahtar\u0131\n: RSA server.key.pem\n\n
Kullan\u0131c\u0131lar<\/h2>\nkullaniciadi %any : EAP \"sifre\"<\/code><\/pre>\n
*   \u0130lk sat\u0131r, sunucu sertifikas\u0131n\u0131n \u00f6zel anahtar\u0131n\u0131 belirtir. Bu, sunucunun kimli\u011fini do\u011frulamas\u0131 i\u00e7in gereklidir.
\n*   \u0130kinci sat\u0131r ve sonrakiler, her bir VPN kullan\u0131c\u0131s\u0131 i\u00e7in kullan\u0131c\u0131 ad\u0131 ve \u015fifreyi tan\u0131mlar. kullaniciadi<\/code> yerine istedi\u011finiz kullan\u0131c\u0131 ad\u0131n\u0131, sifre<\/code> yerine ise g\u00fc\u00e7l\u00fc bir \u015fifre kullan\u0131n.<\/p>\n
E\u011fer istemciler i\u00e7in de sertifika tabanl\u0131 kimlik do\u011frulama kullanacaksan\u0131z, bu dosya sadece sunucunun \u00f6zel anahtar\u0131n\u0131 i\u00e7erecektir. Kullan\u0131c\u0131 sertifikalar\u0131 ayr\u0131ca olu\u015fturulur ve istemcilere verilir. Bu rehberde EAP-MSCHAPv2 ve sertifika tabanl\u0131 sunucu kimlik do\u011frulamas\u0131 kombinasyonunu ele al\u0131yoruz, zira bu, \u00e7o\u011fu kullan\u0131c\u0131 i\u00e7in kurulumu daha basittir.<\/p>\n
Ad\u0131m 5: IP Y\u00f6nlendirme ve NAT Kurallar\u0131<\/h3>\n
VPN istemcilerinin internete eri\u015febilmesi i\u00e7in sunucunun gelen VPN trafi\u011fini d\u0131\u015f a\u011fa (internete) y\u00f6nlendirmesi ve bu trafi\u011fi NAT (Network Address Translation) ile maskelemesi gerekir. UFW ile bu kurallar\u0131 yap\u0131land\u0131raca\u011f\u0131z.<\/p>\n
\u00d6ncelikle, UFW’nin varsay\u0131lan iletme politikas\u0131n\u0131 kabul et olarak ayarlamam\u0131z gerekiyor.<\/p>\n
sudo nano \/etc\/default\/ufw<\/code><\/pre>\n
Dosyada DEFAULT_FORWARD_POLICY<\/code> sat\u0131r\u0131n\u0131 bulun ve de\u011ferini \"ACCEPT\"<\/code> olarak de\u011fi\u015ftirin:<\/p>\n
DEFAULT_FORWARD_POLICY=\"ACCEPT\"<\/code><\/pre>\n
\u015eimdi, NAT kural\u0131n\u0131 \/etc\/ufw\/before.rules<\/code> dosyas\u0131na eklememiz gerekiyor. Bu dosya, UFW kurallar\u0131n\u0131n di\u011fer t\u00fcm kurallardan \u00f6nce uygulanmas\u0131n\u0131 sa\u011flar.<\/p>\n
sudo nano \/etc\/ufw\/before.rules<\/code><\/pre>\n
Dosyan\u0131n en \u00fcst\u00fcne, *filter<\/code> sat\u0131r\u0131ndan \u00f6nce a\u015fa\u011f\u0131daki kurallar\u0131 ekleyin:<\/p>\n
#\n
rules.before<\/h2>\n
# Rules that should be run before the ufw command line added rules. Custom<\/h2>\n
rules should be added to the end of this file, but before the *filter<\/h2>\n
section.<\/h2>\n
# START OPENVPN RULES<\/h2>\n
NAT table rules<\/h2>\n*nat\n:POSTROUTING ACCEPT [0:0]\n
Allow traffic from VPN client subnet to eth0 (your public interface)<\/h2>\n-A POSTROUTING -s 10.10.10.0\/24 -o eth0 -j MASQUERADE\nCOMMIT\n
END OPENVPN RULES<\/h2>\n\n
Don't delete these required lines, otherwise ufw will stop working<\/h2>\n*filter<\/code><\/pre>\n
\u00d6nemli:<\/strong> -o eth0<\/code> k\u0131sm\u0131ndaki eth0<\/code> de\u011ferini sunucunuzun d\u0131\u015fa d\u00f6n\u00fck a\u011f aray\u00fcz\u00fcn\u00fcn ad\u0131 ile de\u011fi\u015ftirmeniz gerekmektedir. Sunucunuzun a\u011f aray\u00fcz ad\u0131n\u0131 \u00f6\u011frenmek i\u00e7in ip a<\/code> komutunu kullanabilirsiniz. Genellikle eth0<\/code> veya enpXsY<\/code> gibi bir isimdir. 10.10.10.0\/24<\/code> ise ipsec.conf<\/code> dosyas\u0131nda rightsourceip<\/code> olarak belirtti\u011finiz VPN istemcilerine atanacak IP aral\u0131\u011f\u0131 ile e\u015fle\u015fmelidir.<\/p>\n
De\u011fi\u015fiklikleri kaydedin ve d\u00fczenleyiciden \u00e7\u0131k\u0131n.<\/p>\n
UFW’yi yeniden y\u00fckleyerek yeni kurallar\u0131n uygulanmas\u0131n\u0131 sa\u011flay\u0131n:<\/p>\n
sudo ufw reload<\/code><\/pre>\n
Bu komut, UFW’yi yeniden ba\u015flat\u0131r ve before.rules<\/code> dosyas\u0131ndaki NAT kural\u0131n\u0131n etkinle\u015fmesini sa\u011flar.<\/p>\n
Ad\u0131m 6: StrongSwan Servisini Ba\u015flatma ve Kontrol Etme<\/h3>\n
T\u00fcm yap\u0131land\u0131rmalar\u0131 tamamlad\u0131\u011f\u0131m\u0131za g\u00f6re, StrongSwan servisini yeniden ba\u015flatabilir ve durumunu kontrol edebiliriz.<\/p>\n
StrongSwan servisini yeniden ba\u015flat\u0131n:<\/p>\n
sudo systemctl restart strongswan<\/code><\/pre>\n
StrongSwan’\u0131n sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131n\u0131 sa\u011flamak i\u00e7in:<\/p>\n
sudo systemctl enable strongswan<\/code><\/pre>\n
Servisin durumunu kontrol edin:<\/p>\n
sudo systemctl status strongswan<\/code><\/pre>\n
\u00c7\u0131kt\u0131da servisin active (running)<\/code> oldu\u011funu g\u00f6rmelisiniz. Herhangi bir hata varsa, journalctl -u strongswan<\/code> komutu ile daha detayl\u0131 g\u00fcnl\u00fckleri inceleyebilirsiniz.<\/p>\n
StrongSwan’\u0131n kendi durum komutunu kullanarak VPN ba\u011flant\u0131lar\u0131n\u0131n durumunu kontrol edin:<\/p>\n
sudo ipsec status\nsudo ipsec statusall<\/code><\/pre>\n
ipsec status<\/code> komutu, ikev2-vpn<\/code> ba\u011flant\u0131s\u0131n\u0131n enabled<\/code> oldu\u011funu ve \u015fu anda ka\u00e7 t\u00fcnelin kurulu oldu\u011funu g\u00f6stermelidir. Ba\u011flant\u0131 hen\u00fcz kurulmad\u0131\u011f\u0131 i\u00e7in established<\/code> t\u00fcnel say\u0131s\u0131 0 olacakt\u0131r.<\/p>\n
Ad\u0131m 7: \u0130stemci Kurulumu<\/h3>\n
VPN sunucunuz haz\u0131r oldu\u011funa g\u00f6re, \u015fimdi istemcilerinizi yap\u0131land\u0131rman\u0131z gerekiyor. Her i\u015fletim sistemi i\u00e7in kurulum ad\u0131mlar\u0131 biraz farkl\u0131l\u0131k g\u00f6sterir. Ancak temel prensip, CA sertifikas\u0131n\u0131 cihaza y\u00fcklemek ve VPN ba\u011flant\u0131s\u0131n\u0131 IKEv2 protokol\u00fc ile yap\u0131land\u0131rmakt\u0131r.<\/p>\n
\u00d6ncelikle, istemcilere da\u011f\u0131tman\u0131z gereken ca.cert.pem<\/code> dosyas\u0131n\u0131 sunucunuzdan g\u00fcvenli bir \u015fekilde aktar\u0131n. Bunu scp<\/code> veya ba\u015fka bir g\u00fcvenli dosya transfer y\u00f6ntemiyle yapabilirsiniz.<\/p>\n
# Sunucudan yerel makinenize kopyalamak i\u00e7in (yerel makinenizden \u00e7al\u0131\u015ft\u0131r\u0131n)\nscp kullanici@sunucu_ip_adresi:~\/pki\/ca.cert.pem .<\/code><\/pre>\n
Windows \u0130stemcisi<\/strong><\/p>\n
1.  CA Sertifikas\u0131n\u0131 Y\u00fckleme:<\/strong>
\n    *   ca.cert.pem<\/code> dosyas\u0131n\u0131 bilgisayar\u0131n\u0131za kopyalay\u0131n.
\n    *   Dosyaya sa\u011f t\u0131klay\u0131n ve “Sertifika Y\u00fckle” se\u00e7ene\u011fini se\u00e7in.
\n    *   “Yerel Makine” se\u00e7ene\u011fini belirleyin ve “\u0130leri”ye t\u0131klay\u0131n.
\n    *   “T\u00fcm sertifikalar\u0131 a\u015fa\u011f\u0131daki depoya yerle\u015ftir” se\u00e7ene\u011fini se\u00e7in ve “G\u00f6zat” d\u00fc\u011fmesine t\u0131klay\u0131n.
\n    *   Listeden “G\u00fcvenilen K\u00f6k Sertifika Yetkilileri”ni se\u00e7in ve “Tamam”a t\u0131klay\u0131n.
\n    *   Y\u00fcklemeyi tamamlamak i\u00e7in “\u0130leri” ve “Son” d\u00fc\u011fmelerine t\u0131klay\u0131n. G\u00fcvenlik uyar\u0131s\u0131n\u0131 onaylay\u0131n.
\n2.  VPN Ba\u011flant\u0131s\u0131 Olu\u015fturma:<\/strong>
\n    *   Ba\u015flat men\u00fcs\u00fcnden “Ayarlar” -> “A\u011f ve \u0130nternet” -> “VPN” yolunu izleyin.
\n    *   “VPN ba\u011flant\u0131s\u0131 ekle” d\u00fc\u011fmesine t\u0131klay\u0131n.
\n    *   VPN sa\u011flay\u0131c\u0131s\u0131:<\/strong> Windows (yerle\u015fik)
\n    *   Ba\u011flant\u0131 ad\u0131:<\/strong> \u0130stedi\u011finiz bir isim (\u00f6rn: Benim VPN’im)
\n    *   Sunucu ad\u0131 veya IP adresi:<\/strong> VPN sunucunuzun alan ad\u0131 veya IP adresi (\u00f6rn: vpn.example.com<\/code> veya IP_ADRES\u0130N\u0130Z<\/code>)
\n    *   VPN t\u00fcr\u00fc:<\/strong> IKEv2
\n    *   Kimlik do\u011frulama bilgisi t\u00fcr\u00fc:<\/strong> “Kullan\u0131c\u0131 ad\u0131 ve parola” se\u00e7ene\u011fini se\u00e7in (EAP-MSCHAPv2 kullan\u0131yorsan\u0131z).
\n    *   Kullan\u0131c\u0131 ad\u0131n\u0131z\u0131 ve parolan\u0131z\u0131 girin.
\n    *   Kaydedin ve ba\u011flanmay\u0131 deneyin.<\/p>\n
macOS \u0130stemcisi<\/strong><\/p>\n
1.  CA Sertifikas\u0131n\u0131 Y\u00fckleme:<\/strong>
\n    *   ca.cert.pem<\/code> dosyas\u0131n\u0131 macOS cihaz\u0131n\u0131za kopyalay\u0131n.
\n    *   Dosyaya \u00e7ift t\u0131klay\u0131n. Anahtar Zinciri Eri\u015fimi uygulamas\u0131 a\u00e7\u0131lacakt\u0131r.
\n    *   Sertifika eklendikten sonra, “Sistem” anahtar zincirinde “VPN Root CA” (veya CA sertifikas\u0131na verdi\u011finiz ad) adl\u0131 sertifikay\u0131 bulun.
\n    *   Sertifikaya \u00e7ift t\u0131klay\u0131n, “G\u00fcven” b\u00f6l\u00fcm\u00fcn\u00fc geni\u015fletin.
\n    *   “Bu sertifikay\u0131 kullan\u0131rken” se\u00e7ene\u011fini “Her zaman g\u00fcven” olarak ayarlay\u0131n.
\n    *   De\u011fi\u015fiklikleri kaydetmek i\u00e7in \u015fifrenizi girmeniz istenebilir.
\n2.  VPN Ba\u011flant\u0131s\u0131 Olu\u015fturma:<\/strong>
\n    *   “Sistem Ayarlar\u0131” (veya “Sistem Tercihleri”) -> “A\u011f” yolunu izleyin.
\n    *   Sol alt k\u00f6\u015fedeki “+” d\u00fc\u011fmesine t\u0131klay\u0131n.
\n    *   Aray\u00fcz:<\/strong> VPN
\n    *   VPN T\u00fcr\u00fc:<\/strong> IKEv2
\n    *   Servis Ad\u0131:<\/strong> \u0130stedi\u011finiz bir isim (\u00f6rn: StrongSwan VPN)
\n    *   “Olu\u015ftur”a t\u0131klay\u0131n.
\n    *   Sunucu Adresi:<\/strong> VPN sunucunuzun alan ad\u0131 veya IP adresi.
\n    *   Uzak Kimlik:<\/strong> VPN sunucunuzun leftid<\/code> olarak belirtti\u011finiz de\u011feri (\u00f6rn: vpn.example.com<\/code>).
\n    *   Yerel Kimlik:<\/strong> Bo\u015f b\u0131rak\u0131labilir veya kullan\u0131c\u0131 ad\u0131n\u0131z olabilir.
\n    *   “Kimlik Do\u011frulama Ayarlar\u0131…” d\u00fc\u011fmesine t\u0131klay\u0131n.
\n    *   Kimlik Do\u011frulama:<\/strong> “Kullan\u0131c\u0131 Ad\u0131”n\u0131 se\u00e7in (EAP-MSCHAPv2 kullan\u0131yorsan\u0131z).
\n    *   Kullan\u0131c\u0131 ad\u0131n\u0131z\u0131 ve parolan\u0131z\u0131 girin.
\n    *   “Uygula” ve ard\u0131ndan “Ba\u011flan” d\u00fc\u011fmelerine t\u0131klay\u0131n.<\/p>\n
iOS \u0130stemcisi<\/strong><\/p>\n
1.  CA Sertifikas\u0131n\u0131 Y\u00fckleme:<\/strong>
\n    *   ca.cert.pem<\/code> dosyas\u0131n\u0131 kendinize e-posta ile g\u00f6nderin veya g\u00fcvenli bir web sunucusunda bar\u0131nd\u0131r\u0131n ve Safari \u00fczerinden eri\u015fin.
\n    *   Dosyaya dokundu\u011funuzda bir profil y\u00fckleme uyar\u0131s\u0131 alacaks\u0131n\u0131z. “\u0130zin Ver”e dokunun.
\n    *   Ayarlar uygulamas\u0131n\u0131 a\u00e7\u0131n, “Profil \u0130ndirildi” se\u00e7ene\u011fine dokunun.
\n    *   “Y\u00fckle”ye dokunun, \u015fifrenizi girin ve y\u00fcklemeyi onaylay\u0131n.
\n    *   Y\u00fckledikten sonra, “Ayarlar” -> “Genel” -> “VPN ve Ayg\u0131t Y\u00f6netimi” -> “Yap\u0131land\u0131rma Profilleri” alt\u0131nda sertifikay\u0131 g\u00f6receksiniz.
\n    *   Ard\u0131ndan, “Ayarlar” -> “Genel” -> “Hakk\u0131nda” -> “Sertifika G\u00fcveni Ayarlar\u0131” yolunu izleyin ve CA sertifikan\u0131z i\u00e7in “Tam G\u00fcven”i etkinle\u015ftirin.
\n2.  VPN Yap\u0131land\u0131rmas\u0131 Olu\u015fturma:<\/strong>
\n    *   “Ayarlar” -> “Genel” -> “VPN” -> “VPN Yap\u0131land\u0131rmas\u0131 Ekle…” yolunu izleyin.
\n    *   T\u00fcr:<\/strong> IKEv2
\n    *   A\u00e7\u0131klama:<\/strong> \u0130stedi\u011finiz bir isim (\u00f6rn: My IKEv2 VPN)
\n    *   Sunucu:<\/strong> VPN sunucunuzun alan ad\u0131 veya IP adresi.
\n    *   Uzak Kimlik:<\/strong> VPN sunucunuzun leftid<\/code> olarak belirtti\u011finiz de\u011feri (\u00f6rn: vpn.example.com<\/code>).
\n    *   Yerel Kimlik:<\/strong> Bo\u015f b\u0131rak\u0131labilir.
\n    *   Kullan\u0131c\u0131 Kimlik Do\u011frulamas\u0131:<\/strong> “Kullan\u0131c\u0131 Ad\u0131”n\u0131 se\u00e7in.
\n    *   Kullan\u0131c\u0131 ad\u0131n\u0131z\u0131 ve parolan\u0131z\u0131 girin.
\n    *   “Bitti”ye dokunun ve ba\u011flanmay\u0131 deneyin.<\/p>\n
Android \u0130stemcisi (StrongSwan VPN Client Uygulamas\u0131)<\/strong><\/p>\n
Android’in yerle\u015fik IKEv2 deste\u011fi s\u0131n\u0131rl\u0131 oldu\u011fundan, StrongSwan’\u0131n kendi Android uygulamas\u0131n\u0131 kullanmak en iyi yoldur.<\/p>\n
1.  Uygulamay\u0131 Y\u00fckleme:<\/strong> Google Play Store’dan “StrongSwan VPN Client” uygulamas\u0131n\u0131 indirin ve y\u00fckleyin.
\n2.  CA Sertifikas\u0131n\u0131 Y\u00fckleme:<\/strong>
\n    *   ca.cert.pem<\/code> dosyas\u0131n\u0131 telefonunuzun depolama alan\u0131na kopyalay\u0131n.
\n    *   StrongSwan uygulamas\u0131n\u0131 a\u00e7\u0131n. Sa\u011f \u00fcst k\u00f6\u015fedeki \u00fc\u00e7 noktaya dokunun ve “CA Sertifikalar\u0131n\u0131 Y\u00f6net”i se\u00e7in.
\n    *   Sa\u011f alttaki “+” d\u00fc\u011fmesine dokunun ve “Sertifika dosyas\u0131n\u0131 i\u00e7e aktar”\u0131 se\u00e7in.
\n    *   Telefonunuzdaki ca.cert.pem<\/code> dosyas\u0131n\u0131 bulun ve se\u00e7in.
\n3.  VPN Profili Olu\u015fturma:<\/strong>
\n    *   StrongSwan uygulamas\u0131n\u0131n ana ekran\u0131nda sa\u011f alttaki “+” d\u00fc\u011fmesine dokunarak yeni bir VPN profili ekleyin.
\n    *   Sunucu:<\/strong> VPN sunucunuzun alan ad\u0131 veya IP adresi.
\n    *   VPN T\u00fcr\u00fc:<\/strong> IKEv2 Sertifikalar\u0131 (veya IKEv2 EAP – kullan\u0131c\u0131 ad\u0131\/\u015fifre i\u00e7in)
\n    *   Kimlik Do\u011frulama:<\/strong> “Kullan\u0131c\u0131 ad\u0131\/parola”y\u0131 se\u00e7in.
\n    *   Kullan\u0131c\u0131 ad\u0131n\u0131z\u0131 ve parolan\u0131z\u0131 girin.
\n    *   “Geli\u015fmi\u015f ayarlar\u0131 g\u00f6ster” se\u00e7ene\u011fine dokunarak “Sunucu Kimli\u011fi” alan\u0131na sunucunuzun leftid<\/code> de\u011ferini (\u00f6rn: vpn.example.com<\/code>) girebilirsiniz.
\n    *   “Kaydet”e dokunun.
\n    *   Olu\u015fturdu\u011funuz profile dokunarak ba\u011flan\u0131n.<\/p>\n
Ad\u0131m 8: Sorun Giderme ve Yayg\u0131n Hatalar<\/h3>\n
VPN kurulumlar\u0131 karma\u015f\u0131k olabilir ve \u00e7e\u015fitli sorunlarla kar\u015f\u0131la\u015fmak olas\u0131d\u0131r. \u0130\u015fte s\u0131k kar\u015f\u0131la\u015f\u0131lan sorunlar ve olas\u0131 \u00e7\u00f6z\u00fcmleri:<\/p>\n
*   Ba\u011flant\u0131 Kurulam\u0131yor:<\/strong>
\n    *   G\u00fcvenlik Duvar\u0131:<\/strong> Sunucunuzdaki UFW kurallar\u0131n\u0131 ve e\u011fer bulut sa\u011flay\u0131c\u0131 kullan\u0131yorsan\u0131z (AWS, DigitalOcean vb.) onlar\u0131n g\u00fcvenlik gruplar\u0131n\u0131\/g\u00fcvenlik duvarlar\u0131n\u0131 kontrol edin. UDP 500, UDP 4500 ve ESP protokol\u00fcne izin verildi\u011finden emin olun.
\n    *   IP Y\u00f6nlendirme:<\/strong> net.ipv4.ip_forward = 1<\/code> ayar\u0131n\u0131n \/etc\/sysctl.conf<\/code> dosyas\u0131nda etkin ve sudo sysctl -p<\/code> ile uygulanm\u0131\u015f oldu\u011fundan emin olun.
\n    *   StrongSwan Yap\u0131land\u0131rmas\u0131:<\/strong> \/etc\/ipsec.conf<\/code> ve \/etc\/ipsec.secrets<\/code> dosyalar\u0131ndaki yaz\u0131m hatalar\u0131n\u0131 kontrol edin. leftid<\/code> ve leftcert<\/code> de\u011ferlerinin do\u011fru oldu\u011fundan, rightsourceip<\/code> aral\u0131\u011f\u0131n\u0131n ba\u015fka bir a\u011f ile \u00e7ak\u0131\u015fmad\u0131\u011f\u0131ndan emin olun.
\n    *   Sertifikalar:<\/strong> Sertifikalar\u0131n do\u011fru dizinlere kopyaland\u0131\u011f\u0131ndan (\/etc\/ipsec.d\/cacerts\/<\/code>, \/etc\/ipsec.d\/certs\/<\/code>, \/etc\/ipsec.d\/private\/<\/code>) ve \u00f6zel anahtar\u0131n izinlerinin (chmod 600<\/code>) do\u011fru ayarland\u0131\u011f\u0131ndan emin olun. Sunucu sertifikas\u0131ndaki CN<\/code> ve SAN<\/code> de\u011ferlerinin istemcinin ba\u011flanmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131 alan ad\u0131 veya IP adresiyle e\u015fle\u015fti\u011finden emin olun.
\n    *   G\u00fcnl\u00fckleri Kontrol Etme:<\/strong> StrongSwan g\u00fcnl\u00fcklerini kontrol edin.<\/p>\n
sudo journalctl -u strongswan -f<\/code><\/pre>\n
        Bu komut, StrongSwan’\u0131n ger\u00e7ek zamanl\u0131 g\u00fcnl\u00fcklerini g\u00f6sterir ve ba\u011flant\u0131 giri\u015fimleri s\u0131ras\u0131nda olu\u015fan hatalar\u0131 g\u00f6rmenizi sa\u011flar.
\n*   VPN Ba\u011flant\u0131s\u0131 Kuruluyor ama \u0130nternet Eri\u015fimi Yok:<\/strong>
\n    *   NAT Kural\u0131:<\/strong> \/etc\/ufw\/before.rules<\/code> dosyas\u0131ndaki NAT kural\u0131n\u0131n do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olun. \u00d6zellikle -o eth0<\/code> k\u0131sm\u0131ndaki eth0<\/code> de\u011ferinin sunucunuzun d\u0131\u015fa d\u00f6n\u00fck a\u011f aray\u00fcz\u00fc ile e\u015fle\u015fti\u011finden ve 10.10.10.0\/24<\/code> aral\u0131\u011f\u0131n\u0131n ipsec.conf<\/code> dosyas\u0131ndaki rightsourceip<\/code> ile ayn\u0131 oldu\u011fundan emin olun. UFW’yi sudo ufw reload<\/code> ile yeniden y\u00fcklediniz mi?
\n    *   DNS Ayarlar\u0131:<\/strong> \/etc\/ipsec.conf<\/code> dosyas\u0131ndaki rightdns<\/code> ayar\u0131n\u0131n ge\u00e7erli DNS sunucular\u0131n\u0131 i\u00e7erdi\u011finden emin olun.
\n    *   leftsubnet:<\/strong> leftsubnet=0.0.0.0\/0<\/code> ayar\u0131n\u0131n do\u011fru oldu\u011fundan emin olun. Bu, t\u00fcm trafi\u011fi VPN \u00fczerinden y\u00f6nlendirir.
\n*   Performans Sorunlar\u0131:<\/strong>
\n    *   \u015eifreleme Algoritmalar\u0131:<\/strong> \/etc\/ipsec.conf<\/code> dosyas\u0131ndaki ike<\/code> ve esp<\/code> algoritmalar\u0131n\u0131 kontrol edin. \u00c7ok y\u00fcksek bit de\u011ferli algoritmalar veya \u00e7ok fazla algoritma se\u00e7ene\u011fi, \u00f6zellikle d\u00fc\u015f\u00fck kaynakl\u0131 sunucularda CPU kullan\u0131m\u0131n\u0131 art\u0131rabilir. Daha dengeli bir set se\u00e7meyi d\u00fc\u015f\u00fcnebilirsiniz.
\n    *   Sunucu Kaynaklar\u0131:<\/strong> Sunucunuzun CPU, RAM ve a\u011f bant geni\u015fli\u011fi gibi kaynaklar\u0131n\u0131n yeterli oldu\u011fundan emin olun.
\n*   \u0130stemci Kimlik Do\u011frulama Sorunlar\u0131:<\/strong>
\n    *   EAP-MSCHAPv2:<\/strong> \/etc\/ipsec.secrets<\/code> dosyas\u0131ndaki kullan\u0131c\u0131 ad\u0131 ve \u015fifrenin do\u011fru oldu\u011fundan emin olun.
\n    *   Sertifika Tabanl\u0131 Kimlik Do\u011frulama:<\/strong> \u0130stemci sertifikas\u0131n\u0131n CA taraf\u0131ndan imzaland\u0131\u011f\u0131ndan ve istemci cihaz\u0131na do\u011fru \u015fekilde y\u00fcklendi\u011finden emin olun.<\/p>\n
Unutmay\u0131n ki her de\u011fi\u015fiklikten sonra StrongSwan servisini yeniden ba\u015flatman\u0131z (sudo systemctl restart strongswan<\/code>) ve UFW kurallar\u0131nda bir de\u011fi\u015fiklik yapt\u0131ysan\u0131z UFW’yi yeniden y\u00fcklemeniz (sudo ufw reload<\/code>) gerekmektedir.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu rehberde, Ubuntu 20.04 i\u015fletim sistemi \u00fczerinde StrongSwan kullanarak g\u00fcvenli bir IKEv2 VPN sunucusunu ad\u0131m ad\u0131m nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 \u00f6\u011frendiniz. Kendi VPN sunucunuzu kurmak, internet gizlili\u011finizi ve g\u00fcvenli\u011finizi art\u0131rman\u0131n g\u00fc\u00e7l\u00fc bir yoludur, \u00e7\u00fcnk\u00fc verileriniz \u00fczerinde tam kontrol sahibi olursunuz. IKEv2 protokol\u00fcn\u00fcn h\u0131z\u0131 ve kararl\u0131l\u0131\u011f\u0131 ile StrongSwan’\u0131n sa\u011flaml\u0131\u011f\u0131 birle\u015fti\u011finde, g\u00fcvenilir bir VPN \u00e7\u00f6z\u00fcm\u00fc elde etmi\u015f olursunuz.<\/p>\n
Kurulum s\u00fcreci; sunucu g\u00fcncellemeleri, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131, PKI olu\u015fturma, StrongSwan ana yap\u0131land\u0131rmas\u0131, NAT kurallar\u0131 ve son olarak istemci yap\u0131land\u0131rmas\u0131n\u0131 i\u00e7erir. Her ad\u0131m, VPN’inizin g\u00fcvenli ve i\u015flevsel olmas\u0131n\u0131 sa\u011flamak i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n
G\u00fcvenli\u011fin s\u00fcrekli bir s\u00fcre\u00e7 oldu\u011funu unutmay\u0131n. Sertifikalar\u0131n\u0131z\u0131n ge\u00e7erlilik s\u00fcrelerini takip edin ve gerekti\u011finde yenileyin. Sunucunuzun i\u015fletim sistemini ve StrongSwan paketlerini d\u00fczenli olarak g\u00fcncelleyerek olas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131na kar\u015f\u0131 korunmu\u015f olun. Ayr\u0131ca, g\u00fc\u00e7l\u00fc ve benzersiz kullan\u0131c\u0131 adlar\u0131 ve \u015fifreler kullanarak veya daha da g\u00fcvenli olan istemci sertifikalar\u0131 kullanarak VPN eri\u015fiminizi g\u00fcvence alt\u0131na al\u0131n.<\/p>\n
Art\u0131k kendi g\u00fcvenli VPN t\u00fcneliniz var. \u0130nternette daha \u00f6zg\u00fcr ve g\u00fcvenli bir \u015fekilde gezinebilirsiniz.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda internet \u00fczerindeki gizlili\u011fimizi ve g","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-34141","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nIKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi\" \/>\n<meta property=\"og:description\" content=\"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda internet \u00fczerindeki gizlili\u011fimizi ve g\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-11T19:41:07+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"22 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi\",\"datePublished\":\"2025-11-11T19:41:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/\"},\"wordCount\":3637,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/\",\"name\":\"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-11T19:41:07+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi","og_description":"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda internet \u00fczerindeki gizlili\u011fimizi ve g","og_url":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-11T19:41:07+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"22 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi","datePublished":"2025-11-11T19:41:07+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/"},"wordCount":3637,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/","name":"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-11T19:41:07+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ikev2-vpn-sunucusunu-strongswan-ile-ubuntu-20-04-uzerine-kurulum-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"IKEv2 VPN Sunucusunu StrongSwan ile Ubuntu 20.04 \u00dczerine Kurulum Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34141","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=34141"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34141\/revisions"}],"predecessor-version":[{"id":34142,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34141\/revisions\/34142"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=34141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=34141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=34141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}