{"id":35201,"date":"2025-11-26T22:40:49","date_gmt":"2025-11-26T19:40:49","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=35201"},"modified":"2025-11-26T22:40:49","modified_gmt":"2025-11-26T19:40:49","slug":"rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/","title":{"rendered":"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu"},"content":{"rendered":"<p><body><\/p>\n<h2>Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu<\/h2>\n<p>Squid, esnek ve g\u00fc\u00e7l\u00fc bir proxy sunucusudur. \u00d6zellikle a\u011f trafi\u011fini \u00f6nbelle\u011fe almak, filtrelemek ve y\u00f6nlendirmek i\u00e7in kullan\u0131l\u0131r. Bu makalede, Rocky Linux 8 \u00fczerinde Squid&#8217;i \u00f6zel ba\u011flant\u0131lar i\u00e7in nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ve yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 ayr\u0131nt\u0131l\u0131 bir \u015fekilde ele alaca\u011f\u0131z. &#8220;\u00d6zel ba\u011flant\u0131lar&#8221; terimiyle, belirli kullan\u0131c\u0131lar\u0131n veya IP adreslerinin internete g\u00fcvenli ve kontrol edilebilir bir \u015fekilde eri\u015fimini sa\u011flayan, genellikle kimlik do\u011frulamas\u0131 veya IP tabanl\u0131 k\u0131s\u0131tlamalarla korunan proxy kurulumlar\u0131n\u0131 kastediyoruz. Bu t\u00fcr bir kurulum, hem gizlili\u011fi art\u0131r\u0131r hem de a\u011f kaynaklar\u0131n\u0131n daha verimli kullan\u0131lmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3>Giri\u015f: Squid Proxy Nedir ve Neden Kullan\u0131l\u0131r?<\/h3>\n<p>Squid, HTTP, HTTPS ve FTP gibi web protokolleri i\u00e7in bir \u00f6nbellekleme proxy sunucusudur. Genellikle istemciler ile internet aras\u0131nda bir arac\u0131 g\u00f6revi g\u00f6r\u00fcr. Squid&#8217;in temel amac\u0131, s\u0131k\u00e7a eri\u015filen web sayfalar\u0131n\u0131 ve dosyalar\u0131 \u00f6nbelle\u011finde tutarak, bu verilere tekrar eri\u015fim istendi\u011finde daha h\u0131zl\u0131 yan\u0131t vermektir. Ancak Squid&#8217;in yetenekleri sadece \u00f6nbellekleme ile s\u0131n\u0131rl\u0131 de\u011fildir. Ayn\u0131 zamanda g\u00fc\u00e7l\u00fc bir eri\u015fim kontrol mekanizmas\u0131 sunar, bu da onu \u00f6zel ba\u011flant\u0131lar i\u00e7in ideal bir \u00e7\u00f6z\u00fcm haline getirir.<\/p>\n<p>\u00d6zel ba\u011flant\u0131lar ba\u011flam\u0131nda Squid kullanman\u0131n ba\u015fl\u0131ca nedenleri \u015funlard\u0131r:<\/p>\n<p>*   <strong>G\u00fcvenlik ve Eri\u015fim Kontrol\u00fc:<\/strong> Belirli IP adreslerinin veya kimlik do\u011frulamas\u0131 yap\u0131lm\u0131\u015f kullan\u0131c\u0131lar\u0131n internete eri\u015fimine izin vererek a\u011f g\u00fcvenli\u011fini art\u0131r\u0131r. Bu, a\u011f\u0131n\u0131zdaki yetkisiz eri\u015fimi engeller.<br \/>\n*   <strong>Anonimlik:<\/strong> \u0130stemcinin ger\u00e7ek IP adresini gizleyerek internette daha fazla anonimlik sa\u011flar. T\u00fcm istekler proxy sunucusunun IP adresi \u00fczerinden \u00e7\u0131kar.<br \/>\n*   <strong>\u0130\u00e7erik Filtreleme:<\/strong> \u0130stenmeyen veya zararl\u0131 web sitelerine eri\u015fimi engelleyebilir. Her ne kadar bu makale \u00f6zel ba\u011flant\u0131lara odaklanacak olsa da, Squid&#8217;in bu yetene\u011fi de g\u00f6z ard\u0131 edilmemelidir.<br \/>\n*   <strong>Bant Geni\u015fli\u011fi Y\u00f6netimi:<\/strong> \u00d6nbellekleme sayesinde, ayn\u0131 i\u00e7eri\u011fe tekrar eri\u015fildi\u011finde internet bant geni\u015fli\u011fi kullan\u0131lmaz, bu da \u00f6zellikle s\u0131n\u0131rl\u0131 bant geni\u015fli\u011fine sahip a\u011flarda performans\u0131 art\u0131r\u0131r. Ancak \u00f6zel ba\u011flant\u0131 senaryosunda \u00f6ncelik genellikle g\u00fcvenlik ve eri\u015fim kontrol\u00fcd\u00fcr.<\/p>\n<p>Rocky Linux 8, Red Hat Enterprise Linux (RHEL) tabanl\u0131, topluluk destekli ve kararl\u0131 bir i\u015fletim sistemidir. G\u00fcvenilirli\u011fi ve uzun vadeli deste\u011fi sayesinde sunucu ortamlar\u0131 i\u00e7in pop\u00fcler bir tercihtir. Bu rehber, Rocky Linux 8&#8217;in g\u00fc\u00e7l\u00fc altyap\u0131s\u0131n\u0131 kullanarak g\u00fcvenli bir Squid proxy sunucusu kurman\u0131z\u0131 sa\u011flayacakt\u0131r.<\/p>\n<h3>\u00d6n Gereksinimler<\/h3>\n<p>Kuruluma ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6n gereksinimleri kontrol etmeniz \u00f6nemlidir:<\/p>\n<p>*   <strong>Rocky Linux 8 Sunucusu:<\/strong> SSH eri\u015fimine sahip \u00e7al\u0131\u015fan bir Rocky Linux 8 sunucusu.<br \/>\n*   <strong>Sudo Yetkileri:<\/strong> Kurulum ve yap\u0131land\u0131rma ad\u0131mlar\u0131 i\u00e7in <code>sudo<\/code> yetkisine sahip bir kullan\u0131c\u0131.<br \/>\n*   <strong>Temel Linux Bilgisi:<\/strong> Komut sat\u0131r\u0131 (CLI) kullan\u0131m\u0131 ve temel Linux komutlar\u0131na a\u015final\u0131k.<br \/>\n*   <strong>A\u011f Bilgisi:<\/strong> IP adresleri, portlar ve temel a\u011f kavramlar\u0131 hakk\u0131nda bilgi sahibi olmak.<br \/>\n*   <strong>A\u00e7\u0131k Portlar:<\/strong> Proxy sunucunuzun d\u0131\u015far\u0131dan eri\u015filebilir olmas\u0131 i\u00e7in g\u00fcvenlik duvar\u0131n\u0131zda (varsa) gerekli portlar\u0131n a\u00e7\u0131k oldu\u011fundan emin olun.<\/p>\n<h3>Ad\u0131m 1: Rocky Linux Sistemini G\u00fcncelleme<\/h3>\n<p>Herhangi bir yaz\u0131l\u0131m kurulumuna ba\u015flamadan \u00f6nce sistemin g\u00fcncel oldu\u011fundan emin olmak en iyi uygulamad\u0131r. Bu, potansiyel g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapat\u0131r ve en son paket s\u00fcr\u00fcmlerini alman\u0131z\u0131 sa\u011flar.<\/p>\n<pre><code class=\"language-bash\">sudo dnf update -y\nsudo dnf upgrade -y<\/code><\/pre>\n<p>G\u00fcncelleme i\u015flemi tamamland\u0131ktan sonra, e\u011fer \u00e7ekirdek (kernel) g\u00fcncellendiyse, de\u011fi\u015fikliklerin etkili olmas\u0131 i\u00e7in sunucuyu yeniden ba\u015flatman\u0131z \u00f6nerilir:<\/p>\n<pre><code class=\"language-bash\">sudo reboot<\/code><\/pre>\n<h3>Ad\u0131m 2: Squid Proxy Kurulumu<\/h3>\n<p>Rocky Linux&#8217;ta Squid paketi varsay\u0131lan DNF depolar\u0131nda bulunur, bu da kurulumu olduk\u00e7a basitle\u015ftirir.<\/p>\n<p>Squid&#8217;i kurmak i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n<pre><code class=\"language-bash\">sudo dnf install squid -y<\/code><\/pre>\n<p>Kurulum tamamland\u0131ktan sonra, Squid servisini ba\u015flat\u0131n ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131 i\u00e7in etkinle\u015ftirin:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl start squid\nsudo systemctl enable squid<\/code><\/pre>\n<p>Squid servisinin durumunu kontrol ederek do\u011fru bir \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl status squid<\/code><\/pre>\n<p>\u00c7\u0131kt\u0131da <code>active (running)<\/code> ifadesini g\u00f6rmelisiniz.<\/p>\n<h3>Ad\u0131m 3: G\u00fcvenlik Duvar\u0131 Ayarlar\u0131<\/h3>\n<p>Rocky Linux 8, varsay\u0131lan olarak <code>firewalld<\/code> g\u00fcvenlik duvar\u0131n\u0131 kullan\u0131r. Squid proxy&#8217;nin istemciler taraf\u0131ndan eri\u015filebilir olmas\u0131 i\u00e7in g\u00fcvenlik duvar\u0131nda Squid&#8217;in dinleyece\u011fi portu (varsay\u0131lan olarak 3128\/TCP) a\u00e7man\u0131z gerekir.<\/p>\n<p>\u0130lk olarak, <code>firewalld<\/code> servisinin \u00e7al\u0131\u015f\u0131r durumda oldu\u011fundan emin olun:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl status firewalld<\/code><\/pre>\n<p>E\u011fer \u00e7al\u0131\u015fm\u0131yorsa, ba\u015flat\u0131n ve etkinle\u015ftirin:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl start firewalld\nsudo systemctl enable firewalld<\/code><\/pre>\n<p>\u015eimdi, Squid&#8217;in varsay\u0131lan portu olan 3128\/TCP&#8217;ye izin veren bir kural ekleyin:<\/p>\n<pre><code class=\"language-bash\">sudo firewall-cmd --permanent --add-port=3128\/tcp<\/code><\/pre>\n<p>De\u011fi\u015fikliklerin etkili olmas\u0131 i\u00e7in g\u00fcvenlik duvar\u0131n\u0131 yeniden y\u00fckleyin:<\/p>\n<pre><code class=\"language-bash\">sudo firewall-cmd --reload<\/code><\/pre>\n<p>Eklenen kural\u0131 do\u011frulamak i\u00e7in mevcut kurallar\u0131 listeleyebilirsiniz:<\/p>\n<pre><code class=\"language-bash\">sudo firewall-cmd --list-all<\/code><\/pre>\n<p>\u00c7\u0131kt\u0131da <code>ports: 3128\/tcp<\/code> ifadesini g\u00f6rmelisiniz.<\/p>\n<h3>Ad\u0131m 4: Squid Yap\u0131land\u0131rmas\u0131<\/h3>\n<p>Squid&#8217;in yap\u0131land\u0131rma dosyas\u0131 <code>\/etc\/squid\/squid.conf<\/code> konumundad\u0131r. Bu dosya olduk\u00e7a kapsaml\u0131d\u0131r ve bir\u00e7ok se\u00e7enek i\u00e7erir. \u00d6zel ba\u011flant\u0131lar i\u00e7in ana odak noktam\u0131z eri\u015fim kontrol listeleri (ACL&#8217;ler) ve kimlik do\u011frulamad\u0131r.<\/p>\n<h4>Yap\u0131land\u0131rma Dosyas\u0131na Genel Bak\u0131\u015f<\/h4>\n<p><code>\/etc\/squid\/squid.conf<\/code> dosyas\u0131, Squid&#8217;in t\u00fcm davran\u0131\u015f\u0131n\u0131 kontrol eder. Dosya i\u00e7inde y\u00fczlerce sat\u0131r yorum ve \u00f6rnek yap\u0131land\u0131rma bulunur. D\u00fczenlemeye ba\u015flamadan \u00f6nce orijinal dosyan\u0131n bir yede\u011fini almak iyi bir al\u0131\u015fkanl\u0131kt\u0131r.<\/p>\n<h4>Yedekleme<\/h4>\n<pre><code class=\"language-bash\">sudo cp \/etc\/squid\/squid.conf \/etc\/squid\/squid.conf.bak<\/code><\/pre>\n<h4>Temel Yap\u0131land\u0131rma \u0130lkeleri<\/h4>\n<p>Squid yap\u0131land\u0131rmas\u0131nda s\u0131k\u00e7a kar\u015f\u0131la\u015faca\u011f\u0131n\u0131z baz\u0131 temel direktifler \u015funlard\u0131r:<\/p>\n<p>*   <code>http_port [ip:]port<\/code>: Squid&#8217;in gelen ba\u011flant\u0131lar\u0131 dinleyece\u011fi IP adresi ve portu belirtir. Varsay\u0131lan olarak <code>http_port 3128<\/code> t\u00fcm aray\u00fczlerde dinler.<br \/>\n*   <code>acl [acl_ad\u0131] [t\u00fcr] [de\u011fer]<\/code>: Eri\u015fim kontrol listeleri tan\u0131mlar. <code>acl<\/code> komutu, IP adresi, kullan\u0131c\u0131 ad\u0131, zaman, etki alan\u0131 gibi \u00e7e\u015fitli kriterlere g\u00f6re gruplar olu\u015fturman\u0131za olanak tan\u0131r.<br \/>\n*   <code>http_access [allow|deny] [acl_ad\u0131]<\/code>: Tan\u0131mlanan ACL&#8217;lere g\u00f6re HTTP trafi\u011fine izin verir veya engeller. Kurallar s\u0131rayla i\u015flenir, bu nedenle s\u0131ralama \u00f6nemlidir.<br \/>\n*   <code>visible_hostname [hostname]<\/code>: Proxy sunucusunun kendini tan\u0131taca\u011f\u0131 ana bilgisayar ad\u0131n\u0131 belirler.<br \/>\n*   <code>cache_dir [t\u00fcr] [dizin] [boyut] [se\u00e7enekler]<\/code>: \u00d6nbellek dizinini ve boyutunu ayarlar. \u00d6zel ba\u011flant\u0131lar i\u00e7in \u00f6nbellekleme genellikle ikincil \u00f6neme sahiptir, ancak yine de yap\u0131land\u0131r\u0131labilir.<\/p>\n<h4>\u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Ayarlar<\/h4>\n<p>\u00d6zel ba\u011flant\u0131lar i\u00e7in ana hedefimiz, sadece yetkili kullan\u0131c\u0131lar\u0131n veya belirli IP adreslerinin proxy&#8217;yi kullanmas\u0131n\u0131 sa\u011flamakt\u0131r. Bunu yapman\u0131n iki ana yolu vard\u0131r: IP tabanl\u0131 k\u0131s\u0131tlama veya kullan\u0131c\u0131 ad\u0131\/\u015fifre ile kimlik do\u011frulama. Kimlik do\u011frulamas\u0131, IP tabanl\u0131 k\u0131s\u0131tlamadan daha g\u00fcvenli ve esnektir.<\/p>\n<p><code>sudo nano \/etc\/squid\/squid.conf<\/code> komutuyla yap\u0131land\u0131rma dosyas\u0131n\u0131 a\u00e7\u0131n ve a\u015fa\u011f\u0131daki de\u011fi\u015fiklikleri yap\u0131n.<\/p>\n<h5>1. Sadece Belirli IP&#8217;lere \u0130zin Verme (Daha Az G\u00fcvenli, Daha Basit)<\/h5>\n<p>E\u011fer proxy&#8217;nizi sadece belirli bir yerel a\u011fdan veya belirli statik IP adreslerinden eri\u015filebilir k\u0131lmak istiyorsan\u0131z, ACL&#8217;leri kullanabilirsiniz.<\/p>\n<p>Varsay\u0131lan olarak, Squid <code>http_access deny all<\/code> kural\u0131ndan \u00f6nce <code>http_access allow localhost<\/code> ve <code>http_access allow localnet<\/code> gibi kurallara sahiptir. Bu kurallar\u0131 bulup, kendi \u00f6zel IP adresleriniz veya a\u011f\u0131n\u0131z i\u00e7in bir kural ekleyebilirsiniz.<\/p>\n<p>\u00d6nce mevcut <code>http_access deny all<\/code> sat\u0131r\u0131n\u0131 bulun ve yorum sat\u0131r\u0131 haline getirin veya silin (\u015fimdilik).<\/p>\n<p>Ard\u0131ndan, kendi a\u011f\u0131n\u0131z i\u00e7in bir ACL tan\u0131mlay\u0131n:<\/p>\n<pre><code class=\"language-squidconf\"># Kendi \u00f6zel a\u011f\u0131n\u0131z\u0131 tan\u0131mlay\u0131n (\u00f6rne\u011fin, 192.168.1.0\/24 veya tek bir IP: 192.168.1.100)\nacl benim_agim src 192.168.1.0\/24\n<h2>veya<\/h2>\n<h2>acl benim_ipim src 203.0.113.42<\/h2>\n\n<h2>Tan\u0131mlad\u0131\u011f\u0131n\u0131z a\u011fa veya IP'ye eri\u015fim izni verin<\/h2>\nhttp_access allow benim_agim\n<h2>veya<\/h2>\n<h2>http_access allow benim_ipim<\/h2>\n\n<h2>Geri kalan t\u00fcm isteklere eri\u015fimi engelleyin<\/h2>\nhttp_access deny all<\/code><\/pre>\n<p>Bu y\u00f6ntem, istemcilerin IP adreslerinin sabit oldu\u011fu ve kolayca taklit edilemedi\u011fi ortamlar i\u00e7in uygundur. Ancak, IP adresleri kolayca de\u011fi\u015ftirilebildi\u011fi veya dinamik oldu\u011fu durumlarda yetersiz kalabilir. Daha g\u00fcvenli bir yakla\u015f\u0131m kimlik do\u011frulamad\u0131r.<\/p>\n<h5>2. Kimlik Do\u011frulama Ekleme (\u00d6nerilen Y\u00f6ntem)<\/h5>\n<p>Kullan\u0131c\u0131 ad\u0131 ve \u015fifre ile kimlik do\u011frulama, proxy&#8217;nizi yetkisiz eri\u015fime kar\u015f\u0131 koruman\u0131n en etkili yoludur. Squid, \u00e7e\u015fitli kimlik do\u011frulama y\u00f6ntemlerini destekler; bunlardan en yayg\u0131n ve basit olan\u0131 Basic kimlik do\u011frulamad\u0131r. Bu, Apache&#8217;nin <code>htpasswd<\/code> arac\u0131yla olu\u015fturulan bir parola dosyas\u0131 kullan\u0131r.<\/p>\n<p><strong>a. <code>httpd-tools<\/code> Paketini Kurma:<\/strong><br \/>\n<code>htpasswd<\/code> arac\u0131n\u0131 kullanabilmek i\u00e7in <code>httpd-tools<\/code> paketini kurman\u0131z gerekir:<\/p>\n<pre><code class=\"language-bash\">sudo dnf install httpd-tools -y<\/code><\/pre>\n<p><strong>b. Parola Dosyas\u0131 Olu\u015fturma:<\/strong><br \/>\nSquid i\u00e7in bir parola dosyas\u0131 olu\u015fturun ve ilk kullan\u0131c\u0131y\u0131 ekleyin. Bu \u00f6rnekte <code>\/etc\/squid\/passwd<\/code> dosyas\u0131n\u0131 kullanaca\u011f\u0131z ve <code>kullaniciadi<\/code> ad\u0131nda bir kullan\u0131c\u0131 ekleyece\u011fiz.<\/p>\n<pre><code class=\"language-bash\">sudo htpasswd -c \/etc\/squid\/passwd kullaniciadi<\/code><\/pre>\n<p>Sizden <code>kullaniciadi<\/code> i\u00e7in bir \u015fifre girmenizi isteyecektir. G\u00fc\u00e7l\u00fc bir \u015fifre se\u00e7ti\u011finizden emin olun. Ba\u015fka kullan\u0131c\u0131lar eklemek isterseniz, <code>-c<\/code> parametresini kullanmadan (<code>htpasswd \/etc\/squid\/passwd yeni_kullanici<\/code>) ayn\u0131 komutu \u00e7al\u0131\u015ft\u0131rabilirsiniz. <code>-c<\/code> sadece ilk olu\u015fturma i\u00e7in kullan\u0131l\u0131r, \u00e7\u00fcnk\u00fc mevcut bir dosyay\u0131 siler.<\/p>\n<p>Parola dosyas\u0131n\u0131n izinlerini Squid kullan\u0131c\u0131s\u0131n\u0131n okuyabilece\u011fi \u015fekilde ayarlay\u0131n:<\/p>\n<pre><code class=\"language-bash\">sudo chown squid:squid \/etc\/squid\/passwd\nsudo chmod 640 \/etc\/squid\/passwd<\/code><\/pre>\n<p><strong>c. Squid Yap\u0131land\u0131rmas\u0131n\u0131 G\u00fcncelleme:<\/strong><br \/>\n<code>sudo nano \/etc\/squid\/squid.conf<\/code> dosyas\u0131n\u0131 tekrar a\u00e7\u0131n ve a\u015fa\u011f\u0131daki sat\u0131rlar\u0131 ekleyin. Genellikle bu sat\u0131rlar\u0131 <code>http_access<\/code> kurallar\u0131ndan \u00f6nce, dosyan\u0131n \u00fcst k\u0131s\u0131mlar\u0131na eklemek iyi bir uygulamad\u0131r.<\/p>\n<pre><code class=\"language-squidconf\"># Kimlik do\u011frulama program\u0131n\u0131 tan\u0131mlay\u0131n\n<h2>\/usr\/lib64\/squid\/basic_ncsa_auth yolu Rocky Linux 8 i\u00e7in do\u011frudur.<\/h2>\nauth_param basic program \/usr\/lib64\/squid\/basic_ncsa_auth \/etc\/squid\/passwd\nauth_param basic children 5 startup=5 idle=1\nauth_param basic realm \"Squid Proxy Server - Kimlik Dogrulama Gerekli\"\nauth_param basic credentialsttl 2 hours\n\n<h2>Kimlik do\u011frulamas\u0131 ba\u015far\u0131l\u0131 olan kullan\u0131c\u0131lar i\u00e7in bir ACL tan\u0131mlay\u0131n<\/h2>\nacl authenticated proxy_auth REQUIRED\n\n<h2>\u015eimdi http_access kurallar\u0131n\u0131 d\u00fczenleyin:<\/h2>\n<h2>\u00d6nce kimlik do\u011frulamas\u0131 yap\u0131lm\u0131\u015f kullan\u0131c\u0131lara izin verin<\/h2>\nhttp_access allow authenticated\n\n<h2>Daha sonra, yerel a\u011flara veya localhost'a eri\u015fimi k\u0131s\u0131tlamak isterseniz buraya ekleyebilirsiniz.<\/h2>\n<h2>\u00d6rne\u011fin, kimlik do\u011frulamas\u0131 yap\u0131lm\u0131\u015f kullan\u0131c\u0131lar d\u0131\u015f\u0131nda yerel a\u011fa eri\u015fimi engelleyebilirsiniz:<\/h2>\n<h2>http_access deny localnet<\/h2>\n\n<h2>T\u00fcm di\u011fer eri\u015fimi engelleyin (bu sat\u0131r en sonda olmal\u0131)<\/h2>\nhttp_access deny all<\/code><\/pre>\n<p><strong>\u00d6nemli Not:<\/strong> <code>http_access<\/code> kurallar\u0131n\u0131n s\u0131ras\u0131 \u00e7ok \u00f6nemlidir. Squid, kurallar\u0131 yukar\u0131dan a\u015fa\u011f\u0131ya do\u011fru okur ve ilk e\u015fle\u015fen kural\u0131 uygular. Bu nedenle, <code>http_access allow authenticated<\/code> kural\u0131 <code>http_access deny all<\/code> kural\u0131ndan \u00f6nce gelmelidir.<\/p>\n<h5>3. Visible Hostname Ayar\u0131<\/h5>\n<p>Proxy sunucunuzun kendini internete nas\u0131l tan\u0131taca\u011f\u0131n\u0131 belirlemek i\u00e7in <code>visible_hostname<\/code> direktifini ayarlayabilirsiniz. Bu, genellikle sunucunuzun tam nitelikli alan ad\u0131d\u0131r (FQDN).<\/p>\n<pre><code class=\"language-squidconf\"># visible_hostname myproxy.example.com\nvisible_hostname rockylinux-squid-proxy<\/code><\/pre>\n<p>Bu sat\u0131r\u0131 dosyan\u0131n herhangi bir yerinde bulup kendi sunucu ad\u0131n\u0131zla de\u011fi\u015ftirebilirsiniz.<\/p>\n<h5>4. SSL\/TLS (HTTPS) Trafi\u011fini \u0130\u015fleme<\/h5>\n<p>Squid, HTTPS trafi\u011fini varsay\u0131lan olarak t\u00fcnelleme (CONNECT metodu) yoluyla i\u015fler. Bu, istemci ile hedef HTTPS sunucusu aras\u0131nda bir t\u00fcnel olu\u015fturur ve Squid bu t\u00fcnelin i\u00e7eri\u011fini g\u00f6remez. Bu durum, \u00f6zel ba\u011flant\u0131lar i\u00e7in gizlili\u011fi korudu\u011fu i\u00e7in idealdir. Squid sadece ba\u011flant\u0131y\u0131 y\u00f6nlendirir, \u015fifrelenmi\u015f i\u00e7eri\u011fi okumaz veya de\u011fi\u015ftirmez.<\/p>\n<p>E\u011fer Squid&#8217;in HTTPS trafi\u011finin i\u00e7eri\u011fini de incelemesini isterseniz (SSL\/TLS intercept veya &#8220;man-in-the-middle&#8221; proxy), bu \u00e7ok daha karma\u015f\u0131k bir yap\u0131land\u0131rma gerektirir ve genellikle kurumsal a\u011flarda g\u00fcvenlik denetimi amac\u0131yla kullan\u0131l\u0131r. Bu durumda, kendi CA sertifikalar\u0131n\u0131z\u0131 olu\u015fturman\u0131z ve t\u00fcm istemcilere da\u011f\u0131tman\u0131z gerekir, bu da \u00f6zel ba\u011flant\u0131lar i\u00e7in gizlili\u011fi ihlal edebilece\u011fi i\u00e7in bu rehberin kapsam\u0131 d\u0131\u015f\u0131ndad\u0131r. Bu nedenle, varsay\u0131lan t\u00fcnelleme davran\u0131\u015f\u0131n\u0131 koruman\u0131z \u00f6nerilir.<\/p>\n<h4>Yap\u0131land\u0131rma Dosyas\u0131n\u0131n Son Hali (\u00d6rnek &#8211; Kimlik Do\u011frulama ile)<\/h4>\n<p>A\u015fa\u011f\u0131da, kimlik do\u011frulamal\u0131 ve temel g\u00fcvenlik ayarlar\u0131 yap\u0131lm\u0131\u015f bir <code>squid.conf<\/code> dosyas\u0131n\u0131n ilgili b\u00f6l\u00fcmlerinin birle\u015ftirilmi\u015f bir \u00f6rne\u011fi bulunmaktad\u0131r. Unutmay\u0131n, bu sadece ilgili b\u00f6l\u00fcmlerdir, dosyan\u0131n tamam\u0131 \u00e7ok daha uzundur.<\/p>\n<pre><code class=\"language-squidconf\"># ... (dosyan\u0131n ba\u015f\u0131ndaki di\u011fer yap\u0131land\u0131rmalar) ...\n\n<h2>Proxy'nin dinleyece\u011fi port<\/h2>\nhttp_port 3128\n\n<h2>Visible Hostname ayar\u0131<\/h2>\nvisible_hostname rockylinux-squid-proxy\n\n<h2>Kimlik do\u011frulama ayarlar\u0131<\/h2>\nauth_param basic program \/usr\/lib64\/squid\/basic_ncsa_auth \/etc\/squid\/passwd\nauth_param basic children 5 startup=5 idle=1\nauth_param basic realm \"Squid Proxy Server - Kimlik Dogrulama Gerekli\"\nauth_param basic credentialsttl 2 hours\n\n<h2>ACL tan\u0131mlar\u0131<\/h2>\nacl localnet src 0.0.0.1-0.255.255.255   # RFC 1918 B\nacl localnet src 10.0.0.0\/8             # RFC 1918 A\nacl localnet src 172.16.0.0\/12          # RFC 1918 B\nacl localnet src 192.168.0.0\/16         # RFC 1918 C\nacl localnet src fc00::\/7               # RFC 4193 Unique Local Addrs\nacl localnet src fe80::\/10              # RFC 4291 Link-Local Addrs\n\nacl SSL_ports port 443\nacl Safe_ports port 80          # http\nacl Safe_ports port 21          # ftp\nacl Safe_ports port 443         # https\nacl Safe_ports port 70          # gopher\nacl Safe_ports port 210         # wais\nacl Safe_ports port 1025-65535  # unregistered ports\nacl Safe_ports port 280         # http-mgmt\nacl Safe_ports port 488         # gss-http\nacl Safe_ports port 591         # filemaker\nacl Safe_ports port 777         # multiling http\nacl CONNECT method CONNECT\n\n<h2>Kimlik do\u011frulamas\u0131 yap\u0131lm\u0131\u015f kullan\u0131c\u0131lar i\u00e7in ACL<\/h2>\nacl authenticated proxy_auth REQUIRED\n\n<h2>Eri\u015fim kurallar\u0131<\/h2>\n<h2>\u00d6nce kimlik do\u011frulamas\u0131 yap\u0131lm\u0131\u015f kullan\u0131c\u0131lara izin verin<\/h2>\nhttp_access allow authenticated\n\n<h2>G\u00fcvenli portlara CONNECT metoduna izin ver<\/h2>\nhttp_access allow CONNECT SSL_ports\n\n<h2>G\u00fcvenli portlara eri\u015fime izin ver<\/h2>\nhttp_access allow Safe_ports\n\n<h2>Yerel a\u011fdan gelen t\u00fcm isteklere izin ver (kimlik do\u011frulamas\u0131 olmadan - bu sat\u0131r\u0131 kald\u0131rabilirsiniz)<\/h2>\n<h2>http_access allow localnet<\/h2>\n\n<h2>Geri kalan t\u00fcm eri\u015fimi engelle<\/h2>\nhttp_access deny all\n\n<h2>... (dosyan\u0131n sonundaki di\u011fer yap\u0131land\u0131rmalar) ...<\/code><\/pre>\n<\/h2>\n<p><strong>Not:<\/strong> Yukar\u0131daki \u00f6rnekte <code>http_access allow localnet<\/code> sat\u0131r\u0131, kimlik do\u011frulamas\u0131 yap\u0131lm\u0131\u015f kullan\u0131c\u0131lar d\u0131\u015f\u0131ndaki yerel a\u011f trafi\u011fine de izin verebilir. E\u011fer kesinlikle sadece kimlik do\u011frulamas\u0131 yap\u0131lm\u0131\u015f kullan\u0131c\u0131lara izin vermek istiyorsan\u0131z, bu sat\u0131r\u0131 kald\u0131rmal\u0131s\u0131n\u0131z. <code>http_access deny all<\/code> en sonda oldu\u011fundan, \u00f6nce <code>http_access allow authenticated<\/code> kural\u0131 uygulanacakt\u0131r.<\/p>\n<h4>Yap\u0131land\u0131rma Kontrol\u00fc ve Yeniden Ba\u015flatma<\/h4>\n<p>Yap\u0131land\u0131rma dosyas\u0131n\u0131 kaydettikten sonra, herhangi bir s\u00f6zdizimi hatas\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek iyi bir fikirdir:<\/p>\n<pre><code class=\"language-bash\">sudo squid -k check<\/code><\/pre>\n<p>E\u011fer bir hata yoksa, \u00e7\u0131kt\u0131 genellikle bo\u015f veya uyar\u0131 i\u00e7ermeyen bir mesaj olacakt\u0131r. Herhangi bir hata varsa, hatan\u0131n belirtildi\u011fi sat\u0131r\u0131 kontrol edin.<\/p>\n<p>Ard\u0131ndan, Squid servisini yeniden ba\u015flat\u0131n ki yeni yap\u0131land\u0131rma etkili olsun:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl restart squid<\/code><\/pre>\n<p>Servisin yeniden ba\u015flad\u0131\u011f\u0131n\u0131 ve \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl status squid<\/code><\/pre>\n<h3>Ad\u0131m 5: \u0130stemci Taraf\u0131 Yap\u0131land\u0131rmas\u0131<\/h3>\n<p>Squid proxy sunucunuzu kurduktan sonra, istemci cihazlar\u0131n\u0131zda bu proxy&#8217;yi kullanacak \u015fekilde yap\u0131land\u0131rman\u0131z gerekir. Bu genellikle web taray\u0131c\u0131lar\u0131 veya i\u015fletim sistemi proxy ayarlar\u0131 \u00fczerinden yap\u0131l\u0131r.<\/p>\n<h4>Web Taray\u0131c\u0131 Ayarlar\u0131<\/h4>\n<p>\u00c7o\u011fu modern web taray\u0131c\u0131s\u0131, proxy ayarlar\u0131n\u0131 manuel olarak yap\u0131land\u0131rman\u0131za izin verir.<\/p>\n<p>*   <strong>Google Chrome \/ Microsoft Edge:<\/strong> Taray\u0131c\u0131n\u0131n ayarlar men\u00fcs\u00fcne gidin, &#8220;Proxy&#8221; veya &#8220;A\u011f&#8221; ayarlar\u0131n\u0131 aray\u0131n. Genellikle i\u015fletim sisteminin proxy ayarlar\u0131n\u0131 kullan\u0131r.<br \/>\n*   <strong>Mozilla Firefox:<\/strong> Ayarlar -> A\u011f Ayarlar\u0131 -> &#8220;Ayarlar&#8230;&#8221; butonuna t\u0131klay\u0131n. Burada &#8220;Manuel proxy yap\u0131land\u0131rmas\u0131&#8221; se\u00e7ene\u011fini se\u00e7in.<br \/>\n    *   <strong>HTTP Proxy:<\/strong> Proxy sunucunuzun IP adresi ve portu (\u00f6rne\u011fin, <code>192.168.1.100<\/code> ve <code>3128<\/code>).<br \/>\n    *   <strong>SSL Proxy:<\/strong> Ayn\u0131 IP adresi ve portu girin.<br \/>\n    *   &#8220;T\u00fcm protokoller i\u00e7in bu proxy sunucusunu kullan&#8221; se\u00e7ene\u011fini i\u015faretleyebilirsiniz.<\/p>\n<p>Proxy IP adresiniz olarak Rocky Linux sunucunuzun IP adresini ve port olarak 3128&#8217;i kullan\u0131n.<\/p>\n<h4>\u0130\u015fletim Sistemi Geneli Proxy Ayarlar\u0131<\/h4>\n<p>*   <strong>Windows:<\/strong> Ayarlar -> A\u011f ve \u0130nternet -> Proxy. &#8220;Manuel proxy kurulumu&#8221; alt\u0131nda, proxy sunucusunun IP adresini ve portunu girin.<br \/>\n*   <strong>macOS:<\/strong> Sistem Ayarlar\u0131 -> A\u011f -> \u0130leri D\u00fczey -> Proxies. Burada HTTP ve HTTPS (G\u00fcvenli Web Proxy) i\u00e7in proxy sunucusunun IP adresini ve portunu girin.<br \/>\n*   <strong>Linux (GNOME\/KDE):<\/strong> Genellikle sistem ayarlar\u0131na gidip &#8220;A\u011f&#8221; veya &#8220;Proxy&#8221; b\u00f6l\u00fcm\u00fcn\u00fc aray\u0131n. &#8220;Manuel&#8221; veya &#8220;Sistem Proxy&#8217;si&#8221; ayarlar\u0131n\u0131 yap\u0131land\u0131r\u0131n.<\/p>\n<h4>Test Etme<\/h4>\n<p>Proxy ayarlar\u0131n\u0131 yapt\u0131ktan sonra, proxy&#8217;nin do\u011fru \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 test etmelisiniz.<\/p>\n<p>1.  Web taray\u0131c\u0131n\u0131z\u0131 a\u00e7\u0131n.<br \/>\n2.  <code>http:\/\/www.whatismyip.com<\/code> veya <code>http:\/\/ip.me<\/code> gibi bir siteye gidin.<br \/>\n3.  Ekranda g\u00f6rd\u00fc\u011f\u00fcn\u00fcz IP adresinin Rocky Linux sunucunuzun genel IP adresi olmas\u0131 gerekir. E\u011fer kendi ger\u00e7ek IP adresinizi g\u00f6r\u00fcyorsan\u0131z, proxy do\u011fru yap\u0131land\u0131r\u0131lmam\u0131\u015f demektir.<br \/>\n4.  E\u011fer kimlik do\u011frulama kulland\u0131ysan\u0131z, taray\u0131c\u0131n\u0131z size bir kullan\u0131c\u0131 ad\u0131 ve \u015fifre penceresi sunmal\u0131d\u0131r. Do\u011fru kimlik bilgilerini girerek devam edin.<\/p>\n<h3>Ad\u0131m 6: G\u00fcvenlik \u0130pu\u00e7lar\u0131 ve En \u0130yi Uygulamalar<\/h3>\n<p>\u00d6zel ba\u011flant\u0131lar i\u00e7in bir Squid proxy kurarken g\u00fcvenli\u011fi art\u0131rmak i\u00e7in baz\u0131 ek ad\u0131mlar atabilirsiniz:<\/p>\n<p>*   <strong>Varsay\u0131lan Portu De\u011fi\u015ftirme:<\/strong> Squid&#8217;in varsay\u0131lan portu olan 3128, sald\u0131rganlar taraf\u0131ndan bilinen bir porttur. G\u00fcvenli\u011fi art\u0131rmak i\u00e7in <code>http_port<\/code> direktifini de\u011fi\u015ftirerek daha az bilinen bir port kullanabilirsiniz (\u00f6rne\u011fin, 8080, 8888 veya rastgele y\u00fcksek bir port). Portu de\u011fi\u015ftirdi\u011finizde, g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 da yeni porta g\u00f6re g\u00fcncellemeniz gerekti\u011fini unutmay\u0131n.<br \/>\n*   <strong>Sadece \u0130htiyac\u0131n\u0131z Olan IP&#8217;lere\/Kullan\u0131c\u0131lara \u0130zin Verme:<\/strong> <code>http_access<\/code> kurallar\u0131n\u0131z\u0131 m\u00fcmk\u00fcn oldu\u011funca k\u0131s\u0131tlay\u0131c\u0131 tutun. Sadece belirli IP adreslerinden veya kimlik do\u011frulamas\u0131 yap\u0131lm\u0131\u015f kullan\u0131c\u0131lardan gelen trafi\u011fe izin verin.<br \/>\n*   <strong>G\u00fc\u00e7l\u00fc \u015eifreler Kullanma:<\/strong> Kimlik do\u011frulama kullan\u0131yorsan\u0131z, <code>htpasswd<\/code> ile olu\u015fturdu\u011funuz kullan\u0131c\u0131lar i\u00e7in g\u00fc\u00e7l\u00fc ve karma\u015f\u0131k \u015fifreler kulland\u0131\u011f\u0131n\u0131zdan emin olun.<br \/>\n*   <strong>Squid ve Rocky Linux&#8217;u D\u00fczenli Olarak G\u00fcncelleme:<\/strong> Sistem ve t\u00fcm paketlerinizin g\u00fcncel olmas\u0131, bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131na kar\u015f\u0131 korunman\u0131z\u0131 sa\u011flar.<br \/>\n*   <strong>Loglar\u0131 \u0130zleme:<\/strong> Squid, <code>\/var\/log\/squid\/access.log<\/code> ve <code>\/var\/log\/squid\/cache.log<\/code> gibi log dosyalar\u0131 olu\u015fturur. Bu dosyalar\u0131 d\u00fczenli olarak kontrol ederek olas\u0131 yetkisiz eri\u015fim denemelerini veya proxy ile ilgili sorunlar\u0131 tespit edebilirsiniz.<br \/>\n*   <strong>SELinux:<\/strong> Rocky Linux&#8217;ta SELinux varsay\u0131lan olarak etkin ve zorlay\u0131c\u0131 moddad\u0131r. Squid i\u00e7in varsay\u0131lan SELinux politikalar\u0131 genellikle yeterlidir. Ancak, \u00f6zel bir port kullan\u0131rsan\u0131z veya farkl\u0131 bir dizine parola dosyas\u0131 koyarsan\u0131z, SELinux ba\u011flam\u0131n\u0131 g\u00fcncellemeniz gerekebilir. \u00d6rne\u011fin, yeni bir port i\u00e7in: <code>sudo semanage port -a -t http_port_t -p tcp <yeni_port_numaras\u0131><\/code>.<br \/>\n*   <strong>IPv6 Deste\u011fi:<\/strong> E\u011fer a\u011f\u0131n\u0131zda IPv6 kullan\u0131l\u0131yorsa, Squid&#8217;in IPv6 trafi\u011fini de i\u015flemesini sa\u011flayabilirsiniz. Varsay\u0131lan yap\u0131land\u0131rma genellikle hem IPv4 hem de IPv6&#8217;y\u0131 destekler, ancak \u00f6zel ACL&#8217;ler tan\u0131mlarken IPv6 adreslerini de dahil etmeniz gerekebilir.<\/p>\n<h3>S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n<h4>Squid neden \u00e7al\u0131\u015fm\u0131yor veya istemciler ba\u011flanam\u0131yor?<\/h4>\n<p>*   <strong>G\u00fcvenlik Duvar\u0131:<\/strong> En yayg\u0131n nedenlerden biri g\u00fcvenlik duvar\u0131n\u0131n proxy portunu engellemesidir. <code>firewall-cmd --list-all<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 kontrol edin.<br \/>\n*   <strong>Squid Servisi:<\/strong> <code>sudo systemctl status squid<\/code> komutuyla servisin \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol edin.<br \/>\n*   <strong>Yap\u0131land\u0131rma Hatas\u0131:<\/strong> <code>sudo squid -k check<\/code> komutuyla yap\u0131land\u0131rma dosyas\u0131nda hata olup olmad\u0131\u011f\u0131n\u0131 kontrol edin.<br \/>\n*   <strong>\u0130zinler:<\/strong> <code>\/etc\/squid\/passwd<\/code> gibi dosyalar\u0131n Squid kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir oldu\u011fundan emin olun.<br \/>\n*   <strong>SELinux:<\/strong> SELinux&#8217;un proxy&#8217;nin \u00e7al\u0131\u015fmas\u0131n\u0131 engellemedi\u011finden emin olun. <code>\/var\/log\/audit\/audit.log<\/code> dosyas\u0131n\u0131 kontrol edin.<\/p>\n<h4>Proxy \u00fczerinden HTTPS sitelerine eri\u015femiyorum?<\/h4>\n<p>*   Squid&#8217;in varsay\u0131lan olarak HTTPS trafi\u011fini t\u00fcnelleme (CONNECT metodu) ile i\u015fledi\u011finden emin olun. <code>squid.conf<\/code> dosyas\u0131nda <code>http_access allow CONNECT SSL_ports<\/code> kural\u0131n\u0131n oldu\u011fundan emin olun.<br \/>\n*   Taray\u0131c\u0131n\u0131z\u0131n proxy ayarlar\u0131nda hem HTTP hem de SSL\/HTTPS proxy&#8217;si i\u00e7in ayn\u0131 IP ve portu girdi\u011finizden emin olun.<br \/>\n*   E\u011fer SSL\/TLS intercept denemiyorsan\u0131z, sertifika hatalar\u0131 alman\u0131z beklenmez. E\u011fer al\u0131yorsan\u0131z, Squid&#8217;in yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f olabilece\u011fi veya a\u011f\u0131n\u0131zda ba\u015fka bir SSL denetiminin oldu\u011fu anlam\u0131na gelebilir.<\/p>\n<h4>Proxy h\u0131z\u0131 neden yava\u015f?<\/h4>\n<p>*   <strong>A\u011f Bant Geni\u015fli\u011fi:<\/strong> Proxy sunucunuzun ve istemcilerinizin internet ba\u011flant\u0131 h\u0131z\u0131.<br \/>\n*   <strong>Sunucu Kaynaklar\u0131:<\/strong> Proxy sunucusunun CPU, RAM veya disk I\/O&#8217;su yetersiz olabilir. \u00d6zellikle \u00f6nbellekleme yo\u011fun kullan\u0131l\u0131yorsa disk performans\u0131 \u00f6nemlidir.<br \/>\n*   <strong>Squid Yap\u0131land\u0131rmas\u0131:<\/strong> <code>cache_dir<\/code> ayarlar\u0131, <code>max_obj_size<\/code>, <code>min_obj_size<\/code> gibi \u00f6nbellekleme parametreleri performans\u0131 etkileyebilir. Ayr\u0131ca, <code>dns_nameservers<\/code> ayar\u0131n\u0131n do\u011fru oldu\u011fundan emin olun.<br \/>\n*   <strong>Proxy Zincirlemesi:<\/strong> Birden fazla proxy \u00fczerinden ge\u00e7iyorsan\u0131z h\u0131z d\u00fc\u015febilir.<\/p>\n<h3>Sonu\u00e7<\/h3>\n<p>Bu makalede, Rocky Linux 8 \u00fczerinde \u00f6zel ba\u011flant\u0131lar i\u00e7in g\u00fcvenli bir Squid proxy sunucusunun nas\u0131l kurulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ad\u0131m ad\u0131m ele ald\u0131k. Squid&#8217;i kurarak, temel g\u00fcvenlik duvar\u0131 ayarlar\u0131n\u0131 yaparak ve en \u00f6nemlisi kimlik do\u011frulama veya IP tabanl\u0131 eri\u015fim kontrol\u00fc kullanarak, a\u011f\u0131n\u0131zdaki kullan\u0131c\u0131lar i\u00e7in g\u00fcvenli ve denetlenebilir bir internet eri\u015fim noktas\u0131 olu\u015fturabilirsiniz.<\/p>\n<p>Squid&#8217;in esnek yap\u0131land\u0131rma se\u00e7enekleri sayesinde, ihtiya\u00e7lar\u0131n\u0131za g\u00f6re daha fazla \u00f6zelle\u015ftirme yapabilir, \u00f6rne\u011fin daha geli\u015fmi\u015f filtreleme kurallar\u0131 ekleyebilir veya performans optimizasyonlar\u0131 uygulayabilirsiniz. Ancak, \u00f6zel ba\u011flant\u0131lar i\u00e7in temel g\u00fcvenlik ve eri\u015fim kontrol\u00fc, bu rehberde a\u00e7\u0131klanan ad\u0131mlarla sa\u011flanm\u0131\u015f olur. D\u00fczenli bak\u0131m, g\u00fcncelleme ve log izleme ile proxy sunucunuzun g\u00fcvenli\u011fini ve performans\u0131n\u0131 uzun vadede s\u00fcrd\u00fcrebilirsiniz.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu\nSquid, esnek ve g\u00fc\u00e7l\u00fc bir proxy sunucusudur. \u00d6zellikle a\u011f trafi\u011fini \u00f6n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-35201","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu\" \/>\n<meta property=\"og:description\" content=\"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu Squid, esnek ve g\u00fc\u00e7l\u00fc bir proxy sunucusudur. \u00d6zellikle a\u011f trafi\u011fini \u00f6n\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-26T19:40:49+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu\",\"datePublished\":\"2025-11-26T19:40:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/\"},\"wordCount\":2959,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/\",\"name\":\"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-26T19:40:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/","og_locale":"tr_TR","og_type":"article","og_title":"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu","og_description":"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu Squid, esnek ve g\u00fc\u00e7l\u00fc bir proxy sunucusudur. \u00d6zellikle a\u011f trafi\u011fini \u00f6n","og_url":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-26T19:40:49+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"19 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu","datePublished":"2025-11-26T19:40:49+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/"},"wordCount":2959,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/","url":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/","name":"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-26T19:40:49+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/rocky-linux-8-uzerinde-ozel-baglantilar-icin-squid-proxy-kurulumu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Rocky Linux 8 \u00dczerinde \u00d6zel Ba\u011flant\u0131lar \u0130\u00e7in Squid Proxy Kurulumu"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=35201"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35201\/revisions"}],"predecessor-version":[{"id":35202,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35201\/revisions\/35202"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=35201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=35201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=35201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}