{"id":35404,"date":"2025-11-29T08:40:55","date_gmt":"2025-11-29T05:40:55","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=35404"},"modified":"2025-11-29T08:40:55","modified_gmt":"2025-11-29T05:40:55","slug":"vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/","title":{"rendered":"VPS’ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi"},"content":{"rendered":"

<\/p>\n

VPS’ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi<\/h2>\n

VPS (Sanal \u00d6zel Sunucu) kullan\u0131m\u0131, g\u00fcn\u00fcm\u00fcz\u00fcn dijital altyap\u0131s\u0131nda esneklik ve maliyet etkinli\u011fi sunan pop\u00fcler bir \u00e7\u00f6z\u00fcmd\u00fcr. Ancak, bu sunucular aras\u0131ndaki veri ak\u0131\u015f\u0131 genellikle kamu a\u011flar\u0131 \u00fczerinden ger\u00e7ekle\u015fti\u011finden, g\u00fcvenlik endi\u015felerini de beraberinde getirir. Hassas verilerin aktar\u0131lmas\u0131, y\u00f6netimsel eri\u015fim veya sadece \u00f6zel bir a\u011f olu\u015fturma ihtiyac\u0131 olsun, VPS’ler aras\u0131ndaki trafi\u011fi \u015fifrelemek ve g\u00fcvence alt\u0131na almak kritik \u00f6neme sahiptir. Bu makale, a\u00e7\u0131k kaynakl\u0131 ve g\u00fc\u00e7l\u00fc bir VPN \u00e7\u00f6z\u00fcm\u00fc olan OpenVPN kullanarak iki veya daha fazla VPS aras\u0131nda g\u00fcvenli, \u015fifreli bir t\u00fcnel olu\u015fturman\u0131n ad\u0131m ad\u0131m nas\u0131l yap\u0131laca\u011f\u0131n\u0131 detayland\u0131rmaktad\u0131r.<\/p>\n

Giri\u015f: Neden VPS Trafi\u011fini G\u00fcvenli Hale Getirmeliyiz?<\/h3>\n

G\u00fcn\u00fcm\u00fcz\u00fcn siber tehdit ortam\u0131nda, veri g\u00fcvenli\u011fi her zamankinden daha \u00f6nemlidir. VPS’ler aras\u0131nda aktar\u0131lan veriler, potansiyel olarak k\u00f6t\u00fc niyetli akt\u00f6rler taraf\u0131ndan izlenebilir, ele ge\u00e7irilebilir veya de\u011fi\u015ftirilebilir. Bu durum, \u00f6zellikle veritaban\u0131 sunucular\u0131, uygulama sunucular\u0131, mikro servisler veya yedekleme \u00e7\u00f6z\u00fcmleri gibi kritik bile\u015fenler aras\u0131nda ileti\u015fim kuruldu\u011funda b\u00fcy\u00fck riskler ta\u015f\u0131r.<\/p>\n

G\u00fcvenli bir t\u00fcnel olu\u015fturman\u0131n ba\u015fl\u0131ca nedenleri \u015funlard\u0131r:<\/p>\n

* Veri Gizlili\u011fi:<\/strong> T\u00fcm ileti\u015fim \u015fifrelenir, b\u00f6ylece yetkisiz ki\u015filerin verilere eri\u015fmesi engellenir.
\n* Veri B\u00fct\u00fcnl\u00fc\u011f\u00fc:<\/strong> Verilerin aktar\u0131m s\u0131ras\u0131nda de\u011fi\u015ftirilmedi\u011fi garanti edilir.
\n* Kimlik Do\u011frulama:<\/strong> Ba\u011flanan her iki taraf\u0131n da kimli\u011fi do\u011frulan\u0131r, b\u00f6ylece sahte sunucular\u0131n veya istemcilerin a\u011fa s\u0131zmas\u0131 \u00f6nlenir.
\n* A\u011f Segmentasyonu:<\/strong> Kamu a\u011f\u0131ndan izole edilmi\u015f \u00f6zel bir a\u011f katman\u0131 olu\u015fturarak, genel a\u011f \u00fczerindeki sald\u0131r\u0131 y\u00fczeyini azalt\u0131r.
\n* G\u00fcvenli Uzaktan Eri\u015fim:<\/strong> Y\u00f6netimsel eri\u015fimler (SSH, RDP) bile bu g\u00fcvenli t\u00fcnel \u00fczerinden yap\u0131larak ek bir g\u00fcvenlik katman\u0131 sa\u011flan\u0131r.<\/p>\n

OpenVPN, bu ihtiya\u00e7lar\u0131 kar\u015f\u0131lamak i\u00e7in tasarlanm\u0131\u015f, SSL\/TLS tabanl\u0131, son derece esnek ve yap\u0131land\u0131r\u0131labilir bir VPN \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. A\u00e7\u0131k kaynak kodlu olmas\u0131, geni\u015f bir topluluk taraf\u0131ndan s\u00fcrekli denetlenmesini ve geli\u015ftirilmesini sa\u011flar, bu da g\u00fcvenilirli\u011fini art\u0131r\u0131r. Bu rehber, OpenVPN sunucusunu bir VPS’e kurmay\u0131, istemci VPS’ler i\u00e7in sertifikalar olu\u015fturmay\u0131 ve ba\u011flant\u0131lar\u0131 yap\u0131land\u0131rmay\u0131 kapsaml\u0131 bir \u015fekilde ele alacakt\u0131r.<\/p>\n

Temel Kavramlar ve \u00d6n Haz\u0131rl\u0131k<\/h3>\n

OpenVPN kurulumuna ba\u015flamadan \u00f6nce, baz\u0131 temel kavramlar\u0131 anlamak ve gerekli \u00f6n haz\u0131rl\u0131klar\u0131 yapmak s\u00fcreci kolayla\u015ft\u0131racakt\u0131r.<\/p>\n

VPN Nedir ve Neden Kullan\u0131l\u0131r?<\/h4>\n

VPN (Virtual Private Network – Sanal \u00d6zel A\u011f), genel bir a\u011f (internet gibi) \u00fczerinden \u00f6zel bir a\u011f ba\u011flant\u0131s\u0131 olu\u015fturmay\u0131 sa\u011flayan bir teknolojidir. VPN’ler, genellikle \u015fifreleme ve kimlik do\u011frulama mekanizmalar\u0131 kullanarak veri trafi\u011fini g\u00fcvence alt\u0131na al\u0131r. Bu, sanki fiziksel olarak ayn\u0131 yerel a\u011fdaym\u0131\u015fs\u0131n\u0131z gibi g\u00fcvenli bir \u015fekilde uzaktan kaynaklara eri\u015fmenizi veya farkl\u0131 co\u011frafyalardaki a\u011flar\u0131 birbirine ba\u011flaman\u0131z\u0131 sa\u011flar.<\/p>\n

VPS’ler aras\u0131 senaryoda, VPN, sanki t\u00fcm VPS’leriniz ayn\u0131 fiziksel veri merkezinde, ayn\u0131 yerel a\u011f \u00fczerinde bulunuyormu\u015f gibi davranmalar\u0131n\u0131 sa\u011flar. Bu, servisler aras\u0131 g\u00fcvenli ileti\u015fimi, veritaban\u0131 eri\u015fimlerini veya da\u011f\u0131t\u0131k sistem mimarilerini basitle\u015ftirir ve g\u00fcvence alt\u0131na al\u0131r.<\/p>\n

OpenVPN’in Avantajlar\u0131<\/h4>\n

OpenVPN, di\u011fer VPN \u00e7\u00f6z\u00fcmlerine g\u00f6re bir\u00e7ok avantaj sunar:<\/p>\n

* G\u00fcvenlik:<\/strong> SSL\/TLS protokollerini kullanarak g\u00fc\u00e7l\u00fc \u015fifreleme ve kimlik do\u011frulama sa\u011flar. Bu, end\u00fcstri standard\u0131 g\u00fcvenlik protokollerine dayan\u0131r.
\n* Esneklik:<\/strong> TCP veya UDP protokolleri \u00fczerinden \u00e7al\u0131\u015fabilir. UDP genellikle daha h\u0131zl\u0131d\u0131r ve oyun veya VoIP gibi gecikmeye duyarl\u0131 uygulamalar i\u00e7in tercih edilirken, TCP daha kararl\u0131d\u0131r ve g\u00fcvenlik duvarlar\u0131n\u0131 a\u015fmada daha ba\u015far\u0131l\u0131 olabilir.
\n* A\u00e7\u0131k Kaynak:<\/strong> Kod taban\u0131 herkese a\u00e7\u0131kt\u0131r, bu da \u015feffafl\u0131k sa\u011flar ve g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n daha h\u0131zl\u0131 tespit edilip d\u00fczeltilmesine olanak tan\u0131r.
\n* Platform Ba\u011f\u0131ms\u0131zl\u0131\u011f\u0131:<\/strong> Linux, Windows, macOS, Android ve iOS gibi bir\u00e7ok farkl\u0131 platformda istemci deste\u011fi sunar.
\n* Yap\u0131land\u0131r\u0131labilirlik:<\/strong> \u00c7ok say\u0131da yap\u0131land\u0131rma se\u00e7ene\u011fi ile farkl\u0131 senaryolara uyarlanabilir.<\/p>\n

Gereksinimler<\/h4>\n

Bu rehberi takip etmek i\u00e7in a\u015fa\u011f\u0131daki gereksinimlere ihtiyac\u0131n\u0131z olacakt\u0131r:<\/p>\n

* \u0130ki veya Daha Fazla VPS:<\/strong> En az bir OpenVPN sunucusu olarak g\u00f6rev yapacak VPS ve en az bir istemci olarak ba\u011flanacak VPS. T\u00fcm VPS’lerin internete a\u00e7\u0131k bir IP adresine sahip olmas\u0131 gerekir.
\n* \u0130\u015fletim Sistemi:<\/strong> Tercihen Ubuntu 20.04 LTS veya Debian 11\/12 gibi g\u00fcncel bir Linux da\u011f\u0131t\u0131m\u0131. Bu rehberde komutlar bu da\u011f\u0131t\u0131mlar i\u00e7in optimize edilmi\u015ftir.
\n* Root Eri\u015fimi:<\/strong> T\u00fcm VPS’lerde root kullan\u0131c\u0131s\u0131 olarak veya sudo<\/code> yetkisine sahip bir kullan\u0131c\u0131 olarak eri\u015fim.
\n* Temel Linux Komut Bilgisi:<\/strong> ssh<\/code>, cd<\/code>, ls<\/code>, cp<\/code>, mv<\/code>, nano<\/code> veya vi<\/code> gibi temel komutlara a\u015final\u0131k.
\n* G\u00fcvenlik Duvar\u0131 Bilgisi:<\/strong> ufw<\/code> veya iptables<\/code> gibi g\u00fcvenlik duvar\u0131 y\u00f6netimini anlama ve yap\u0131land\u0131rma yetene\u011fi.<\/p>\n

Topoloji<\/h4>\n

Bu rehberde, tipik bir “client-server” topolojisi kullanaca\u011f\u0131z:<\/p>\n

* OpenVPN Sunucusu (VPS-1):<\/strong> Bu VPS, VPN t\u00fcnelinin merkezidir. Di\u011fer t\u00fcm istemci VPS’ler bu sunucuya ba\u011flanacakt\u0131r. Sertifika yetkilisi (CA) de genellikle bu sunucu \u00fczerinde olu\u015fturulur.
\n* OpenVPN \u0130stemcisi (VPS-2, VPS-3, vb.):<\/strong> Bu VPS’ler, OpenVPN sunucusuna ba\u011flanacak ve g\u00fcvenli t\u00fcnel \u00fczerinden ileti\u015fim kuracakt\u0131r.<\/p>\n

Bu yap\u0131land\u0131rma, t\u00fcm VPS’ler aras\u0131nda \u015fifreli bir ileti\u015fim a\u011f\u0131 olu\u015fturarak, sanki hepsi ayn\u0131 yerel a\u011fdaym\u0131\u015f gibi davranmalar\u0131n\u0131 sa\u011flar.<\/p>\n

OpenVPN Sunucusu Kurulumu<\/h3>\n

OpenVPN sunucusunu kuraca\u011f\u0131m\u0131z VPS’e (VPS-1) SSH ile ba\u011flanarak ba\u015flayaca\u011f\u0131z.<\/p>\n

Sistem G\u00fcncellemesi ve Temel Paketler<\/h4>\n

\u0130lk ad\u0131m olarak, sistemin g\u00fcncel oldu\u011fundan emin olun ve gerekli temel paketleri kurun:<\/p>\n

sudo apt update\nsudo apt upgrade -y\nsudo apt install -y openvpn easy-rsa<\/code><\/pre>\n
easy-rsa<\/code> paketi, OpenVPN i\u00e7in gerekli olan sertifika yetkilisi (CA) ve sunucu\/istemci sertifikalar\u0131n\u0131 olu\u015fturmak i\u00e7in kullan\u0131lacak ara\u00e7lar\u0131 i\u00e7erir.<\/p>\n
Sertifika Yetkilisi (CA) Olu\u015fturma<\/h4>\n
OpenVPN, TLS\/SSL sertifikalar\u0131 kullanarak kimlik do\u011frulama ve \u015fifreleme yapar. Bu sertifikalar\u0131 y\u00f6netmek i\u00e7in kendi Sertifika Yetkilimizi (CA) olu\u015fturmam\u0131z gerekecek. easy-rsa<\/code> bu s\u00fcreci basitle\u015ftirir.<\/p>\n
1.  Easy-RSA Dizinini Haz\u0131rlama:<\/strong>
\n    easy-rsa<\/code> komutlar\u0131n\u0131 kullanmak i\u00e7in kendi \u00e7al\u0131\u015fma dizinimizi olu\u015fturup oraya kopyalayaca\u011f\u0131z:<\/p>\n
make-cadir ~\/openvpn-ca\n    cd ~\/openvpn-ca<\/code><\/pre>\n
2.  vars<\/code> Dosyas\u0131n\u0131 D\u00fczenleme:<\/strong>
\n    vars<\/code> dosyas\u0131, CA ve sertifikalar i\u00e7in varsay\u0131lan de\u011ferleri i\u00e7erir. Bu de\u011ferleri kendi bilgilerinize g\u00f6re d\u00fczenlemelisiniz.<\/p>\n
nano vars<\/code><\/pre>\n
    A\u015fa\u011f\u0131daki sat\u0131rlar\u0131 bulup kendi bilgilerinize g\u00f6re de\u011fi\u015ftirin. \u00d6zellikle KEY_COUNTRY<\/code>, KEY_PROVINCE<\/code>, KEY_CITY<\/code>, KEY_ORG<\/code>, KEY_EMAIL<\/code> ve KEY_OU<\/code> alanlar\u0131n\u0131 doldurun. KEY_NAME<\/code> genellikle server<\/code> olarak b\u0131rak\u0131l\u0131r.<\/p>\n
set_var EASYRSA_REQ_COUNTRY    \"TR\"\n    set_var EASYRSA_REQ_PROVINCE   \"Istanbul\"\n    set_var EASYRSA_REQ_CITY       \"Istanbul\"\n    set_var EASYRSA_REQ_ORG        \"MyOrg\"\n    set_var EASYRSA_REQ_EMAIL      \"admin@myorg.com\"\n    set_var EASYRSA_REQ_OU         \"MyOrgVPN\"\n    set_var EASYRSA_ALGO           \"rsa\"\n    set_var EASYRSA_DIGEST         \"sha256\"<\/code><\/pre>\n
    Dosyay\u0131 kaydedip kapat\u0131n (Ctrl+X, Y, Enter).<\/p>\n
3.  PKI (Public Key Infrastructure) Ba\u015flatma:<\/strong>
\n    \u015eimdi PKI ortam\u0131n\u0131 ba\u015flat\u0131n:<\/p>\n
.\/easyrsa init-pki<\/code><\/pre>\n
4.  CA Olu\u015fturma:<\/strong>
\n    Kendi Sertifika Yetkilinizi olu\u015fturun. Bir parola belirlemeniz istenecektir. Bu parola, CA anahtar\u0131n\u0131z\u0131 korumak i\u00e7in kullan\u0131l\u0131r. Common Name i\u00e7in bir de\u011fer girmeniz istenecektir (\u00f6rn. MyOrg CA<\/code>).<\/p>\n
.\/easyrsa build-ca full<\/code><\/pre>\n
    Bu ad\u0131mda belirledi\u011finiz parolay\u0131 unutmay\u0131n!<\/p>\n
Sunucu Sertifikas\u0131 ve Anahtar\u0131 Olu\u015fturma<\/h4>\n
CA’y\u0131 olu\u015fturduktan sonra, OpenVPN sunucusu i\u00e7in bir sertifika ve \u00f6zel anahtar olu\u015fturmal\u0131y\u0131z.<\/p>\n
1.  Sunucu Anahtar\u0131n\u0131 Olu\u015fturma:<\/strong>
\n    Sunucu i\u00e7in bir sertifika iste\u011fi ve \u00f6zel anahtar olu\u015fturun. no-pass<\/code> se\u00e7ene\u011fi, sunucu anahtar\u0131 i\u00e7in parola istememesini sa\u011flar, bu da otomatik ba\u015flatma i\u00e7in \u00f6nemlidir.<\/p>\n
.\/easyrsa gen-req server no-pass<\/code><\/pre>\n
    Common Name i\u00e7in server<\/code> olarak b\u0131rak\u0131n veya farkl\u0131 bir isim girmeniz istenirse server<\/code> yaz\u0131n.<\/p>\n
2.  Sunucu Sertifikas\u0131n\u0131 \u0130mzalama:<\/strong>
\n    Olu\u015fturulan sunucu sertifika iste\u011fini CA ile imzalay\u0131n. CA parolan\u0131z\u0131 girmeniz istenecektir.<\/p>\n
.\/easyrsa sign-req server server<\/code><\/pre>\n
    Onaylamak i\u00e7in yes<\/code> yaz\u0131n.<\/p>\n
Diffie-Hellman Parametreleri Olu\u015fturma<\/h4>\n
Diffie-Hellman (DH) de\u011fi\u015fimi, OpenVPN’in anahtar de\u011fi\u015fimi i\u00e7in kulland\u0131\u011f\u0131 bir y\u00f6ntemdir. Bu i\u015flem biraz zaman alabilir (5-10 dakika veya daha fazla).<\/p>\n
.\/easyrsa gen-dh<\/code><\/pre>\n
TLS Auth Anahtar\u0131 Olu\u015fturma<\/h4>\n
tls-auth<\/code> anahtar\u0131, VPN ba\u011flant\u0131s\u0131na ek bir g\u00fcvenlik katman\u0131 ekler. Bu, DDoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar ve TLS el s\u0131k\u0131\u015fmas\u0131ndan \u00f6nce yetkisiz paketleri filtreler.<\/p>\n
openvpn --genkey --secret ta.key<\/code><\/pre>\n
Gerekli Dosyalar\u0131 OpenVPN Dizinine Kopyalama<\/h4>\n
Olu\u015fturdu\u011fumuz t\u00fcm sertifika ve anahtar dosyalar\u0131n\u0131 OpenVPN’in yap\u0131land\u0131rma dizinine kopyalamam\u0131z gerekiyor.<\/p>\n
sudo cp pki\/ca.crt \/etc\/openvpn\/\nsudo cp pki\/issued\/server.crt \/etc\/openvpn\/\nsudo cp pki\/private\/server.key \/etc\/openvpn\/\nsudo cp pki\/dh.pem \/etc\/openvpn\/\nsudo cp ta.key \/etc\/openvpn\/<\/code><\/pre>\n
OpenVPN Sunucu Yap\u0131land\u0131rma Dosyas\u0131 (server.conf) Olu\u015fturma<\/h4>\n
\u015eimdi OpenVPN sunucusu i\u00e7in ana yap\u0131land\u0131rma dosyas\u0131n\u0131 olu\u015ftural\u0131m.<\/p>\n
sudo nano \/etc\/openvpn\/server.conf<\/code><\/pre>\n
A\u015fa\u011f\u0131daki \u00f6rnek yap\u0131land\u0131rmay\u0131 kopyalay\u0131p yap\u0131\u015ft\u0131r\u0131n. Bu yap\u0131land\u0131rma, \u00e7o\u011fu senaryo i\u00e7in iyi bir ba\u015flang\u0131\u00e7 noktas\u0131d\u0131r.<\/p>\n
port 1194\nproto udp\ndev tun\n\nca ca.crt\ncert server.crt\nkey server.key\ndh dh.pem\ntls-auth ta.key 0 # This is the server side\n\nserver 10.8.0.0 255.255.255.0 # VPN'e ba\u011flanacak istemcilere atanacak IP aral\u0131\u011f\u0131\nifconfig-pool-persist ipp.txt\n\npush \"redirect-gateway def1 bypass-dhcp\" # T\u00fcm trafi\u011fi VPN \u00fczerinden y\u00f6nlendir\npush \"dhcp-option DNS 8.8.8.8\" # Google DNS\npush \"dhcp-option DNS 8.8.4.4\"\n\nclient-to-client # \u0130stemcilerin birbirleriyle ileti\u015fim kurmas\u0131na izin ver\nkeepalive 10 120\n\ncipher AES-256-GCM # G\u00fc\u00e7l\u00fc \u015fifreleme algoritmas\u0131\nauth SHA256 # Kimlik do\u011frulama algoritmas\u0131\ncomp-lzo no # S\u0131k\u0131\u015ft\u0131rma (modern CPU'larda genellikle kapal\u0131 tutulur)\n\nuser nobody\ngroup nogroup\n\npersist-key\npersist-tun\n\nstatus openvpn-status.log\nlog openvpn.log\nverb 3\nexplicit-exit-notify 1<\/code><\/pre>\n
Yap\u0131land\u0131rma A\u00e7\u0131klamalar\u0131:<\/strong><\/p>\n
*   port 1194<\/code>, proto udp<\/code>: OpenVPN’in 1194 UDP portunu kullanaca\u011f\u0131n\u0131 belirtir. UDP genellikle TCP’den daha h\u0131zl\u0131d\u0131r.
\n*   dev tun<\/code>: IP katman\u0131 (Layer 3) t\u00fcnelleme i\u00e7in bir y\u00f6nlendirme cihaz\u0131 olu\u015fturur.
\n*   ca<\/code>, cert<\/code>, key<\/code>, dh<\/code>, tls-auth<\/code>: Daha \u00f6nce olu\u015fturdu\u011fumuz sertifika ve anahtar dosyalar\u0131n\u0131 belirtir. tls-auth<\/code> i\u00e7in 0<\/code> sunucu taraf\u0131n\u0131 g\u00f6sterir.
\n*   server 10.8.0.0 255.255.255.0<\/code>: VPN a\u011f\u0131 i\u00e7in \u00f6zel bir IP adresi aral\u0131\u011f\u0131 tan\u0131mlar. \u0130stemcilere bu aral\u0131ktan IP’ler atanacakt\u0131r.
\n*   push \"redirect-gateway def1 bypass-dhcp\"<\/code>: \u0130stemcilere t\u00fcm trafi\u011fi VPN \u00fczerinden y\u00f6nlendirmelerini s\u00f6yler.
\n*   push \"dhcp-option DNS ...\"<\/code>: \u0130stemcilere kullan\u0131lacak DNS sunucular\u0131n\u0131 iletir.
\n*   client-to-client<\/code>: VPN’e ba\u011fl\u0131 istemcilerin birbirleriyle do\u011frudan ileti\u015fim kurmas\u0131na izin verir. Bu, VPS’ler aras\u0131nda do\u011frudan trafik y\u00f6nlendirmek i\u00e7in \u00f6nemlidir.
\n*   keepalive 10 120<\/code>: Ba\u011flant\u0131n\u0131n aktif olup olmad\u0131\u011f\u0131n\u0131 kontrol eder.
\n*   cipher AES-256-GCM<\/code>, auth SHA256<\/code>: G\u00fc\u00e7l\u00fc \u015fifreleme ve kimlik do\u011frulama algoritmalar\u0131.
\n*   user nobody<\/code>, group nogroup<\/code>: G\u00fcvenlik i\u00e7in OpenVPN’i ayr\u0131cal\u0131ks\u0131z bir kullan\u0131c\u0131 olarak \u00e7al\u0131\u015ft\u0131r\u0131r.
\n*   persist-key<\/code>, persist-tun<\/code>: Yeniden ba\u011flant\u0131 s\u0131ras\u0131nda anahtarlar\u0131n ve t\u00fcnel cihaz\u0131n\u0131n yeniden y\u00fcklenmesini \u00f6nler.
\n*   status<\/code>, log<\/code>, verb<\/code>: Durum ve log dosyalar\u0131n\u0131 belirtir, verb 3<\/code> detay seviyesini ayarlar.<\/p>\n
Dosyay\u0131 kaydedip kapat\u0131n.<\/p>\n
IP Y\u00f6nlendirmeyi Etkinle\u015ftirme<\/h4>\n
OpenVPN sunucusunun, istemcilerden gelen trafi\u011fi internete veya di\u011fer a\u011flara y\u00f6nlendirebilmesi i\u00e7in IP y\u00f6nlendirmeyi etkinle\u015ftirmemiz gerekir.<\/p>\n
sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n
Dosya i\u00e7inde a\u015fa\u011f\u0131daki sat\u0131r\u0131 bulun ve yorum i\u015faretini (#<\/code>) kald\u0131rarak etkinle\u015ftirin:<\/p>\n
net.ipv4.ip_forward=1<\/code><\/pre>\n
Dosyay\u0131 kaydedip kapat\u0131n. De\u011fi\u015fiklikleri uygulamak i\u00e7in:<\/p>\n
sudo sysctl -p<\/code><\/pre>\n
G\u00fcvenlik Duvar\u0131 (Firewall) Ayarlar\u0131<\/h4>\n
Sunucu VPS’nizde bir g\u00fcvenlik duvar\u0131 \u00e7al\u0131\u015f\u0131yorsa (ki \u00e7al\u0131\u015fmal\u0131d\u0131r), OpenVPN trafi\u011fine izin vermeniz ve NAT (Network Address Translation) kurallar\u0131n\u0131 ayarlaman\u0131z gerekir. Bu rehberde ufw<\/code> (Uncomplicated Firewall) kullanaca\u011f\u0131z.<\/p>\n
1.  UFW’yi Kurma ve Etkinle\u015ftirme (Gerekiyorsa):<\/strong><\/p>\n
sudo apt install ufw -y\n    sudo ufw enable\n    sudo ufw default deny incoming\n    sudo ufw default allow outgoing<\/code><\/pre>\n
2.  SSH ve OpenVPN Portlar\u0131n\u0131 A\u00e7ma:<\/strong><\/p>\n
sudo ufw allow ssh\n    sudo ufw allow 1194\/udp<\/code><\/pre>\n
3.  NAT Kurallar\u0131n\u0131 Ayarlama:<\/strong>
\n    UFW’nin NAT kurallar\u0131n\u0131 desteklemesi i\u00e7in \/etc\/default\/ufw<\/code> dosyas\u0131n\u0131 d\u00fczenlemeniz gerekebilir.<\/p>\n
sudo nano \/etc\/default\/ufw<\/code><\/pre>\n
    DEFAULT_FORWARD_POLICY<\/code> sat\u0131r\u0131n\u0131 bulun ve DROP<\/code> yerine ACCEPT<\/code> yap\u0131n:<\/p>\n
DEFAULT_FORWARD_POLICY=\"ACCEPT\"<\/code><\/pre>\n
    Kaydedip kapat\u0131n. \u015eimdi UFW’nin ana yap\u0131land\u0131rma dosyas\u0131n\u0131 d\u00fczenleyerek NAT kurallar\u0131n\u0131 ekleyelim. Bu, \/etc\/ufw\/before.rules<\/code> dosyas\u0131d\u0131r:<\/p>\n
sudo nano \/etc\/ufw\/before.rules<\/code><\/pre>\n
    Bu dosyan\u0131n en ba\u015f\u0131na, nat<\/code> ve -A POSTROUTING<\/code> sat\u0131rlar\u0131n\u0131, mevcut <\/em>filter<\/code> sat\u0131r\u0131ndan \u00f6nce ekleyin. eth0<\/code> yerine kendi ana a\u011f aray\u00fcz\u00fcn\u00fcz\u00fcn ad\u0131n\u0131 kullanman\u0131z gerekebilir (genellikle eth0<\/code> veya ens3<\/code>). Bunu ip a<\/code> komutuyla kontrol edebilirsiniz.<\/p>\n
# START OPENVPN RULES\n    # NAT table rules\n    *nat\n    :POSTROUTING ACCEPT [0:0]\n    # Allow traffic from OpenVPN client to eth0 (change to your main network interface)\n    -A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE\n    COMMIT\n    # END OPENVPN RULES\n\n    # ... (mevcut di\u011fer kurallar) ...\n\n    *filter\n    # ... (mevcut di\u011fer kurallar) ...<\/code><\/pre>\n
    Kaydedip kapat\u0131n. Son olarak, UFW’yi yeniden ba\u015flat\u0131n:<\/p>\n
sudo ufw disable\n    sudo ufw enable<\/code><\/pre>\n
OpenVPN Servisini Ba\u015flatma ve Etkinle\u015ftirme<\/h4>\n
Art\u0131k OpenVPN sunucusunu ba\u015flatabilir ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131n\u0131 sa\u011flayabiliriz.<\/p>\n
sudo systemctl start openvpn@server\nsudo systemctl enable openvpn@server<\/code><\/pre>\n
Servisin durumunu kontrol edin:<\/p>\n
sudo systemctl status openvpn@server<\/code><\/pre>\n
Durum active (running)<\/code> olarak g\u00f6r\u00fcnmelidir. Ayr\u0131ca, tun0<\/code> ad\u0131nda yeni bir a\u011f aray\u00fcz\u00fcn\u00fcn olu\u015ftu\u011funu ip a<\/code> komutuyla kontrol edebilirsiniz.<\/p>\n
\u0130stemci Yap\u0131land\u0131rmas\u0131 ve Sertifikalar\u0131<\/h3>\n
Her bir istemci VPS i\u00e7in ayr\u0131 bir sertifika ve anahtar olu\u015fturmam\u0131z gerekecek. Bu ad\u0131mlar\u0131 OpenVPN sunucusunu kurdu\u011fumuz VPS-1 \u00fczerinde ger\u00e7ekle\u015ftirece\u011fiz.<\/p>\n
\u0130stemci Sertifikas\u0131 ve Anahtar\u0131 Olu\u015fturma<\/h4>\n
easy-rsa<\/code> dizininde oldu\u011funuzdan emin olun (cd ~\/openvpn-ca<\/code>).<\/p>\n
1.  \u0130stemci Anahtar\u0131n\u0131 Olu\u015fturma:<\/strong>
\n    \u00d6rnek olarak client1<\/code> ad\u0131nda bir istemci olu\u015ftural\u0131m. Her yeni istemci i\u00e7in farkl\u0131 bir isim kullanmal\u0131s\u0131n\u0131z (\u00f6rn. client2<\/code>, client_webserver<\/code>).<\/p>\n
.\/easyrsa gen-req client1 no-pass<\/code><\/pre>\n
    Common Name i\u00e7in client1<\/code> olarak b\u0131rak\u0131n veya farkl\u0131 bir isim girmeniz istenirse client1<\/code> yaz\u0131n.<\/p>\n
2.  \u0130stemci Sertifikas\u0131n\u0131 \u0130mzalama:<\/strong>
\n    CA parolan\u0131z\u0131 girerek istemci sertifikas\u0131n\u0131 imzalay\u0131n.<\/p>\n
.\/easyrsa sign-req client client1<\/code><\/pre>\n
    Onaylamak i\u00e7in yes<\/code> yaz\u0131n.<\/p>\n
\u0130stemci Yap\u0131land\u0131rma Dosyas\u0131 (client.ovpn) Olu\u015fturma<\/h4>\n
\u015eimdi istemcinin OpenVPN sunucusuna ba\u011flanmak i\u00e7in kullanaca\u011f\u0131 yap\u0131land\u0131rma dosyas\u0131n\u0131 olu\u015fturaca\u011f\u0131z. Bu dosya, istemcinin sunucuya ba\u011flanmas\u0131 i\u00e7in gerekli t\u00fcm bilgileri ve sertifikalar\u0131 i\u00e7erecektir.<\/p>\n
mkdir -p ~\/client-configs\/files\nchmod 700 ~\/client-configs<\/code><\/pre>\n
A\u015fa\u011f\u0131daki komutlarla istemci yap\u0131land\u0131rma dosyas\u0131n\u0131 olu\u015fturun ve gerekli sertifikalar\u0131 i\u00e7ine g\u00f6m\u00fcn:<\/p>\n
cp \/etc\/openvpn\/ca.crt ~\/client-configs\/\ncp \/etc\/openvpn\/ta.key ~\/client-configs\/\ncp pki\/issued\/client1.crt ~\/client-configs\/\ncp pki\/private\/client1.key ~\/client-configs\/\n\ncd ~\/client-configs\nnano base.conf<\/code><\/pre>\n
base.conf<\/code> i\u00e7ine a\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n:<\/p>\n
client\ndev tun\nproto udp\nremote YOUR_SERVER_IP 1194 # BURAYI KEND\u0130 SUNUCUNUZUN GENEL IP ADRES\u0130 \u0130LE DE\u011e\u0130\u015eT\u0130R\u0130N\nresolv-retry infinite\nnobind\n\npersist-key\npersist-tun\n\nremote-cert-tls server\n\ncipher AES-256-GCM\nauth SHA256\ncomp-lzo no # Sunucu taraf\u0131nda comp-lzo no ise burada da no olmal\u0131\n\nverb 3\n\n\n<\/ca>\n\n<\/cert>\n\n<\/key>\n\n<\/tls-auth><\/code><\/pre>\n
\u00d6NEML\u0130:<\/strong> remote YOUR_SERVER_IP 1194<\/code> sat\u0131r\u0131ndaki YOUR_SERVER_IP<\/code> k\u0131sm\u0131n\u0131 OpenVPN sunucusunun (VPS-1) genel IP adresiyle de\u011fi\u015ftirmeyi unutmay\u0131n.<\/p>\n
\u015eimdi bu base.conf<\/code> dosyas\u0131n\u0131 kullanarak client1.ovpn<\/code> dosyas\u0131n\u0131 olu\u015ftural\u0131m ve sertifika\/anahtar i\u00e7eriklerini i\u00e7ine yerle\u015ftirelim:<\/p>\n
CLIENT_NAME=\"client1\"\ncat base.conf > \"$CLIENT_NAME.ovpn\"\necho \"\" >> \"$CLIENT_NAME.ovpn\"\ncat ca.crt >> \"$CLIENT_NAME.ovpn\"\necho \"<\/ca>\" >> \"$CLIENT_NAME.ovpn\"\necho \"\" >> \"$CLIENT_NAME.ovpn\"\ncat \"$CLIENT_NAME.crt\" >> \"$CLIENT_NAME.ovpn\"\necho \"<\/cert>\" >> \"$CLIENT_NAME.ovpn\"\necho \"\" >> \"$CLIENT_NAME.ovpn\"\ncat \"$CLIENT_NAME.key\" >> \"$CLIENT_NAME.ovpn\"\necho \"<\/key>\" >> \"$CLIENT_NAME.ovpn\"\necho \"\" >> \"$CLIENT_NAME.ovpn\"\ncat ta.key >> \"$CLIENT_NAME.ovpn\"\necho \"<\/tls-auth>\" >> \"$CLIENT_NAME.ovpn\"<\/code><\/pre>\n
Art\u0131k ~\/client-configs\/client1.ovpn<\/code> ad\u0131nda, t\u00fcm gerekli sertifika ve anahtarlar\u0131 i\u00e7eren tek bir yap\u0131land\u0131rma dosyan\u0131z var. Bu dosyay\u0131 istemci VPS’e aktaraca\u011f\u0131z.<\/p>\n
Gerekli Dosyalar\u0131 \u0130stemciye Kopyalama<\/h4>\n
client1.ovpn<\/code> dosyas\u0131n\u0131, OpenVPN istemcisi olarak kullanaca\u011f\u0131n\u0131z VPS’e (VPS-2) g\u00fcvenli bir \u015fekilde aktar\u0131n. Bunun i\u00e7in scp<\/code> kullanabilirsiniz:<\/p>\n
scp ~\/client-configs\/client1.ovpn user@YOUR_CLIENT_VPS_IP:\/home\/user\/<\/code><\/pre>\n
user<\/code> ve YOUR_CLIENT_VPS_IP<\/code> k\u0131s\u0131mlar\u0131n\u0131 kendi istemci VPS’nizin kullan\u0131c\u0131 ad\u0131 ve IP adresiyle de\u011fi\u015ftirin.<\/p>\n
\u0130stemci VPS \u00dczerinde OpenVPN Kurulumu ve Ba\u011flant\u0131<\/h3>\n
\u015eimdi OpenVPN istemcisi olarak kullanaca\u011f\u0131m\u0131z VPS’e (VPS-2) SSH ile ba\u011flan\u0131n ve gerekli kurulumlar\u0131 yap\u0131n.<\/p>\n
OpenVPN Kurulumu<\/h4>\n
\u0130stemci VPS’te OpenVPN paketini kurun:<\/p>\n
sudo apt update\nsudo apt install -y openvpn<\/code><\/pre>\n
Yap\u0131land\u0131rma Dosyas\u0131n\u0131 Yerle\u015ftirme<\/h4>\n
Daha \u00f6nce kopyalad\u0131\u011f\u0131n\u0131z client1.ovpn<\/code> dosyas\u0131n\u0131 OpenVPN yap\u0131land\u0131rma dizinine ta\u015f\u0131y\u0131n:<\/p>\n
sudo mv \/home\/user\/client1.ovpn \/etc\/openvpn\/<\/code><\/pre>\n
E\u011fer dosya ad\u0131n\u0131 \/etc\/openvpn\/client.conf<\/code> yaparsan\u0131z, systemctl<\/code> ile y\u00f6netimi daha kolay olur.<\/p>\n
sudo mv \/etc\/openvpn\/client1.ovpn \/etc\/openvpn\/client.conf<\/code><\/pre>\n
Ba\u011flant\u0131y\u0131 Ba\u015flatma<\/h4>\n
\u015eimdi OpenVPN istemcisini ba\u015flatabilir ve otomatik ba\u015flamas\u0131n\u0131 sa\u011flayabiliriz:<\/p>\n
sudo systemctl start openvpn@client\nsudo systemctl enable openvpn@client<\/code><\/pre>\n
Servisin durumunu kontrol edin:<\/p>\n
sudo systemctl status openvpn@client<\/code><\/pre>\n
Durum active (running)<\/code> olarak g\u00f6r\u00fcnmelidir.<\/p>\n
Ba\u011flant\u0131y\u0131 Do\u011frulama<\/h4>\n
Ba\u011flant\u0131n\u0131n ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in birka\u00e7 test yapabiliriz:<\/p>\n
1.  Tun Aray\u00fcz\u00fcn\u00fc Kontrol Etme:<\/strong>
\n    \u0130stemci VPS’te ip a<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n. tun0<\/code> veya benzeri bir aray\u00fcz g\u00f6rmelisiniz. Bu aray\u00fcze sunucu taraf\u0131ndan atanan bir IP adresi (\u00f6rn. 10.8.0.x) atanm\u0131\u015f olmal\u0131d\u0131r.<\/p>\n
ip a show tun0<\/code><\/pre>\n
2.  Ping Testi:<\/strong>
\n    \u0130stemci VPS’ten OpenVPN sunucusunun VPN IP adresine (genellikle 10.8.0.1) ping at\u0131n:<\/p>\n
ping 10.8.0.1<\/code><\/pre>\n
    E\u011fer ping ba\u015far\u0131l\u0131 olursa, VPN t\u00fcneli ba\u015far\u0131yla kurulmu\u015f demektir. Benzer \u015fekilde, OpenVPN sunucusundan istemcinin VPN IP adresine (\u00f6rn. 10.8.0.6) ping atarak ba\u011flant\u0131y\u0131 iki y\u00f6nl\u00fc do\u011frulayabilirsiniz.<\/p>\n
3.  \u0130nternet Eri\u015fimi Testi (\u0130stemci T\u00fcm Trafi\u011fi Y\u00f6nlendiriyorsa):<\/strong>
\n    E\u011fer redirect-gateway def1<\/code> ayar\u0131n\u0131 kulland\u0131ysan\u0131z, istemci VPS’nin genel IP adresinin de\u011fi\u015fip de\u011fi\u015fmedi\u011fini kontrol edebilirsiniz.<\/p>\n
curl ifconfig.me<\/code><\/pre>\n
    Bu komut, OpenVPN sunucusunun genel IP adresini d\u00f6nd\u00fcrmelidir. Bu, t\u00fcm trafi\u011fin VPN \u00fczerinden y\u00f6nlendirildi\u011fini g\u00f6sterir.<\/p>\n
Art\u0131k VPS-1 (OpenVPN sunucusu) ve VPS-2 (OpenVPN istemcisi) aras\u0131nda \u015fifreli ve g\u00fcvenli bir ileti\u015fim t\u00fcneli kurulmu\u015ftur. Di\u011fer istemci VPS’ler i\u00e7in de client2<\/code>, client3<\/code> gibi farkl\u0131 isimlerle ayn\u0131 ad\u0131mlar\u0131 tekrarlayarak sertifikalar olu\u015fturup, yap\u0131land\u0131rma dosyalar\u0131n\u0131 aktararak VPN a\u011f\u0131na dahil edebilirsiniz.<\/p>\n
Ek G\u00fcvenlik \u00d6nlemleri ve \u0130yile\u015ftirmeler<\/h3>\n
Temel kurulumu tamamlad\u0131ktan sonra, OpenVPN a\u011f\u0131n\u0131z\u0131n g\u00fcvenli\u011fini daha da art\u0131rmak i\u00e7in ek \u00f6nlemler alabilirsiniz.<\/p>\n
TLS-Auth Kullan\u0131m\u0131<\/h4>\n
Bu rehberde zaten dahil edilmi\u015f olsa da, tls-auth<\/code> direktifinin \u00f6nemi vurgulanmal\u0131d\u0131r. Bu \u00f6zellik, DDoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar ve TLS el s\u0131k\u0131\u015fmas\u0131ndan \u00f6nce yetkisiz paketleri reddederek \u00f6n kimlik do\u011frulama katman\u0131 sunar. Bu, VPN sunucunuzun kaynaklar\u0131n\u0131 gereksiz yere kullanmas\u0131n\u0131 engeller.<\/p>\n
Sertifika \u0130ptal Listesi (CRL) Y\u00f6netimi<\/h4>\n
Bir istemci anahtar\u0131n\u0131n veya sertifikas\u0131n\u0131n \u00e7al\u0131nmas\u0131 veya kaybolmas\u0131 durumunda, bu sertifikay\u0131 iptal etmek \u00f6nemlidir. Sertifika \u0130ptal Listesi (CRL), CA taraf\u0131ndan iptal edilen sertifikalar\u0131n listesini tutar.<\/p>\n
1.  Sertifika \u0130ptali:<\/strong>
\n    OpenVPN sunucusunda ~\/openvpn-ca<\/code> dizininde:<\/p>\n
.\/easyrsa revoke client1<\/code><\/pre>\n
    Onaylamak i\u00e7in yes<\/code> yaz\u0131n.<\/p>\n
2.  CRL Olu\u015fturma:<\/strong><\/p>\n
.\/easyrsa gen-crl<\/code><\/pre>\n
3.  CRL Dosyas\u0131n\u0131 OpenVPN Dizinine Kopyalama:<\/strong><\/p>\n
sudo cp pki\/crl.pem \/etc\/openvpn\/<\/code><\/pre>\n
4.  Sunucu Yap\u0131land\u0131rmas\u0131na CRL Ekleme:<\/strong>
\n    \/etc\/openvpn\/server.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyin ve a\u015fa\u011f\u0131daki sat\u0131r\u0131 ekleyin:<\/p>\n
crl-verify crl.pem<\/code><\/pre>\n
    OpenVPN servisini yeniden ba\u015flat\u0131n: sudo systemctl restart openvpn@server<\/code>. Art\u0131k iptal edilen sertifikalar VPN a\u011f\u0131na ba\u011flanamayacakt\u0131r. Her yeni iptalden sonra CRL dosyas\u0131n\u0131 g\u00fcncellemeyi ve sunucuya kopyalamay\u0131 unutmay\u0131n.<\/p>\n
G\u00fc\u00e7l\u00fc \u015eifreleme Algoritmalar\u0131<\/h4>\n
OpenVPN yap\u0131land\u0131rman\u0131zda her zaman g\u00fcncel ve g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131 kullan\u0131n. Bu rehberde cipher AES-256-GCM<\/code> ve auth SHA256<\/code> kullan\u0131lm\u0131\u015ft\u0131r, bunlar \u015fu an i\u00e7in iyi se\u00e7eneklerdir. Gelecekteki g\u00fcvenlik geli\u015fmelerini takip ederek bu algoritmalar\u0131 g\u00fcncel tutman\u0131z \u00f6nemlidir.<\/p>\n
Log Y\u00f6netimi<\/h4>\n
OpenVPN sunucu ve istemci loglar\u0131n\u0131 d\u00fczenli olarak kontrol edin. Anormal ba\u011flant\u0131 denemeleri, kimlik do\u011frulama hatalar\u0131 veya di\u011fer \u015f\u00fcpheli etkinlikler i\u00e7in loglar\u0131 izlemek, olas\u0131 g\u00fcvenlik ihlallerini erken tespit etmenizi sa\u011flar.<\/p>\n
*   Sunucu loglar\u0131: \/etc\/openvpn\/openvpn.log<\/code> veya journalctl -u openvpn@server<\/code>
\n*   \u0130stemci loglar\u0131: journalctl -u openvpn@client<\/code><\/p>\n
Privilege Separation (Ayr\u0131cal\u0131k Ayr\u0131m\u0131)<\/h4>\n
OpenVPN’i nobody<\/code> ve nogroup<\/code> gibi ayr\u0131cal\u0131ks\u0131z bir kullan\u0131c\u0131 olarak \u00e7al\u0131\u015ft\u0131rmak, bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 durumunda potansiyel zarar\u0131 s\u0131n\u0131rlar. Bu rehberdeki server.conf<\/code> dosyas\u0131nda user nobody<\/code> ve group nogroup<\/code> sat\u0131rlar\u0131 zaten bulunmaktad\u0131r.<\/p>\n
Port De\u011fi\u015fikli\u011fi<\/h4>\n
Varsay\u0131lan OpenVPN portu olan 1194’\u00fc kullanmak yerine, farkl\u0131 bir UDP portu (\u00f6rn. 443 veya y\u00fcksek numaral\u0131 bir port) kullanmak, otomatik port taramalar\u0131n\u0131 azaltabilir. Bu “g\u00fcvenlik by obscurity” olarak adland\u0131r\u0131lsa da, basit sald\u0131r\u0131lar\u0131 engelleyebilir. Portu de\u011fi\u015ftirirseniz, hem server.conf<\/code> hem de client.ovpn<\/code> dosyalar\u0131ndaki port<\/code> ve remote<\/code> sat\u0131rlar\u0131n\u0131 g\u00fcncellemeniz ve g\u00fcvenlik duvar\u0131n\u0131zda yeni portu a\u00e7man\u0131z gerekir.<\/p>\n
Client-to-Client \u0130leti\u015fimi<\/h4>\n
E\u011fer istemcilerinizin birbirleriyle do\u011frudan ileti\u015fim kurmas\u0131n\u0131 istiyorsan\u0131z (\u00f6rn. bir uygulama sunucusunun bir veritaban\u0131 sunucusuna eri\u015fmesi), server.conf<\/code> dosyas\u0131nda client-to-client<\/code> direktifini etkinle\u015ftirin. Bu rehberdeki \u00f6rnek yap\u0131land\u0131rma bunu zaten i\u00e7ermektedir.<\/p>\n
Statik IP Atama ve \u0130stemciye \u00d6zel Y\u00f6nlendirme<\/h4>\n
Belirli istemcilere her zaman ayn\u0131 VPN IP adresini atamak veya onlara \u00f6zel y\u00f6nlendirme kurallar\u0131 sa\u011flamak isteyebilirsiniz. Bunun i\u00e7in server.conf<\/code> dosyas\u0131nda client-config-dir ccd<\/code> direktifini etkinle\u015ftirin ve \/etc\/openvpn\/ccd<\/code> dizini olu\u015fturun. Bu dizinde, her istemcinin Common Name’i ile ayn\u0131 isimde bir dosya olu\u015fturun (\u00f6rn. client1<\/code>).<\/p>\n
sudo mkdir -p \/etc\/openvpn\/ccd\nsudo nano \/etc\/openvpn\/ccd\/client1<\/code><\/pre>\n
Bu dosyan\u0131n i\u00e7ine, client1<\/code>‘e atanacak VPN IP adresini belirtmek i\u00e7in:<\/p>\n
ifconfig-push 10.8.0.10 255.255.255.0<\/code><\/pre>\n
Veya belirli bir a\u011fa y\u00f6nlendirme yapmak i\u00e7in:<\/p>\n
iroute 192.168.1.0 255.255.255.0<\/code><\/pre>\n
server.conf<\/code> dosyas\u0131nda client-config-dir ccd<\/code> sat\u0131r\u0131n\u0131 yorumdan \u00e7\u0131kar\u0131n veya ekleyin ve OpenVPN servisini yeniden ba\u015flat\u0131n.<\/p>\n
Sorun Giderme<\/h3>\n
Kurulum s\u0131ras\u0131nda veya sonras\u0131nda sorunlarla kar\u015f\u0131la\u015fman\u0131z durumunda, a\u015fa\u011f\u0131daki yayg\u0131n sorun giderme ad\u0131mlar\u0131n\u0131 deneyebilirsiniz.<\/p>\n
Ba\u011flant\u0131 Kurulam\u0131yor<\/h4>\n
*   G\u00fcvenlik Duvar\u0131 Kontrol\u00fc:<\/strong> Sunucu VPS’nizin g\u00fcvenlik duvar\u0131nda OpenVPN portunun (varsay\u0131lan 1194\/UDP) a\u00e7\u0131k oldu\u011fundan emin olun. Ayr\u0131ca, NAT kurallar\u0131n\u0131n do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131n\u0131 kontrol edin.
\n    *   sudo ufw status verbose<\/code>
\n    *   sudo iptables -L -v<\/code>
\n*   Sunucu Loglar\u0131:<\/strong> OpenVPN sunucusunun loglar\u0131n\u0131 kontrol edin. Hata mesajlar\u0131 veya ba\u011flant\u0131 denemeleri hakk\u0131nda bilgi bulabilirsiniz.
\n    *   sudo journalctl -u openvpn@server -f<\/code>
\n    *   sudo tail -f \/etc\/openvpn\/openvpn.log<\/code>
\n*   \u0130stemci Loglar\u0131:<\/strong> \u0130stemci taraf\u0131ndaki loglar\u0131 kontrol edin.
\n    *   sudo journalctl -u openvpn@client -f<\/code>
\n*   Sertifika ve Anahtar Hatalar\u0131:<\/strong> VERIFY ERROR<\/code> gibi mesajlar g\u00f6r\u00fcyorsan\u0131z, sertifikalar\u0131n do\u011fru olu\u015fturuldu\u011fundan ve istemciye do\u011fru \u015fekilde kopyaland\u0131\u011f\u0131ndan emin olun. Dosya izinlerini kontrol edin.
\n*   IP Y\u00f6nlendirme:<\/strong> Sunucu VPS’de IP y\u00f6nlendirmenin etkin oldu\u011fundan emin olun (net.ipv4.ip_forward=1<\/code> ve sudo sysctl -p<\/code>).
\n*   A\u011f Aray\u00fcz\u00fc:<\/strong> Sunucuda tun0<\/code> aray\u00fcz\u00fcn\u00fcn olu\u015ftu\u011fundan ve bir IP adresi ald\u0131\u011f\u0131ndan emin olun (ip a<\/code>).
\n*   Sunucu IP Adresi:<\/strong> \u0130stemci yap\u0131land\u0131rma dosyas\u0131ndaki (client.ovpn<\/code>) remote YOUR_SERVER_IP 1194<\/code> sat\u0131r\u0131ndaki IP adresinin do\u011fru oldu\u011fundan emin olun.<\/p>\n
\u0130nternet Eri\u015fimi Yok (\u0130stemci Taraf\u0131nda)<\/h4>\n
E\u011fer istemci VPN’e ba\u011flan\u0131yor ancak internete eri\u015femiyorsa:<\/p>\n
*   NAT Kural\u0131:<\/strong> Sunucu VPS’nizdeki g\u00fcvenlik duvar\u0131nda (\u00f6rn. ufw<\/code> veya iptables<\/code>) NAT kural\u0131n\u0131n do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan ve ana a\u011f aray\u00fcz\u00fcn\u00fcz\u00fcn ad\u0131n\u0131n do\u011fru oldu\u011fundan emin olun (-A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE<\/code>).
\n*   DNS Ayarlar\u0131:<\/strong> \u0130stemci yap\u0131land\u0131rmas\u0131ndaki push \"dhcp-option DNS ...\"<\/code> sat\u0131r\u0131n\u0131n do\u011fru DNS sunucular\u0131n\u0131 i\u00e7erdi\u011finden emin olun.
\n*   redirect-gateway<\/code> Direktifi:<\/strong> \u0130stemci yap\u0131land\u0131rmas\u0131nda redirect-gateway def1<\/code> sat\u0131r\u0131n\u0131n oldu\u011fundan emin olun. Bu, t\u00fcm trafi\u011fi VPN \u00fczerinden y\u00f6nlendirir.
\n*   IP Y\u00f6nlendirme:<\/strong> Sunucuda IP y\u00f6nlendirmenin etkin oldu\u011fundan emin olun.<\/p>\n
Performans Sorunlar\u0131<\/h4>\n
*   S\u0131k\u0131\u015ft\u0131rma (comp-lzo<\/code>):<\/strong> Modern CPU’larda comp-lzo<\/code> s\u0131k\u0131\u015ft\u0131rmas\u0131 genellikle performans\u0131 d\u00fc\u015f\u00fcr\u00fcr. comp-lzo no<\/code> olarak ayarland\u0131\u011f\u0131ndan emin olun (hem sunucuda hem de istemcide).
\n*   Protokol (proto<\/code>):<\/strong> UDP genellikle TCP’den daha h\u0131zl\u0131d\u0131r. E\u011fer TCP kullan\u0131yorsan\u0131z ve performans sorunlar\u0131 ya\u015f\u0131yorsan\u0131z UDP’ye ge\u00e7meyi deneyin.
\n*   Sunucu Kaynaklar\u0131:<\/strong> Sunucu VPS’nizin CPU, bellek ve a\u011f bant geni\u015fli\u011fi gibi kaynaklar\u0131n\u0131n yeterli oldu\u011fundan emin olun.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu kapsaml\u0131 rehberde, OpenVPN kullanarak VPS’ler aras\u0131nda g\u00fcvenli ve \u015fifreli bir ileti\u015fim t\u00fcneli olu\u015fturman\u0131n t\u00fcm ad\u0131mlar\u0131n\u0131 detayl\u0131 bir \u015fekilde ele ald\u0131k. OpenVPN sunucusunu kurmaktan, sertifika yetkilisi olu\u015fturmaya, istemci yap\u0131land\u0131rmalar\u0131n\u0131 haz\u0131rlamaya ve ba\u011flant\u0131lar\u0131 test etmeye kadar her a\u015fama, VPS trafi\u011finizi g\u00fcvence alt\u0131na almak i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n
Kurulumun ard\u0131ndan, t\u00fcm VPS’leriniz art\u0131k halka a\u00e7\u0131k internetin risklerinden izole edilmi\u015f, \u00f6zel bir sanal a\u011f \u00fczerinden g\u00fcvenli bir \u015fekilde ileti\u015fim kurabilir. Bu, hassas verilerinizi koruman\u0131n, y\u00f6netimsel eri\u015fimi g\u00fcvence alt\u0131na alman\u0131n ve da\u011f\u0131t\u0131k uygulama mimarileriniz i\u00e7in sa\u011flam bir temel olu\u015fturman\u0131n en etkili yollar\u0131ndan biridir.<\/p>\n
Unutulmamal\u0131d\u0131r ki siber g\u00fcvenlik, s\u00fcrekli bir s\u00fcre\u00e7tir. OpenVPN kurulumunuzu d\u00fczenli olarak izlemek, loglar\u0131 kontrol etmek, sertifikalar\u0131 y\u00f6netmek (\u00f6zellikle iptal listesi) ve g\u00fcvenlik \u00f6nlemlerini g\u00fcncel tutmak, VPN a\u011f\u0131n\u0131z\u0131n uzun vadeli g\u00fcvenli\u011fini sa\u011flamak i\u00e7in hayati \u00f6neme sahiptir. Bu rehber, size bu yolculukta sa\u011flam bir ba\u015flang\u0131\u00e7 noktas\u0131 sunarken, kendi \u00f6zel ihtiya\u00e7lar\u0131n\u0131za g\u00f6re daha fazla \u00f6zelle\u015ftirme ve iyile\u015ftirme yapma esnekli\u011fini de sa\u011flamaktad\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"VPS’ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi\nVPS (Sanal \u00d6zel Sunucu) kullan\u0131m\u0131, g\u00fcn\u00fcm\u00fcz\u00fcn dijital altyap\u0131s\u0131nd","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-35404","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nVPS'ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"VPS'ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi\" \/>\n<meta property=\"og:description\" content=\"VPS'ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi VPS (Sanal \u00d6zel Sunucu) kullan\u0131m\u0131, g\u00fcn\u00fcm\u00fcz\u00fcn dijital altyap\u0131s\u0131nd\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-29T05:40:55+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"22 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"VPS’ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi\",\"datePublished\":\"2025-11-29T05:40:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/\"},\"wordCount\":3593,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/\",\"name\":\"VPS'ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-29T05:40:55+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"VPS’ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"VPS'ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"VPS'ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi","og_description":"VPS'ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi VPS (Sanal \u00d6zel Sunucu) kullan\u0131m\u0131, g\u00fcn\u00fcm\u00fcz\u00fcn dijital altyap\u0131s\u0131nd","og_url":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-29T05:40:55+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"22 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"VPS’ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi","datePublished":"2025-11-29T05:40:55+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/"},"wordCount":3593,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/","name":"VPS'ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-29T05:40:55+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/vpsler-arasinda-openvpn-kullanarak-trafigi-guvenli-hale-getirme-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"VPS’ler Aras\u0131nda OpenVPN Kullanarak Trafi\u011fi G\u00fcvenli Hale Getirme Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=35404"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35404\/revisions"}],"predecessor-version":[{"id":35405,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35404\/revisions\/35405"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=35404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=35404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=35404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}