{"id":35423,"date":"2025-11-29T13:41:09","date_gmt":"2025-11-29T10:41:09","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=35423"},"modified":"2025-11-29T13:41:09","modified_gmt":"2025-11-29T10:41:09","slug":"wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/","title":{"rendered":"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu"},"content":{"rendered":"

<\/p>\n

WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu<\/h2>\n

Bu rehber, Ubuntu 16.04 i\u015fletim sistemi \u00fczerinde WireGuard VPN protokol\u00fcn\u00fc kullanarak iki nokta aras\u0131nda g\u00fcvenli bir ba\u011flant\u0131 (Point-To-Point VPN) nas\u0131l kurulaca\u011f\u0131n\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klamaktad\u0131r. WireGuard, modern kriptografi teknikleri kullanan, h\u0131zl\u0131, basit ve g\u00fcvenli bir VPN \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Ubuntu 16.04 eski bir s\u00fcr\u00fcm olmas\u0131na ra\u011fmen, bu rehber WireGuard’\u0131 bu platformda \u00e7al\u0131\u015f\u0131r hale getirmek i\u00e7in gerekli ad\u0131mlar\u0131 i\u00e7ermektedir.<\/p>\n

1. WireGuard ve Noktadan-Noktaya VPN Nedir?<\/h3>\n

WireGuard, Linux \u00e7ekirde\u011fine entegre edilmi\u015f yeni nesil bir VPN t\u00fcnelidir. OpenVPN veya IPsec gibi eski \u00e7\u00f6z\u00fcmlere k\u0131yasla daha az kod sat\u0131r\u0131na sahip olmas\u0131, denetimini kolayla\u015ft\u0131r\u0131r ve potansiyel g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 azalt\u0131r. Y\u00fcksek performans\u0131, d\u00fc\u015f\u00fck gecikme s\u00fcresi ve modern kriptografi kullan\u0131m\u0131yla \u00f6ne \u00e7\u0131kar.<\/p>\n

Noktadan-Noktaya (Point-To-Point – P2P) VPN, ad\u0131ndan da anla\u015f\u0131laca\u011f\u0131 gibi, iki belirli cihaz veya a\u011f aras\u0131nda do\u011frudan ve \u015fifreli bir ba\u011flant\u0131 kurar. Bu t\u00fcr bir VPN, genellikle bir sunucu ile bir istemci aras\u0131nda veya iki uzak ofis a\u011f\u0131 aras\u0131nda g\u00fcvenli ileti\u015fim sa\u011flamak i\u00e7in kullan\u0131l\u0131r. Bu rehberde, bir “sunucu” g\u00f6revi g\u00f6recek olan Ubuntu 16.04 makinesi ile bir “istemci” g\u00f6revi g\u00f6recek olan ba\u015fka bir Ubuntu 16.04 makinesi aras\u0131nda P2P VPN kuraca\u011f\u0131z.<\/p>\n

Neden WireGuard ve Ubuntu 16.04?<\/h4>\n

* Basitlik ve H\u0131z:<\/strong> WireGuard’\u0131n yap\u0131land\u0131rmas\u0131 basittir ve \u00e7ok daha h\u0131zl\u0131 ba\u011flant\u0131 s\u00fcreleri sunar.
\n* G\u00fcvenlik:<\/strong> Modern ve g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131 kullan\u0131r.
\n* Ubuntu 16.04 Deste\u011fi:<\/strong> WireGuard \u00e7ekirde\u011fe daha sonra entegre edilmi\u015f olsa da, 16.04 i\u00e7in PPA (Personal Package Archive) \u00fczerinden kurulum m\u00fcmk\u00fcnd\u00fcr.<\/p>\n

2. WireGuard Kurulumu (Ubuntu 16.04)<\/h3>\n

Ubuntu 16.04, WireGuard’\u0131 do\u011frudan \u00e7ekirdek i\u00e7inde bar\u0131nd\u0131rmad\u0131\u011f\u0131 i\u00e7in, onu bir PPA’dan y\u00fcklememiz gerekecektir. Bu, WireGuard’\u0131 bir DKMS (Dynamic Kernel Module Support) mod\u00fcl\u00fc olarak kuracakt\u0131r.<\/p>\n

Her iki Ubuntu 16.04 makinesinde de (sunucu ve istemci) a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 uygulay\u0131n:<\/strong><\/p>\n

1. Sistem G\u00fcncellemesi:<\/strong>
\n \u00d6ncelikle, sisteminizin g\u00fcncel oldu\u011fundan emin olun ve gerekli kernel ba\u015fl\u0131klar\u0131n\u0131 y\u00fckleyin. DKMS mod\u00fcl\u00fc derlemek i\u00e7in bu ba\u015fl\u0131klar gereklidir.<\/p>\n

sudo apt update\n    sudo apt upgrade -y\n    sudo apt install -y linux-headers-$(uname -r)<\/code><\/pre>\n
2.  WireGuard PPA Ekleme:<\/strong>
\n    WireGuard’\u0131 kurmak i\u00e7in resmi PPA’y\u0131 ekleyin.<\/p>\n
sudo add-apt-repository ppa:wireguard\/wireguard -y\n    sudo apt update<\/code><\/pre>\n
3.  WireGuard Kurulumu:<\/strong>
\n    \u015eimdi WireGuard paketlerini y\u00fckleyin. Bu, wireguard-dkms<\/code> ve wireguard-tools<\/code> paketlerini kuracakt\u0131r.<\/p>\n
sudo apt install -y wireguard<\/code><\/pre>\n
    Kurulum s\u0131ras\u0131nda DKMS mod\u00fcl\u00fcn\u00fcn derlenmesi biraz zaman alabilir. Herhangi bir hata al\u0131rsan\u0131z, linux-headers<\/code> paketinin do\u011fru y\u00fcklendi\u011finden emin olun.<\/p>\n
3. Anahtar \u00c7iftleri Olu\u015fturma<\/h3>\n
WireGuard, kimlik do\u011frulama i\u00e7in genel (public) ve \u00f6zel (private) anahtar \u00e7iftleri kullan\u0131r. Her iki taraf\u0131n da kendi anahtar \u00e7iftine sahip olmas\u0131 ve di\u011fer taraf\u0131n genel anahtar\u0131n\u0131 bilmesi gerekir.<\/p>\n
Her iki makinede de (sunucu ve istemci) ayr\u0131 ayr\u0131 a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 uygulay\u0131n:<\/strong><\/p>\n
1.  Anahtar \u00c7ifti Olu\u015fturma:<\/strong>
\n    Bu komut, hem \u00f6zel anahtar\u0131 (privatekey<\/code>) hem de genel anahtar\u0131 (publickey<\/code>) olu\u015fturur ve ilgili dosyalara kaydeder.<\/p>\n
umask 077\n    wg genkey | tee privatekey | wg pubkey > publickey<\/code><\/pre>\n
    *   umask 077<\/code> komutu, olu\u015fturulan dosyalar\u0131n yaln\u0131zca mevcut kullan\u0131c\u0131 taraf\u0131ndan okunabilir olmas\u0131n\u0131 sa\u011flayarak g\u00fcvenli\u011fi art\u0131r\u0131r.
\n    *   privatekey<\/code> dosyas\u0131n\u0131 asla kimseyle payla\u015fmay\u0131n!
\n    *   publickey<\/code> dosyas\u0131n\u0131 di\u011fer tarafla payla\u015fman\u0131z gerekecektir.<\/p>\n
2.  Anahtarlar\u0131 G\u00f6r\u00fcnt\u00fcleme:<\/strong>
\n    Anahtarlar\u0131n\u0131z\u0131 konsolda g\u00f6r\u00fcnt\u00fclemek i\u00e7in:<\/p>\n
cat privatekey\n    cat publickey<\/code><\/pre>\n
    Bu anahtarlar\u0131 not edin. Sunucunun genel anahtar\u0131n\u0131 istemciye, istemcinin genel anahtar\u0131n\u0131 sunucuya kopyalaman\u0131z gerekecek.<\/p>\n
4. WireGuard Yap\u0131land\u0131rmas\u0131<\/h3>\n
\u015eimdi iki makine i\u00e7in WireGuard yap\u0131land\u0131rma dosyalar\u0131n\u0131 olu\u015ftural\u0131m. VPN i\u00e7in 10.0.0.0\/24 IP aral\u0131\u011f\u0131n\u0131 kullanaca\u011f\u0131z.<\/p>\n
*   Sunucu IP:<\/strong> 10.0.0.1\/24
\n*   \u0130stemci IP:<\/strong> 10.0.0.2\/24
\n*   VPN Portu:<\/strong> 51820 (UDP)<\/p>\n
4.1. WireGuard Sunucu Yap\u0131land\u0131rmas\u0131<\/h4>\n
Sunucu makinenizde \/etc\/wireguard\/wg0.conf<\/code> dosyas\u0131n\u0131 olu\u015fturun ve d\u00fczenleyin:<\/p>\n
sudo nano \/etc\/wireguard\/wg0.conf<\/code><\/pre>\n
Dosyan\u0131n i\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
[Interface]\nPrivateKey = # SUNUCUNUN KEND\u0130 \u00d6ZEL ANAHTARI BURAYA GELECEK #\nAddress = 10.0.0.1\/24\nListenPort = 51820\nPostUp = sysctl -w net.ipv4.ip_forward=1 && iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE\nPostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE\n\n[Peer]\nPublicKey = # \u0130STEMC\u0130N\u0130N GENEL ANAHTARI BURAYA GELECEK #\nAllowedIPs = 10.0.0.2\/32<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong><\/p>\n
*   PrivateKey<\/code><\/strong>: Sunucunun kendi \u00f6zel anahtar\u0131n\u0131 buraya yap\u0131\u015ft\u0131r\u0131n (cat privatekey<\/code> komutuyla ald\u0131\u011f\u0131n\u0131z).
\n*   Address<\/code><\/strong>: Sunucunun VPN t\u00fcneli i\u00e7indeki IP adresi.
\n*   ListenPort<\/code><\/strong>: WireGuard’\u0131n gelen ba\u011flant\u0131lar\u0131 dinleyece\u011fi UDP portu. G\u00fcvenlik duvar\u0131n\u0131zda bu portu a\u00e7man\u0131z gerekecek.
\n*   PostUp<\/code> \/ PostDown<\/code><\/strong>: Bu komutlar, VPN aray\u00fcz\u00fc ba\u015flat\u0131ld\u0131\u011f\u0131nda ve durduruldu\u011funda \u00e7al\u0131\u015ft\u0131r\u0131l\u0131r.
\n    *   net.ipv4.ip_forward=1<\/code>: IP y\u00f6nlendirmeyi etkinle\u015ftirir. Bu, istemcinin sunucu \u00fczerinden ba\u015fka a\u011flara (\u00f6rne\u011fin internete veya sunucunun yerel a\u011f\u0131na) eri\u015fmesini sa\u011flar. Saf P2P ba\u011flant\u0131s\u0131 i\u00e7in bu \u015fart de\u011fildir ancak genellikle istenir.
\n    *   iptables<\/code> kurallar\u0131: NAT (Network Address Translation) ve paket iletimi i\u00e7in gereklidir. Bu \u00f6rnekte eth0<\/code> varsay\u0131lan d\u0131\u015f aray\u00fczd\u00fcr; sizin sisteminizde farkl\u0131 olabilir (\u00f6rne\u011fin enp0s3<\/code>). Kendi d\u0131\u015f a\u011f aray\u00fcz\u00fcn\u00fcz\u00fc (ip a<\/code> komutuyla kontrol edebilirsiniz) kullanmal\u0131s\u0131n\u0131z.
\n*   [Peer]<\/code><\/strong>: Bu b\u00f6l\u00fcm, ba\u011flanacak istemciyi tan\u0131mlar.
\n    *   PublicKey<\/code><\/strong>: \u0130stemcinin genel anahtar\u0131n\u0131 buraya yap\u0131\u015ft\u0131r\u0131n.
\n    *   AllowedIPs<\/code><\/strong>: \u0130stemcinin VPN t\u00fcneli \u00fczerinden eri\u015fmesine izin verilen IP adresleri. Burada sadece istemcinin VPN IP’sini (10.0.0.2\/32<\/code>) belirtiyoruz.<\/p>\n
G\u00fcvenlik Duvar\u0131 (UFW) Ayarlar\u0131 (Sunucu):<\/strong>
\nSunucu makinenizde UFW (Uncomplicated Firewall) kullan\u0131yorsan\u0131z, WireGuard portunu a\u00e7man\u0131z gerekir:<\/p>\n
sudo ufw allow 51820\/udp\nsudo ufw enable # E\u011fer aktif de\u011filse\nsudo ufw status<\/code><\/pre>\n
4.2. WireGuard \u0130stemci Yap\u0131land\u0131rmas\u0131<\/h4>\n
\u0130stemci makinenizde \/etc\/wireguard\/wg0.conf<\/code> dosyas\u0131n\u0131 olu\u015fturun ve d\u00fczenleyin:<\/p>\n
sudo nano \/etc\/wireguard\/wg0.conf<\/code><\/pre>\n
Dosyan\u0131n i\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r:<\/p>\n
[Interface]\nPrivateKey = # \u0130STEMC\u0130N\u0130N KEND\u0130 \u00d6ZEL ANAHTARI BURAYA GELECEK #\nAddress = 10.0.0.2\/24\n\n[Peer]\nPublicKey = # SUNUCUNUN GENEL ANAHTARI BURAYA GELECEK #\nEndpoint = SUNUCU_GENEL_IP_ADRES\u0130:51820\nAllowedIPs = 10.0.0.0\/24\nPersistentKeepalive = 25<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong><\/p>\n
*   PrivateKey<\/code><\/strong>: \u0130stemcinin kendi \u00f6zel anahtar\u0131n\u0131 buraya yap\u0131\u015ft\u0131r\u0131n.
\n*   Address<\/code><\/strong>: \u0130stemcinin VPN t\u00fcneli i\u00e7indeki IP adresi.
\n*   [Peer]<\/code><\/strong>: Bu b\u00f6l\u00fcm, ba\u011flan\u0131lacak sunucuyu tan\u0131mlar.
\n    *   PublicKey<\/code><\/strong>: Sunucunun genel anahtar\u0131n\u0131 buraya yap\u0131\u015ft\u0131r\u0131n.
\n    *   Endpoint<\/code><\/strong>: Sunucunun genel IP adresi ve WireGuard portu. E\u011fer sunucu bir NAT arkas\u0131ndaysa (\u00f6rne\u011fin ev router’\u0131), router’\u0131n\u0131zda 51820 UDP portunu sunucu makinenizin yerel IP’sine y\u00f6nlendirmeniz (port forwarding) gerekmektedir.
\n    *   AllowedIPs<\/code><\/strong>: \u0130stemcinin bu VPN t\u00fcneli \u00fczerinden eri\u015febilece\u011fi IP adresleri. 10.0.0.0\/24<\/code> ile t\u00fcm VPN a\u011f\u0131na eri\u015fim izni veriyoruz. E\u011fer istemcinin t\u00fcm internet trafi\u011fini sunucu \u00fczerinden ge\u00e7irmesini istiyorsan\u0131z, bunu 0.0.0.0\/0<\/code> olarak de\u011fi\u015ftirmelisiniz (ancak sunucunun PostUp<\/code>\/PostDown<\/code> kurallar\u0131n\u0131n d\u00fczg\u00fcn yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olun).
\n    *   PersistentKeepalive<\/code><\/strong>: Bu ayar, her 25 saniyede bir bo\u015f bir paket g\u00f6ndererek NAT ba\u011flant\u0131lar\u0131n\u0131n a\u00e7\u0131k kalmas\u0131n\u0131 sa\u011flar. \u0130stemci bir NAT arkas\u0131ndaysa ve sunucuya ba\u011flant\u0131y\u0131 s\u00fcrd\u00fcrmekte zorlan\u0131yorsa kullan\u0131\u015fl\u0131d\u0131r.<\/p>\n
5. VPN’i Etkinle\u015ftirme ve Test Etme<\/h3>\n
Her iki makinede de WireGuard yap\u0131land\u0131rmas\u0131n\u0131 tamamlad\u0131ktan sonra, VPN t\u00fcnelini etkinle\u015ftirebilir ve ba\u011flant\u0131y\u0131 test edebilirsiniz.<\/p>\n
1.  WireGuard Aray\u00fcz\u00fcn\u00fc Ba\u015flatma:<\/strong>
\n    Her iki makinede de a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131rarak VPN aray\u00fcz\u00fcn\u00fc ba\u015flat\u0131n:<\/p>\n
sudo wg-quick up wg0<\/code><\/pre>\n
    Herhangi bir hata olup olmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/p>\n
2.  Otomatik Ba\u015flang\u0131c\u0131 Etkinle\u015ftirme:<\/strong>
\n    Sistem yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda WireGuard’\u0131n otomatik olarak ba\u015flamas\u0131 i\u00e7in:<\/p>\n
sudo systemctl enable wg-quick@wg0<\/code><\/pre>\n
    \u015eimdi de servisi ba\u015flat\u0131n:<\/p>\n
sudo systemctl start wg-quick@wg0<\/code><\/pre>\n
3.  Ba\u011flant\u0131 Durumunu Kontrol Etme:<\/strong>
\n    Her iki makinede de VPN t\u00fcnelinin durumunu kontrol etmek i\u00e7in:<\/p>\n
sudo wg show<\/code><\/pre>\n
    Bu komut, aktif aray\u00fczleri, genel\/\u00f6zel anahtarlar\u0131 ve e\u015f (peer) bilgilerini g\u00f6sterecektir. latest handshake<\/code> alan\u0131, en son ba\u015far\u0131l\u0131 ba\u011flant\u0131 s\u00fcresini g\u00f6sterir.<\/p>\n
4.  Ba\u011flant\u0131y\u0131 Test Etme:<\/strong>
\n    *   \u0130stemciden Sunucuya:<\/strong>
\n        \u0130stemci makinesinden sunucunun VPN IP adresine ping at\u0131n:<\/p>\n
ping 10.0.0.1<\/code><\/pre>\n
        Ba\u015far\u0131l\u0131 olursa, ba\u011flant\u0131 kurulmu\u015ftur.<\/p>\n
    *   Sunucudan \u0130stemciye:<\/strong>
\n        Sunucu makinesinden istemcinin VPN IP adresine ping at\u0131n:<\/p>\n
ping 10.0.0.2<\/code><\/pre>\n
        Bu da ba\u015far\u0131l\u0131 olursa, iki y\u00f6nl\u00fc P2P VPN ba\u011flant\u0131n\u0131z tamamen \u00e7al\u0131\u015f\u0131r durumdad\u0131r.<\/p>\n
5.  VPN T\u00fcnelini Durdurma:<\/strong>
\n    VPN t\u00fcnelini durdurmak i\u00e7in:<\/p>\n
sudo wg-quick down wg0<\/code><\/pre>\n
6. Sonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n
Tebrikler! Ubuntu 16.04 \u00fczerinde WireGuard kullanarak noktadan-noktaya VPN ba\u011flant\u0131s\u0131n\u0131 ba\u015far\u0131yla kurdunuz. Art\u0131k iki makine aras\u0131nda g\u00fcvenli ve \u015fifreli bir ileti\u015fim kanal\u0131na sahipsiniz. Bu ba\u011flant\u0131, hassas verileri g\u00fcvenli bir \u015fekilde aktarmak veya uzak kaynaklara eri\u015fmek i\u00e7in kullan\u0131labilir.<\/p>\n
S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h4>\n
S1: VPN \u00e7al\u0131\u015fm\u0131yor, ne yapmal\u0131y\u0131m?<\/strong>
\n*   Anahtarlar\u0131 Kontrol Edin:<\/strong> Genel ve \u00f6zel anahtarlar\u0131n do\u011fru yerlerde oldu\u011fundan emin olun. \u00d6zellikle PublicKey<\/code> de\u011ferlerinin do\u011fru e\u015fle\u015fti\u011fini kontrol edin.
\n*   IP Adreslerini Kontrol Edin:<\/strong> Address<\/code> ve AllowedIPs<\/code> ayarlar\u0131n\u0131n do\u011fru oldu\u011fundan emin olun.
\n*   G\u00fcvenlik Duvar\u0131n\u0131 Kontrol Edin:<\/strong> Sunucuda WireGuard portunun (varsay\u0131lan 51820\/UDP) a\u00e7\u0131k oldu\u011fundan emin olun (sudo ufw status<\/code>). E\u011fer sunucu bir NAT arkas\u0131ndaysa, router’da port y\u00f6nlendirme yap\u0131ld\u0131\u011f\u0131ndan emin olun.
\n*   PostUp\/PostDown Komutlar\u0131n\u0131 Kontrol Edin:<\/strong> Sunucudaki iptables<\/code> kurallar\u0131n\u0131n do\u011fru aray\u00fcz ismini kulland\u0131\u011f\u0131ndan ve IP y\u00f6nlendirmesinin (net.ipv4.ip_forward=1<\/code>) etkin oldu\u011fundan emin olun.
\n*   Loglar\u0131 Kontrol Edin:<\/strong> sudo journalctl -u wg-quick@wg0<\/code> komutuyla WireGuard servisinin loglar\u0131n\u0131 inceleyin.
\n*   Kernel Mod\u00fcl\u00fcn\u00fc Kontrol Edin:<\/strong> lsmod | grep wireguard<\/code> komutuyla WireGuard \u00e7ekirdek mod\u00fcl\u00fcn\u00fcn y\u00fckl\u00fc olup olmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/p>\n
S2: Ba\u011flant\u0131 neden yava\u015f veya kesiliyor?<\/strong>
\n*   A\u011f H\u0131z\u0131:<\/strong> Altta yatan internet ba\u011flant\u0131n\u0131z\u0131n h\u0131z\u0131 VPN performans\u0131n\u0131 do\u011frudan etkiler.
\n*   CPU Kullan\u0131m\u0131:<\/strong> Eski veya zay\u0131f CPU’lar \u015fifreleme\/\u015fifre \u00e7\u00f6zme i\u015flemlerinde darbo\u011faz yaratabilir.
\n*   Gecikme:<\/strong> Co\u011frafi mesafe veya a\u011f yo\u011funlu\u011fu gecikmeyi art\u0131rabilir.
\n*   PersistentKeepalive:<\/strong> \u0130stemci taraf\u0131nda PersistentKeepalive = 25<\/code> ayar\u0131n\u0131 kullanmak, NAT arkas\u0131ndaki ba\u011flant\u0131lar\u0131n s\u00fcrekli a\u00e7\u0131k kalmas\u0131na yard\u0131mc\u0131 olabilir.<\/p>\n
S3: Bu VPN’e ba\u015fka cihazlar ekleyebilir miyim?<\/strong>
\nEvet, WireGuard’\u0131n g\u00fczelli\u011fi de budur. Yeni bir istemci eklemek i\u00e7in:
\n1.  Yeni istemci i\u00e7in bir anahtar \u00e7ifti olu\u015fturun.
\n2.  Sunucunun wg0.conf<\/code> dosyas\u0131na yeni bir [Peer]<\/code> b\u00f6l\u00fcm\u00fc ekleyerek yeni istemcinin PublicKey<\/code>‘ini ve AllowedIPs<\/code>‘ini (\u00f6rne\u011fin 10.0.0.3\/32) tan\u0131mlay\u0131n.
\n3.  Yeni istemcinin wg0.conf<\/code> dosyas\u0131n\u0131 kendi \u00f6zel anahtar\u0131, sunucunun genel anahtar\u0131 ve sunucunun Endpoint<\/code>‘i ile yap\u0131land\u0131r\u0131n.
\n4.  Sunucu ve yeni istemcide WireGuard’\u0131 yeniden ba\u015flat\u0131n (sudo wg-quick down wg0 && sudo wg-quick up wg0<\/code>).<\/p>\n
S4: Ubuntu 16.04 yerine daha yeni bir s\u00fcr\u00fcm kullanman\u0131n avantaj\u0131 var m\u0131?<\/strong>
\nKesinlikle. Ubuntu 18.04 ve \u00fczeri s\u00fcr\u00fcmler (\u00f6zellikle 20.04 ve sonras\u0131) WireGuard’\u0131 do\u011frudan \u00e7ekirdekte bar\u0131nd\u0131r\u0131r, bu da kurulumu daha basit hale getirir ve DKMS mod\u00fcl\u00fcne ba\u011f\u0131ml\u0131l\u0131\u011f\u0131 ortadan kald\u0131r\u0131r. Performans ve kararl\u0131l\u0131k a\u00e7\u0131s\u0131ndan da genellikle daha yeni \u00e7ekirdek s\u00fcr\u00fcmleri tercih edilir. Bu rehber, \u00f6zellikle 16.04 kullanma zorunlulu\u011fu olan durumlar i\u00e7in haz\u0131rlanm\u0131\u015ft\u0131r.<\/p>\n
S5: AllowedIPs = 0.0.0.0\/0<\/code> ne anlama geliyor?<\/strong>
\nAllowedIPs = 0.0.0.0\/0<\/code> ayar\u0131, istemcinin t\u00fcm a\u011f trafi\u011fini (internete giden dahil) VPN t\u00fcneli \u00fczerinden ge\u00e7irmesi anlam\u0131na gelir. Buna “full t\u00fcnel” denir. Bu durumda, sunucunun PostUp<\/code>\/PostDown<\/code> kurallar\u0131n\u0131n internete \u00e7\u0131k\u0131\u015f\u0131 do\u011fru bir \u015fekilde y\u00f6nlendirdi\u011finden emin olmal\u0131s\u0131n\u0131z. E\u011fer sadece VPN i\u00e7indeki kaynaklara eri\u015fim sa\u011flanacaksa (split t\u00fcnel), 10.0.0.0\/24<\/code> gibi daha spesifik bir aral\u0131k kullanmak daha iyidir.<\/p>\n
<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu\nBu rehber, Ubuntu 16.04 i\u015fletim sistemi \u00fczerinde WireGuard VP","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-35423","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nWireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu\" \/>\n<meta property=\"og:description\" content=\"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu Bu rehber, Ubuntu 16.04 i\u015fletim sistemi \u00fczerinde WireGuard VP\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-29T10:41:09+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu\",\"datePublished\":\"2025-11-29T10:41:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/\"},\"wordCount\":1732,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/\",\"name\":\"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-29T10:41:09+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/","og_locale":"tr_TR","og_type":"article","og_title":"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu","og_description":"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu Bu rehber, Ubuntu 16.04 i\u015fletim sistemi \u00fczerinde WireGuard VP","og_url":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-29T10:41:09+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"10 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu","datePublished":"2025-11-29T10:41:09+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/"},"wordCount":1732,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/","url":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/","name":"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-29T10:41:09+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/wireguard-ile-ubuntu-16-04-uzerinde-noktadan-noktaya-point-to-point-vpn-kurulumu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"WireGuard ile Ubuntu 16.04 \u00dczerinde Noktadan-Noktaya (Point-To-Point) VPN Kurulumu"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=35423"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35423\/revisions"}],"predecessor-version":[{"id":35424,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35423\/revisions\/35424"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=35423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=35423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=35423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}