{"id":37447,"date":"2026-01-05T10:40:45","date_gmt":"2026-01-05T07:40:45","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=37447"},"modified":"2026-01-05T10:40:45","modified_gmt":"2026-01-05T07:40:45","slug":"ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","title":{"rendered":"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"<p><body><\/p>\n<h2>Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h2>\n<h3>Giri\u015f<\/h3>\n<p>G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, internet ba\u011flant\u0131lar\u0131n\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik hale gelmi\u015ftir. Sanal \u00d6zel A\u011flar (VPN&#8217;ler), kullan\u0131c\u0131lar\u0131n internet trafi\u011fini \u015fifreleyerek ve IP adreslerini maskeleyerek \u00e7evrimi\u00e7i gizliliklerini ve g\u00fcvenliklerini sa\u011flaman\u0131n etkili bir yoludur. Bir\u00e7ok VPN \u00e7\u00f6z\u00fcm\u00fc aras\u0131nda, OpenVPN, a\u00e7\u0131k kaynak kodlu yap\u0131s\u0131, esnekli\u011fi ve g\u00fc\u00e7l\u00fc g\u00fcvenlik \u00f6zellikleriyle \u00f6ne \u00e7\u0131kmaktad\u0131r. Bu makale, Ubuntu 22.04 LTS i\u015fletim sistemi \u00fczerinde kendi OpenVPN sunucunuzu ad\u0131m ad\u0131m nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ve yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 detayl\u0131 bir \u015fekilde a\u00e7\u0131klayacakt\u0131r. Kendi VPN sunucunuzu kurmak, verileriniz \u00fczerinde tam kontrol sahibi olman\u0131z\u0131 sa\u011flar ve \u00fc\u00e7\u00fcnc\u00fc taraf VPN sa\u011flay\u0131c\u0131lar\u0131na duyulan g\u00fcven ihtiyac\u0131n\u0131 ortadan kald\u0131r\u0131r.<\/p>\n<p>Ubuntu 22.04, kararl\u0131l\u0131\u011f\u0131 ve geni\u015f topluluk deste\u011fi sayesinde sunucu ortamlar\u0131 i\u00e7in pop\u00fcler bir se\u00e7imdir. Bu rehberde, OpenVPN sunucusunu kurmak i\u00e7in gerekli t\u00fcm bile\u015fenleri (sertifika yetkilisi, sunucu ve istemci sertifikalar\u0131, anahtarlar) olu\u015fturacak, sunucu yap\u0131land\u0131rmas\u0131n\u0131 yapacak ve g\u00fcvenlik duvar\u0131 ayarlar\u0131n\u0131 d\u00fczenleyerek g\u00fcvenli bir ba\u011flant\u0131 kuraca\u011f\u0131z.<\/p>\n<h3>\u00d6n Gereksinimler<\/h3>\n<p>Kuruluma ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6n gereksinimlerin kar\u015f\u0131land\u0131\u011f\u0131ndan emin olun:<\/p>\n<p>*   <strong>Ubuntu 22.04 LTS Sunucusu:<\/strong> Temiz bir Ubuntu 22.04 kurulumuna sahip, internete ba\u011fl\u0131 bir sunucuya (fiziksel veya sanal \u00f6zel sunucu &#8211; VPS) ihtiyac\u0131n\u0131z var.<br \/>\n*   <strong>K\u00f6k veya Sudo Ayr\u0131cal\u0131klar\u0131:<\/strong> Kurulum ve yap\u0131land\u0131rma i\u015flemleri i\u00e7in k\u00f6k (root) kullan\u0131c\u0131 veya sudo ayr\u0131cal\u0131klar\u0131na sahip bir kullan\u0131c\u0131 hesab\u0131n\u0131z olmal\u0131d\u0131r.<br \/>\n*   <strong>Temel Linux Bilgisi:<\/strong> Komut sat\u0131r\u0131 (terminal) kullan\u0131m\u0131 hakk\u0131nda temel bilgiye sahip olman\u0131z gerekmektedir.<br \/>\n*   <strong>Genel IP Adresi:<\/strong> Sunucunuzun internet \u00fczerinden eri\u015filebilir bir genel IP adresine sahip olmas\u0131 \u015fartt\u0131r.<br \/>\n*   <strong>Alan Ad\u0131 (Opsiyonel ama \u00d6nerilir):<\/strong> Sunucu IP adresi yerine bir alan ad\u0131 kullanmak, IP adresi de\u011fi\u015fti\u011finde istemci yap\u0131land\u0131rmalar\u0131n\u0131 g\u00fcncelleme ihtiyac\u0131n\u0131 ortadan kald\u0131r\u0131r.<\/p>\n<h3>1. Sunucuyu G\u00fcncelleme<\/h3>\n<p>Herhangi bir yaz\u0131l\u0131m kurulumuna ba\u015flamadan \u00f6nce, sisteminizin g\u00fcncel oldu\u011fundan emin olmak iyi bir uygulamad\u0131r. Bu, potansiyel g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapat\u0131r ve en son paketlere eri\u015fmenizi sa\u011flar.<\/p>\n<pre><code class=\"language-bash\">sudo apt update\nsudo apt upgrade -y<\/code><\/pre>\n<p>Bu komutlar, paket listesini g\u00fcnceller ve mevcut t\u00fcm paketleri en son s\u00fcr\u00fcmlerine y\u00fckseltir.<\/p>\n<h3>2. OpenVPN ve Easy-RSA Kurulumu<\/h3>\n<p>OpenVPN sunucusunu ve sertifika yetkilisi (CA) olu\u015fturmak i\u00e7in gerekli olan Easy-RSA arac\u0131n\u0131 kurmam\u0131z gerekiyor. Easy-RSA, OpenVPN i\u00e7in PKI (Public Key Infrastructure) y\u00f6netimi i\u00e7in bir dizi betik sa\u011flar.<\/p>\n<pre><code class=\"language-bash\">sudo apt install openvpn easy-rsa -y<\/code><\/pre>\n<p>Bu komut, OpenVPN sunucu yaz\u0131l\u0131m\u0131n\u0131 ve Easy-RSA paketini sisteminize kuracakt\u0131r.<\/p>\n<h3>3. Sertifika Yetkilisi (CA) Olu\u015fturma<\/h3>\n<p>OpenVPN, ba\u011flant\u0131lar\u0131 \u015fifrelemek ve kimlik do\u011frulamas\u0131 yapmak i\u00e7in SSL\/TLS sertifikalar\u0131 kullan\u0131r. Bu sertifikalar\u0131 imzalamak i\u00e7in kendi Sertifika Yetkilimizi (CA) olu\u015fturmam\u0131z gerekir.<\/p>\n<h4>Easy-RSA Dizinini Kopyalama<\/h4>\n<p>Easy-RSA betikleri genellikle <code>\/usr\/share\/easy-rsa\/<\/code> dizininde bulunur. Bu dizini kendi \u00e7al\u0131\u015fma dizinimize kopyalamak, orijinal betiklere zarar vermeden i\u015flem yapmam\u0131z\u0131 sa\u011flar. G\u00fcvenlik ve d\u00fczen a\u00e7\u0131s\u0131ndan, bu dizini <code>\/etc\/openvpn\/easy-rsa<\/code> alt\u0131na kopyalamak iyi bir yakla\u015f\u0131md\u0131r.<\/p>\n<pre><code class=\"language-bash\">sudo cp -r \/usr\/share\/easy-rsa\/ \/etc\/openvpn\/\nsudo chown -R $USER:$USER \/etc\/openvpn\/easy-rsa\nsudo chmod -R 700 \/etc\/openvpn\/easy-rsa<\/code><\/pre>\n<p>\u015eimdi Easy-RSA \u00e7al\u0131\u015fma dizinine ge\u00e7i\u015f yapal\u0131m:<\/p>\n<pre><code class=\"language-bash\">cd \/etc\/openvpn\/easy-rsa<\/code><\/pre>\n<h4>PKI Ortam\u0131n\u0131 Ba\u015flatma<\/h4>\n<p>Yeni bir PKI (Public Key Infrastructure) ortam\u0131 olu\u015fturmak i\u00e7in <code>init-pki<\/code> komutunu kullan\u0131r\u0131z:<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa init-pki<\/code><\/pre>\n<p>Bu komut, sertifikalar\u0131, anahtarlar\u0131 ve di\u011fer PKI bile\u015fenlerini depolamak i\u00e7in gerekli dizin yap\u0131s\u0131n\u0131 olu\u015fturacakt\u0131r.<\/p>\n<h4>Sertifika Yetkilisi (CA) Olu\u015fturma<\/h4>\n<p>\u015eimdi kendi CA&#8217;m\u0131z\u0131 olu\u015fturabiliriz. Bu CA, hem sunucu hem de istemci sertifikalar\u0131n\u0131 imzalayacakt\u0131r.<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa build-ca nopass<\/code><\/pre>\n<p><code>nopass<\/code> se\u00e7ene\u011fi, CA anahtar\u0131 i\u00e7in bir parola belirlemenizi istemez. \u00dcretim ortamlar\u0131nda daha fazla g\u00fcvenlik i\u00e7in bir parola kullanman\u0131z \u00f6nerilir, ancak bu, her yeniden ba\u015flatmada parolay\u0131 girmenizi gerektirecektir. Komut sizden CA i\u00e7in bir Ortak Ad (Common Name) girmenizi isteyecektir (\u00f6rne\u011fin, &#8220;OpenVPN CA&#8221;). Varsay\u0131lan de\u011feri b\u0131rakabilir veya kendi ad\u0131n\u0131z\u0131 girebilirsiniz.<\/p>\n<h3>4. Sunucu Sertifikas\u0131 ve Anahtar\u0131 Olu\u015fturma<\/h3>\n<p>OpenVPN sunucusunun istemciler taraf\u0131ndan kimli\u011finin do\u011frulanabilmesi i\u00e7in bir sunucu sertifikas\u0131na ve \u00f6zel anahtar\u0131na ihtiyac\u0131 vard\u0131r.<\/p>\n<h4>Sunucu Anahtar\u0131 \u0130ste\u011fi Olu\u015fturma<\/h4>\n<p>Sunucu i\u00e7in bir anahtar iste\u011fi ve \u00f6zel anahtar olu\u015fturulur:<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa gen-req server nopass<\/code><\/pre>\n<p>Burada da <code>nopass<\/code> kullan\u0131lm\u0131\u015ft\u0131r. Komut sizden sunucu i\u00e7in bir Ortak Ad (Common Name) girmenizi isteyecektir (\u00f6rne\u011fin, &#8220;server&#8221;).<\/p>\n<h4>Sunucu Anahtar\u0131n\u0131 \u0130mzalama<\/h4>\n<p>Olu\u015fturulan anahtar iste\u011fini, az \u00f6nce olu\u015fturdu\u011fumuz CA ile imzalamam\u0131z gerekir. Bu, CA&#8217;n\u0131n bu sunucunun g\u00fcvenilir oldu\u011funu onaylad\u0131\u011f\u0131 anlam\u0131na gelir.<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa sign-req server server<\/code><\/pre>\n<p>Komut, imzalamak istedi\u011finizden emin olup olmad\u0131\u011f\u0131n\u0131z\u0131 soracakt\u0131r; <code>yes<\/code> yaz\u0131p onaylay\u0131n.<\/p>\n<h3>5. Diffie-Hellman Anahtar\u0131 Olu\u015fturma<\/h3>\n<p>Diffie-Hellman (DH) anahtar\u0131, OpenVPN&#8217;in istemcilerle g\u00fcvenli anahtar de\u011fi\u015fimi yapmas\u0131n\u0131 sa\u011flar. Bu i\u015flem biraz zaman alabilir (CPU g\u00fcc\u00fcne ba\u011fl\u0131 olarak birka\u00e7 dakika ile yar\u0131m saat aras\u0131nda).<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa gen-dh<\/code><\/pre>\n<p>Bu komut, <code>pki\/dh.pem<\/code> dosyas\u0131n\u0131 olu\u015fturacakt\u0131r.<\/p>\n<h3>6. CRL (Sertifika \u0130ptal Listesi) Olu\u015fturma<\/h3>\n<p>Sertifika \u0130ptal Listesi (CRL), g\u00fcvenli\u011fi ihlal edilmi\u015f veya art\u0131k kullan\u0131lmamas\u0131 gereken istemci sertifikalar\u0131n\u0131 iptal etmek i\u00e7in kullan\u0131l\u0131r.<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa gen-crl<\/code><\/pre>\n<p>Bu komut, <code>pki\/crl.pem<\/code> dosyas\u0131n\u0131 olu\u015fturacakt\u0131r. Bu dosyay\u0131 d\u00fczenli olarak g\u00fcncelleyip sunucuya kopyalaman\u0131z gerekecektir.<\/p>\n<h3>7. TLS Kimlik Do\u011frulama Anahtar\u0131 Olu\u015fturma<\/h3>\n<p>OpenVPN, TLS kimlik do\u011frulama anahtar\u0131 (ta.key) kullanarak ba\u011flant\u0131lar\u0131n g\u00fcvenli\u011fini daha da art\u0131rabilir. Bu anahtar, man-in-the-middle sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar ve TLS el s\u0131k\u0131\u015fmas\u0131n\u0131 g\u00fc\u00e7lendirir.<\/p>\n<pre><code class=\"language-bash\">openvpn --genkey --secret ta.key<\/code><\/pre>\n<p>Bu komut, <code>ta.key<\/code> dosyas\u0131n\u0131 Easy-RSA \u00e7al\u0131\u015fma dizininde olu\u015fturacakt\u0131r.<\/p>\n<h3>8. Gerekli Dosyalar\u0131 OpenVPN Dizinine Ta\u015f\u0131ma<\/h3>\n<p>\u015eimdi olu\u015fturdu\u011fumuz t\u00fcm sertifika ve anahtar dosyalar\u0131n\u0131 OpenVPN sunucusunun okuyabilece\u011fi <code>\/etc\/openvpn\/<\/code> dizinine ta\u015f\u0131mam\u0131z gerekiyor.<\/p>\n<pre><code class=\"language-bash\">sudo cp pki\/ca.crt \/etc\/openvpn\/\nsudo cp pki\/issued\/server.crt \/etc\/openvpn\/\nsudo cp pki\/private\/server.key \/etc\/openvpn\/\nsudo cp pki\/dh.pem \/etc\/openvpn\/\nsudo cp pki\/crl.pem \/etc\/openvpn\/\nsudo cp ta.key \/etc\/openvpn\/<\/code><\/pre>\n<p>Bu komutlar, CA sertifikas\u0131n\u0131, sunucu sertifikas\u0131n\u0131, sunucu \u00f6zel anahtar\u0131n\u0131, Diffie-Hellman anahtar\u0131n\u0131, CRL dosyas\u0131n\u0131 ve TLS kimlik do\u011frulama anahtar\u0131n\u0131 <code>\/etc\/openvpn\/<\/code> dizinine kopyalar.<\/p>\n<h3>9. OpenVPN Sunucu Yap\u0131land\u0131rma Dosyas\u0131 Olu\u015fturma<\/h3>\n<p>OpenVPN sunucusunu yap\u0131land\u0131rmak i\u00e7in <code>\/etc\/openvpn\/server.conf<\/code> dosyas\u0131n\u0131 olu\u015fturmam\u0131z ve d\u00fczenlememiz gerekiyor.<\/p>\n<pre><code class=\"language-bash\">sudo nano \/etc\/openvpn\/server.conf<\/code><\/pre>\n<p>A\u015fa\u011f\u0131daki yap\u0131land\u0131rma \u00f6rne\u011fini kopyalay\u0131p yap\u0131\u015ft\u0131r\u0131n ve a\u00e7\u0131klamalara g\u00f6re d\u00fczenlemeler yap\u0131n:<\/p>\n<pre><code class=\"language-\"># Sunucu portu ve protokol\u00fc\nport 1194\nproto udp\n\n<h2>Cihaz tipi (tun layer 3 IP t\u00fcneli i\u00e7in, tap layer 2 Ethernet t\u00fcneli i\u00e7in)<\/h2>\ndev tun\n\n<h2>CA sertifikas\u0131, sunucu sertifikas\u0131 ve anahtar\u0131<\/h2>\nca ca.crt\ncert server.crt\nkey server.key\n\n<h2>Diffie-Hellman parametreleri<\/h2>\ndh dh.pem\n\n<h2>VPN istemcilerine atanacak IP adresi aral\u0131\u011f\u0131<\/h2>\nserver 10.8.0.0 255.255.255.0\n\n<h2>\u0130stemci IP adresi atamalar\u0131n\u0131 kal\u0131c\u0131 hale getirir<\/h2>\nifconfig-pool-persist ipp.txt\n\n<h2>\u0130stemcilerin t\u00fcm trafi\u011fini VPN \u00fczerinden y\u00f6nlendirir (varsay\u0131lan a\u011f ge\u00e7idi olarak VPN'i kullan\u0131r)<\/h2>\npush \"redirect-gateway def1 bypass-dhcp\"\n\n<h2>\u0130stemcilere DNS sunucular\u0131 atar (\u00f6rnek: Google DNS)<\/h2>\npush \"dhcp-option DNS 8.8.8.8\"\npush \"dhcp-option DNS 8.8.4.4\"\n\n<h2>Ba\u011flant\u0131 canl\u0131 tutma (ping aral\u0131\u011f\u0131 10 saniye, timeout 120 saniye)<\/h2>\nkeepalive 10 120\n\n<h2>TLS kimlik do\u011frulama anahtar\u0131 ve y\u00f6n\u00fc (sunucu i\u00e7in 0)<\/h2>\ntls-auth ta.key 0\n\n<h2>Sertifika iptal listesi<\/h2>\ncrl-verify crl.pem\n\n<h2>\u015eifreleme algoritmas\u0131 (AES-256-CBC veya AES-256-GCM \u00f6nerilir)<\/h2>\ncipher AES-256-CBC\n\n<h2>Kimlik do\u011frulama algoritmas\u0131<\/h2>\nauth SHA256\n\n<h2>Sunucu ve istemci aras\u0131nda s\u0131k\u0131\u015ft\u0131rmay\u0131 etkinle\u015ftirir (uyumlu olmas\u0131 i\u00e7in client.ovpn'de de olmal\u0131)<\/h2>\n<h2>Bu sat\u0131r, OpenVPN 2.4 ve sonras\u0131 i\u00e7in \u00f6nerilir. E\u011fer istemcilerde sorun olursa kald\u0131r\u0131labilir.<\/h2>\n<h2>compress lz4-v2<\/h2>\n<h2>push \"compress lz4-v2\"<\/h2>\n\n<h2>Kullan\u0131c\u0131 ve grup ayr\u0131cal\u0131klar\u0131n\u0131 d\u00fc\u015f\u00fcr\u00fcr (g\u00fcvenlik i\u00e7in)<\/h2>\nuser nobody\ngroup nogroup\n\n<h2>Anahtar ve t\u00fcnel persistans\u0131, yeniden ba\u011flant\u0131da anahtarlar\u0131\/t\u00fcneli yeniden a\u00e7may\u0131 engeller<\/h2>\npersist-key\npersist-tun\n\n<h2>Durum ve g\u00fcnl\u00fck dosyalar\u0131<\/h2>\nstatus openvpn-status.log\nlog openvpn.log\nverb 3 # G\u00fcnl\u00fck ayr\u0131nt\u0131 seviyesi (0-9)\n\n<h2>A\u00e7\u0131k\u00e7a istemcilere \u00e7\u0131k\u0131\u015f bildirimi g\u00f6nderir<\/h2>\nexplicit-exit-notify 1<\/code><\/pre>\n<p>Bu yap\u0131land\u0131rma, UDP protokol\u00fcn\u00fc kullanarak 1194 portundan dinleyen, 10.8.0.0\/24 IP aral\u0131\u011f\u0131na sahip bir VPN a\u011f\u0131 olu\u015fturur. <code>redirect-gateway<\/code> ile t\u00fcm istemci trafi\u011fi VPN \u00fczerinden y\u00f6nlendirilir ve Google DNS sunucular\u0131 kullan\u0131l\u0131r. G\u00fcvenlik i\u00e7in <code>tls-auth<\/code> ve <code>crl-verify<\/code> etkinle\u015ftirilmi\u015ftir.<\/p>\n<p>Kaydedip \u00e7\u0131kmak i\u00e7in <code>Ctrl+O<\/code>, <code>Enter<\/code> ve <code>Ctrl+X<\/code> tu\u015flar\u0131na bas\u0131n.<\/p>\n<h3>10. IP Y\u00f6nlendirmeyi Etkinle\u015ftirme<\/h3>\n<p>OpenVPN sunucusunun istemcilerden gelen trafi\u011fi internete y\u00f6nlendirebilmesi i\u00e7in IP y\u00f6nlendirmeyi (IP forwarding) etkinle\u015ftirmemiz gerekir.<\/p>\n<pre><code class=\"language-bash\">sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n<p>Dosya i\u00e7inde <code>#net.ipv4.ip_forward=1<\/code> sat\u0131r\u0131n\u0131 bulun ve ba\u015f\u0131ndaki <code>#<\/code> i\u015faretini kald\u0131rarak veya yoksa dosyan\u0131n sonuna ekleyerek etkinle\u015ftirin:<\/p>\n<pre><code class=\"language-\">net.ipv4.ip_forward=1<\/code><\/pre>\n<p>De\u011fi\u015fiklikleri kaydettikten sonra, yeni ayarlar\u0131 uygulamak i\u00e7in a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre><code class=\"language-bash\">sudo sysctl -p<\/code><\/pre>\n<h3>11. G\u00fcvenlik Duvar\u0131n\u0131 Yap\u0131land\u0131rma (UFW)<\/h3>\n<p>Ubuntu&#8217;da varsay\u0131lan g\u00fcvenlik duvar\u0131 olan UFW&#8217;yi (Uncomplicated Firewall) yap\u0131land\u0131rmam\u0131z gerekiyor. Bu, OpenVPN trafi\u011fine izin vermeli ve istemcilerin internete eri\u015febilmesi i\u00e7in NAT (Network Address Translation) kurallar\u0131n\u0131 ayarlamal\u0131d\u0131r.<\/p>\n<h4>UFW Kurallar\u0131n\u0131 Olu\u015fturma<\/h4>\n<p>\u00d6ncelikle, SSH ba\u011flant\u0131 noktas\u0131n\u0131 (genellikle 22) ve OpenVPN portunu (1194\/udp) a\u00e7\u0131n:<\/p>\n<pre><code class=\"language-bash\">sudo ufw allow ssh\nsudo ufw allow 1194\/udp<\/code><\/pre>\n<p>E\u011fer OpenVPN i\u00e7in TCP protokol\u00fcn\u00fc se\u00e7tiyseniz, <code>1194\/tcp<\/code> olarak de\u011fi\u015ftirmeniz gerekir.<\/p>\n<h4>Varsay\u0131lan Y\u00f6nlendirme Politikas\u0131n\u0131 Ayarlama<\/h4>\n<p>NAT kurallar\u0131n\u0131n \u00e7al\u0131\u015fabilmesi i\u00e7in UFW&#8217;nin varsay\u0131lan y\u00f6nlendirme politikas\u0131n\u0131 <code>ACCEPT<\/code> olarak ayarlamam\u0131z gerekir.<\/p>\n<pre><code class=\"language-bash\">sudo nano \/etc\/default\/ufw<\/code><\/pre>\n<p>Dosya i\u00e7inde <code>DEFAULT_FORWARD_POLICY=\"DROP\"<\/code> sat\u0131r\u0131n\u0131 bulun ve <code>DEFAULT_FORWARD_POLICY=\"ACCEPT\"<\/code> olarak de\u011fi\u015ftirin.<\/p>\n<h4>NAT Kurallar\u0131n\u0131 Ekleme<\/h4>\n<p>\u015eimdi UFW&#8217;nin <code>before.rules<\/code> dosyas\u0131na NAT kurallar\u0131n\u0131 eklememiz gerekiyor. Bu kurallar, VPN istemcilerinden gelen trafi\u011fin sunucunun genel IP adresi \u00fczerinden internete \u00e7\u0131kmas\u0131n\u0131 sa\u011flar.<\/p>\n<pre><code class=\"language-bash\">sudo nano \/etc\/ufw\/before.rules<\/code><\/pre>\n<p>Bu dosyan\u0131n en ba\u015f\u0131na, <code># START OPENVPN RULES<\/code> ve <code># END OPENVPN RULES<\/code> yorum sat\u0131rlar\u0131 aras\u0131na a\u015fa\u011f\u0131daki kurallar\u0131 ekleyin. <code>eth0<\/code> yerine sunucunuzun d\u0131\u015fa d\u00f6n\u00fck a\u011f aray\u00fcz\u00fcn\u00fcn ad\u0131n\u0131 kullanman\u0131z gerekebilir. <code>ip a<\/code> komutu ile do\u011fru aray\u00fcz ad\u0131n\u0131 bulabilirsiniz (genellikle <code>eth0<\/code> veya <code>enpXsY<\/code>).<\/p>\n<pre><code class=\"language-\"># START OPENVPN RULES\n<h2>NAT table rules<\/h2>\n*nat\n:POSTROUTING ACCEPT [0:0]\n-A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE\nCOMMIT\n<h2>END OPENVPN RULES<\/h2>\n\n<h2>Don't delete these required lines, or there may be errors in the log<\/h2>\n*filter\n:ufw-before-input - [0:0]\n:ufw-before-output - [0:0]\n:ufw-before-forward - [0:0]\n:ufw-user-input - [0:0]\n:ufw-user-output - [0:0]\n:ufw-user-forward - [0:0]\n:ufw-reject-input - [0:0]\n:ufw-reject-output - [0:0]\n:ufw-reject-forward - [0:0]\n:ufw-track-input - [0:0]\n:ufw-track-output - [0:0]\n:ufw-track-forward - [0:0]<\/code><\/pre>\n<p>Yukar\u0131daki \u00f6rnekte <code>10.8.0.0\/24<\/code>, <code>server.conf<\/code> dosyas\u0131nda tan\u0131mlad\u0131\u011f\u0131m\u0131z VPN a\u011f\u0131d\u0131r. <code>eth0<\/code> ise sunucunuzun internete ba\u011fl\u0131 ana a\u011f aray\u00fcz\u00fcd\u00fcr.<\/p>\n<h4>UFW&#8217;yi Yeniden Ba\u015flatma<\/h4>\n<p>T\u00fcm UFW ayarlar\u0131n\u0131 uygulamak i\u00e7in g\u00fcvenlik duvar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131p tekrar etkinle\u015ftirin:<\/p>\n<pre><code class=\"language-bash\">sudo ufw disable\nsudo ufw enable<\/code><\/pre>\n<p><code>y<\/code> yazarak onaylay\u0131n. G\u00fcvenlik duvar\u0131n\u0131n durumunu kontrol etmek i\u00e7in:<\/p>\n<pre><code class=\"language-bash\">sudo ufw status verbose<\/code><\/pre>\n<h3>12. OpenVPN Sunucusunu Ba\u015flatma ve Etkinle\u015ftirme<\/h3>\n<p>T\u00fcm yap\u0131land\u0131rmalar tamamland\u0131ktan sonra, OpenVPN sunucusunu ba\u015flatabilir ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131 i\u00e7in etkinle\u015ftirebiliriz.<\/p>\n<pre><code class=\"language-bash\">sudo systemctl start openvpn@server\nsudo systemctl enable openvpn@server<\/code><\/pre>\n<p>Sunucunun durumunu kontrol etmek i\u00e7in:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl status openvpn@server<\/code><\/pre>\n<p>Durum <code>active (running)<\/code> olarak g\u00f6r\u00fcnmelidir. Herhangi bir hata durumunda, g\u00fcnl\u00fckleri kontrol edebilirsiniz:<\/p>\n<pre><code class=\"language-bash\">sudo journalctl -u openvpn@server -f<\/code><\/pre>\n<h3>13. \u0130stemci Yap\u0131land\u0131rmas\u0131<\/h3>\n<p>OpenVPN sunucusu \u00e7al\u0131\u015f\u0131r durumda oldu\u011funa g\u00f6re, istemcilerin ba\u011flanabilmesi i\u00e7in istemci sertifikalar\u0131 ve yap\u0131land\u0131rma dosyalar\u0131 olu\u015fturmal\u0131y\u0131z. Her istemci i\u00e7in ayr\u0131 bir sertifika olu\u015fturmak, g\u00fcvenlik ve y\u00f6netim a\u00e7\u0131s\u0131ndan en iyi yakla\u015f\u0131md\u0131r.<\/p>\n<h4>\u0130stemci Sertifikas\u0131 ve Anahtar\u0131 Olu\u015fturma<\/h4>\n<p>Easy-RSA dizinine geri d\u00f6n\u00fcn:<\/p>\n<pre><code class=\"language-bash\">cd \/etc\/openvpn\/easy-rsa<\/code><\/pre>\n<p>Yeni bir istemci anahtar iste\u011fi ve \u00f6zel anahtar olu\u015fturun. <code>client1<\/code> yerine istemcinizin ad\u0131n\u0131 kullanabilirsiniz.<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa gen-req client1 nopass<\/code><\/pre>\n<p>\u0130stemci anahtar iste\u011fini CA ile imzalay\u0131n:<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa sign-req client client1<\/code><\/pre>\n<p><code>yes<\/code> yazarak onaylay\u0131n.<\/p>\n<h4>\u0130stemci Yap\u0131land\u0131rma Dosyas\u0131 Olu\u015fturma<\/h4>\n<p>\u015eimdi istemci i\u00e7in bir <code>.ovpn<\/code> yap\u0131land\u0131rma dosyas\u0131 olu\u015fturmam\u0131z gerekiyor. Bu dosya, t\u00fcm gerekli sertifikalar\u0131 ve anahtarlar\u0131 i\u00e7erecektir.<\/p>\n<pre><code class=\"language-bash\">mkdir -p ~\/client-configs\/files\nchmod 700 ~\/client-configs<\/code><\/pre>\n<p>\u015eimdi bir temel istemci yap\u0131land\u0131rma dosyas\u0131 olu\u015ftural\u0131m:<\/p>\n<pre><code class=\"language-bash\">nano ~\/client-configs\/base.conf<\/code><\/pre>\n<p>A\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre><code class=\"language-\">client\ndev tun\nproto udp\nremote YOUR_SERVER_IP 1194\nresolv-retry infinite\nnobind\npersist-key\npersist-tun\nremote-cert-tls server\nauth SHA256\ncipher AES-256-CBC\nkey-direction 1\nverb 3<\/code><\/pre>\n<p><code>YOUR_SERVER_IP<\/code> yerine sunucunuzun genel IP adresini veya alan ad\u0131n\u0131 yaz\u0131n. E\u011fer <code>server.conf<\/code> dosyas\u0131nda <code>proto tcp<\/code> kulland\u0131ysan\u0131z, burada da <code>proto tcp<\/code> olarak de\u011fi\u015ftirmelisiniz.<\/p>\n<p>\u015eimdi bu temel yap\u0131land\u0131rma dosyas\u0131n\u0131, istemciye \u00f6zel sertifika ve anahtarlar\u0131 i\u00e7erecek \u015fekilde tamamlayal\u0131m.<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa show-cert client1 > ~\/client-configs\/files\/client1.crt\n.\/easyrsa show-req client1 > ~\/client-configs\/files\/client1.csr # Bu asl\u0131nda gerekli de\u011fil ama iyi bir pratik.\ncp pki\/private\/client1.key ~\/client-configs\/files\/client1.key\ncp pki\/ca.crt ~\/client-configs\/files\/ca.crt\ncp ta.key ~\/client-configs\/files\/ta.key<\/code><\/pre>\n<p>\u015eimdi t\u00fcm bu dosyalar\u0131 tek bir <code>.ovpn<\/code> dosyas\u0131na birle\u015ftirecek bir betik olu\u015ftural\u0131m:<\/p>\n<pre><code class=\"language-bash\">nano ~\/client-configs\/make_config.sh<\/code><\/pre>\n<p>A\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre><code class=\"language-bash\">#!\/bin\/bash\n\n<h2>Client name (e.g., client1)<\/h2>\nCLIENT_NAME=$1\n\nif [ -z \"$CLIENT_NAME\" ]; then\n    echo \"Usage: $0 <client_name>\"\n    exit 1\nfi\n\nKEY_DIR=~\/client-configs\/files\nOUTPUT_DIR=~\/client-configs\/ovpn_files\nBASE_CONFIG=~\/client-configs\/base.conf\n\nmkdir -p \"$OUTPUT_DIR\"\n\ncat \"${BASE_CONFIG}\" \\\n    <(echo -e '<ca>') \\\n    \"${KEY_DIR}\/ca.crt\" \\\n    <(echo -e '<\/ca>\\n<cert>') \\\n    \"${KEY_DIR}\/${CLIENT_NAME}.crt\" \\\n    <(echo -e '<\/cert>\\n<key>') \\\n    \"${KEY_DIR}\/${CLIENT_NAME}.key\" \\\n    <(echo -e '<\/key>\\n<tls-auth>') \\\n    \"${KEY_DIR}\/ta.key\" \\\n    <(echo -e '<\/tls-auth>') \\\n    > \"${OUTPUT_DIR}\/${CLIENT_NAME}.ovpn\"\n\necho \"Client config created: ${OUTPUT_DIR}\/${CLIENT_NAME}.ovpn\"<\/code><\/pre>\n<p>Betik dosyas\u0131n\u0131 \u00e7al\u0131\u015ft\u0131r\u0131labilir hale getirin:<\/p>\n<pre><code class=\"language-bash\">chmod 700 ~\/client-configs\/make_config.sh<\/code><\/pre>\n<p>\u015eimdi <code>client1<\/code> i\u00e7in <code>.ovpn<\/code> dosyas\u0131n\u0131 olu\u015fturun:<\/p>\n<pre><code class=\"language-bash\">~\/client-configs\/make_config.sh client1<\/code><\/pre>\n<p>Bu komut, <code>~\/client-configs\/ovpn_files\/client1.ovpn<\/code> dosyas\u0131n\u0131 olu\u015fturacakt\u0131r. Bu dosyay\u0131 istemci cihaz\u0131n\u0131za (bilgisayar, telefon vb.) aktarman\u0131z gerekmektedir. Dosyay\u0131 g\u00fcvenli bir \u015fekilde (\u00f6rne\u011fin, SFTP kullanarak) istemcinize aktar\u0131n.<\/p>\n<h4>Dosyalar\u0131 \u0130stemciye Aktarma<\/h4>\n<p>Olu\u015fturulan <code>.ovpn<\/code> dosyas\u0131n\u0131 (\u00f6rne\u011fin <code>client1.ovpn<\/code>), OpenVPN istemci yaz\u0131l\u0131m\u0131n\u0131 \u00e7al\u0131\u015ft\u0131raca\u011f\u0131n\u0131z cihaza kopyalaman\u0131z gerekir. Windows, macOS, Linux, Android ve iOS i\u00e7in OpenVPN istemcileri mevcuttur.<\/p>\n<p>*   <strong>Windows:<\/strong> OpenVPN GUI istemcisini indirip kurun. <code>.ovpn<\/code> dosyas\u0131n\u0131 <code>C:\\Program Files\\OpenVPN\\config<\/code> dizinine kopyalay\u0131n.<br \/>\n*   <strong>macOS:<\/strong> Tunnelblick veya OpenVPN Connect istemcisini kullan\u0131n. <code>.ovpn<\/code> dosyas\u0131n\u0131 s\u00fcr\u00fckleyip b\u0131rakarak veya &#8220;Add Configuration&#8221; se\u00e7ene\u011fiyle i\u00e7e aktar\u0131n.<br \/>\n*   <strong>Linux:<\/strong> OpenVPN paketini kurun (<code>sudo apt install openvpn<\/code>) ve <code>sudo openvpn --config client1.ovpn<\/code> komutuyla veya NetworkManager \u00fczerinden yap\u0131land\u0131rmay\u0131 i\u00e7e aktararak ba\u011flan\u0131n.<br \/>\n*   <strong>Mobil Cihazlar:<\/strong> OpenVPN Connect uygulamas\u0131n\u0131 indirip kurun. <code>.ovpn<\/code> dosyas\u0131n\u0131 e-posta, bulut depolama veya USB arac\u0131l\u0131\u011f\u0131yla cihaza aktar\u0131n ve uygulama \u00fczerinden i\u00e7e aktar\u0131n.<\/p>\n<p>Ba\u011fland\u0131ktan sonra, IP adresinizi kontrol ederek VPN \u00fczerinden ba\u011fland\u0131\u011f\u0131n\u0131zdan emin olabilirsiniz (\u00f6rne\u011fin, Google&#8217;da &#8220;what is my ip&#8221; aramas\u0131 yaparak).<\/p>\n<h3>14. \u0130stemci Sertifikalar\u0131n\u0131 \u0130ptal Etme (Opsiyonel)<\/h3>\n<p>Bir istemcinin VPN eri\u015fimini iptal etmek isterseniz (\u00f6rne\u011fin, cihaz\u0131n\u0131 kaybetti veya bir \u00e7al\u0131\u015fan ayr\u0131ld\u0131), sertifikas\u0131n\u0131 iptal etmeniz gerekir.<\/p>\n<p>Easy-RSA dizinine gidin:<\/p>\n<pre><code class=\"language-bash\">cd \/etc\/openvpn\/easy-rsa<\/code><\/pre>\n<p>\u0130stemcinin sertifikas\u0131n\u0131 iptal edin (\u00f6rne\u011fin, <code>client1<\/code> i\u00e7in):<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa revoke client1<\/code><\/pre>\n<p>Onaylamak i\u00e7in <code>yes<\/code> yaz\u0131n. Ard\u0131ndan, CRL&#8217;yi (Sertifika \u0130ptal Listesi) yeniden olu\u015fturman\u0131z gerekir:<\/p>\n<pre><code class=\"language-bash\">.\/easyrsa gen-crl<\/code><\/pre>\n<p>Yeni <code>crl.pem<\/code> dosyas\u0131n\u0131 OpenVPN sunucu dizinine kopyalay\u0131n:<\/p>\n<pre><code class=\"language-bash\">sudo cp pki\/crl.pem \/etc\/openvpn\/<\/code><\/pre>\n<p>Son olarak, OpenVPN sunucusunu yeniden ba\u015flatarak yeni CRL&#8217;nin uygulanmas\u0131n\u0131 sa\u011flay\u0131n:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl restart openvpn@server<\/code><\/pre>\n<p>Bu i\u015flemden sonra, <code>client1<\/code> art\u0131k VPN sunucusuna ba\u011flanamayacakt\u0131r.<\/p>\n<h3>Sonu\u00e7<\/h3>\n<p>Bu detayl\u0131 rehberde, Ubuntu 22.04 LTS \u00fczerinde kendi OpenVPN sunucunuzu ad\u0131m ad\u0131m nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ve yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 \u00f6\u011frendiniz. Kendi VPN sunucunuzu \u00e7al\u0131\u015ft\u0131rmak, \u00e7evrimi\u00e7i gizlili\u011finizi ve g\u00fcvenli\u011finizi art\u0131rman\u0131n, hassas verilerinizi koruman\u0131n ve co\u011frafi k\u0131s\u0131tlamalar\u0131 a\u015fman\u0131n g\u00fc\u00e7l\u00fc bir yoludur.<\/p>\n<p>Kurulum s\u00fcrecinde sunucu g\u00fcncellemesinden ba\u015flayarak, sertifika yetkilisi olu\u015fturmaya, sunucu ve istemci sertifikalar\u0131n\u0131 yap\u0131land\u0131rmaya, Diffie-Hellman anahtar\u0131 ve TLS kimlik do\u011frulama anahtar\u0131 olu\u015fturmaya, IP y\u00f6nlendirmeyi etkinle\u015ftirmeye ve UFW g\u00fcvenlik duvar\u0131n\u0131 yap\u0131land\u0131rmaya kadar t\u00fcm ad\u0131mlar\u0131 tamamlad\u0131k. Son olarak, istemcilerinize da\u011f\u0131tabilece\u011finiz <code>.ovpn<\/code> yap\u0131land\u0131rma dosyalar\u0131n\u0131 nas\u0131l olu\u015fturaca\u011f\u0131n\u0131z\u0131 ve istemci sertifikalar\u0131n\u0131 nas\u0131l iptal edece\u011finizi de g\u00f6rd\u00fck.<\/p>\n<p>Kendi OpenVPN sunucunuzu y\u00f6netmek, g\u00fcvenlik g\u00fcncellemelerini takip etmeyi ve gerekti\u011finde sertifikalar\u0131 yenilemeyi gerektirir. Ancak bu \u00e7aba, dijital ya\u015fam\u0131n\u0131z \u00fczerinde size daha fazla kontrol ve g\u00fcvenlik sa\u011flar. G\u00fcvenli internet deneyimlerinizde ba\u015far\u0131lar dileriz!<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, internet ba\u011flant\u0131lar\u0131n\u0131n g\u00fcvenli","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-37447","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\" \/>\n<meta property=\"og:description\" content=\"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, internet ba\u011flant\u0131lar\u0131n\u0131n g\u00fcvenli\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-05T07:40:45+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\",\"datePublished\":\"2026-01-05T07:40:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\"},\"wordCount\":2150,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\",\"name\":\"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-01-05T07:40:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131","og_description":"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, internet ba\u011flant\u0131lar\u0131n\u0131n g\u00fcvenli","og_url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-01-05T07:40:45+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"15 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131","datePublished":"2026-01-05T07:40:45+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/"},"wordCount":2150,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","name":"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-01-05T07:40:45+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-22-04-uzerine-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubuntu 22.04 \u00dczerine OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37447","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=37447"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37447\/revisions"}],"predecessor-version":[{"id":37448,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37447\/revisions\/37448"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=37447"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=37447"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=37447"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}