{"id":37738,"date":"2026-01-14T01:40:42","date_gmt":"2026-01-13T22:40:42","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=37738"},"modified":"2026-01-14T01:40:42","modified_gmt":"2026-01-13T22:40:42","slug":"nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/","title":{"rendered":"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)"},"content":{"rendered":"

<\/p>\n

NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)<\/h2>\n

Giri\u015f ve DNSSEC Temelleri<\/h3>\n

\u0130nternet’in temel ta\u015flar\u0131ndan biri olan Alan Ad\u0131 Sistemi (DNS), web sitelerinin ve di\u011fer a\u011f kaynaklar\u0131n\u0131n insan taraf\u0131ndan okunabilir isimlerini (\u00f6rne\u011fin, example.com) makine taraf\u0131ndan okunabilir IP adreslerine \u00e7evirir. Ancak, DNS’in ilk tasar\u0131m\u0131 g\u00fcvenlik mekanizmalar\u0131n\u0131 i\u00e7ermedi\u011fi i\u00e7in, \u00e7e\u015fitli sald\u0131r\u0131lara kar\u015f\u0131 savunmas\u0131zd\u0131r. Bu g\u00fcvenlik a\u00e7\u0131klar\u0131, kullan\u0131c\u0131lar\u0131 yanl\u0131\u015f web sitelerine y\u00f6nlendirme, e-posta trafi\u011fini ele ge\u00e7irme veya di\u011fer k\u00f6t\u00fc niyetli faaliyetler i\u00e7in kullan\u0131labilir. Bu t\u00fcr sald\u0131r\u0131lara en bilinen \u00f6rnek, bir DNS sunucusunun veya istemcisinin \u00f6nbelle\u011fini zehirleyerek (cache poisoning) kullan\u0131c\u0131lar\u0131 sahte bir siteye y\u00f6nlendiren DNS zehirlenmesi sald\u0131r\u0131lar\u0131d\u0131r.<\/p>\n

DNSSEC (Domain Name System Security Extensions), DNS’e kriptografik g\u00fcvenlik ekleyerek bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 koruma sa\u011flamak amac\u0131yla geli\u015ftirilmi\u015ftir. DNSSEC, DNS yan\u0131tlar\u0131n\u0131n kimli\u011fini do\u011frular ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc garanti eder, b\u00f6ylece bir kullan\u0131c\u0131n\u0131n do\u011fru IP adresine y\u00f6nlendirildi\u011finden emin olunmas\u0131n\u0131 sa\u011flar. DNSSEC, mevcut DNS altyap\u0131s\u0131n\u0131n \u00fczerine in\u015fa edilmi\u015f bir dizi uzant\u0131d\u0131r ve dijital imzalar kullanarak DNS verilerinin do\u011frulu\u011funu kan\u0131tlar. Bu, DNS sorgular\u0131n\u0131n ve yan\u0131tlar\u0131n\u0131n de\u011fi\u015ftirilmedi\u011fini ve yetkili bir kaynaktan geldi\u011fini do\u011frular.<\/p>\n

DNSSEC’in sa\u011flad\u0131\u011f\u0131 temel faydalar \u015funlard\u0131r:<\/p>\n

* Veri B\u00fct\u00fcnl\u00fc\u011f\u00fc:<\/strong> DNS verilerinin iletim s\u0131ras\u0131nda de\u011fi\u015ftirilmedi\u011fini garanti eder.
\n* Kimlik Do\u011frulama:<\/strong> DNS yan\u0131tlar\u0131n\u0131n ger\u00e7ekten yetkili bir isim sunucusundan geldi\u011fini do\u011frular.
\n* \u00d6nbellek Zehirlenmesi Korumas\u0131:<\/strong> K\u00f6t\u00fc niyetli ki\u015filerin DNS \u00f6nbelleklerini zehirlemesini engeller.
\n* G\u00fcven Zinciri:<\/strong> K\u00f6k b\u00f6lgeden ba\u015flayarak alt b\u00f6lgelere do\u011fru bir g\u00fcven zinciri olu\u015fturur.<\/p>\n

DNSSEC’in \u00e7al\u0131\u015fma prensibi, kriptografik anahtarlar ve dijital imzalar \u00fczerine kuruludur. Her DNS b\u00f6lgesi (zone), \u00f6zel ve genel anahtar \u00e7iftleri olu\u015fturur. B\u00f6lge dosyalar\u0131, \u00f6zel anahtarlar kullan\u0131larak imzalan\u0131r ve bu imzalar (RRSIG kay\u0131tlar\u0131) DNS yan\u0131tlar\u0131na eklenir. Genel anahtarlar (DNSKEY kay\u0131tlar\u0131) ise DNS \u00fczerinden yay\u0131nlan\u0131r. Bir DNS \u00e7\u00f6z\u00fcmleyicisi, bir DNS yan\u0131t\u0131n\u0131 ald\u0131\u011f\u0131nda, yan\u0131tla birlikte gelen dijital imzay\u0131, b\u00f6lgenin genel anahtar\u0131n\u0131 kullanarak do\u011frular. E\u011fer imza ge\u00e7erliyse, yan\u0131t\u0131n orijinal ve de\u011fi\u015ftirilmemi\u015f oldu\u011fu kabul edilir. Bu g\u00fcven zinciri, en \u00fcst d\u00fczeydeki k\u00f6k b\u00f6lgeden ba\u015flayarak a\u015fa\u011f\u0131 do\u011fru her b\u00f6lgenin bir \u00fcst b\u00f6lge taraf\u0131ndan imzalanmas\u0131yla olu\u015fur.<\/p>\n

NSD ve DNSSEC Entegrasyonu<\/h3>\n

NSD (Name Server Daemon), birincil (primary) ve ikincil (secondary) DNS sunucusu olarak g\u00f6rev yapmak \u00fczere tasarlanm\u0131\u015f, a\u00e7\u0131k kaynakl\u0131, yetkili (authoritative) bir isim sunucusudur. \u00d6zellikle performans ve g\u00fcvenlik odakl\u0131d\u0131r. BIND gibi di\u011fer yetkili isim sunucular\u0131na k\u0131yasla daha az kaynak t\u00fcketir ve genellikle daha basittir. NSD, yaln\u0131zca yetkili DNS sorgular\u0131na yan\u0131t vermek \u00fczere optimize edilmi\u015ftir; yani recursive (\u00f6zyinelemeli) sorgular\u0131 \u00e7\u00f6zmez. Bu, onu \u00f6zellikle \u00fcst d\u00fczey etki alanlar\u0131 (TLD’ler) ve b\u00fcy\u00fck \u00f6l\u00e7ekli DNS altyap\u0131lar\u0131 i\u00e7in ideal bir se\u00e7im haline getirir.<\/p>\n

NSD, DNSSEC’i destekler ve bu makalede Ubuntu 14.04 \u00fczerinde NSD kullanarak bir DNS b\u00f6lgesini nas\u0131l g\u00fcvenli hale getirece\u011fimizi ayr\u0131nt\u0131l\u0131 olarak inceleyece\u011fiz. Ubuntu 14.04, nispeten eski bir i\u015fletim sistemi s\u00fcr\u00fcm\u00fc olmas\u0131na ra\u011fmen, bir\u00e7ok \u00fcretim ortam\u0131nda hala kullan\u0131lmaktad\u0131r. Bu nedenle, bu platform \u00fczerindeki kurulum ad\u0131mlar\u0131na \u00f6zel dikkat g\u00f6sterece\u011fiz. NSD’nin DNSSEC deste\u011fi, zone dosyalar\u0131n\u0131n imzalanmas\u0131n\u0131 ve bu imzalar\u0131n do\u011fru bir \u015fekilde yay\u0131nlanmas\u0131n\u0131 sa\u011flar.<\/p>\n

\u00d6n Haz\u0131rl\u0131klar<\/h3>\n

DNSSEC kurulumuna ba\u015flamadan \u00f6nce sistemin g\u00fcncel oldu\u011fundan ve gerekli paketlerin kurulu oldu\u011fundan emin olmal\u0131y\u0131z.<\/p>\n

Sistem G\u00fcncelleme<\/h4>\n

\u0130lk ad\u0131m olarak, sistem paket listesini g\u00fcncelleyelim ve mevcut paketleri y\u00fckseltelim:<\/p>\n

sudo apt-get update\nsudo apt-get upgrade -y<\/code><\/pre>\n
Gerekli Paketlerin Kurulumu<\/h4>\n
NSD’nin kendisi ve DNSSEC anahtarlar\u0131n\u0131 olu\u015fturmak ve b\u00f6lgeleri imzalamak i\u00e7in ldnsutils<\/code> paketine ihtiyac\u0131m\u0131z olacak. ldnsutils<\/code> paketi, ldns-keygen<\/code> ve ldns-signzone<\/code> gibi ara\u00e7lar\u0131 i\u00e7erir.<\/p>\n
sudo apt-get install nsd ldnsutils -y<\/code><\/pre>\n
Bu komut, NSD sunucusunu ve DNSSEC i\u015flemleri i\u00e7in gerekli olan ldnsutils<\/code> ara\u00e7lar\u0131n\u0131 kuracakt\u0131r.<\/p>\n
NSD Yap\u0131land\u0131rma Dosyas\u0131 (nsd.conf) Temel Ayarlar\u0131<\/h4>\n
NSD’nin temel yap\u0131land\u0131rmas\u0131 \/etc\/nsd\/nsd.conf<\/code> dosyas\u0131nda bulunur. Bu dosyay\u0131 d\u00fczenleyerek sunucunun dinleyece\u011fi IP adreslerini, g\u00fcnl\u00fckleme ayarlar\u0131n\u0131 ve yetkili olaca\u011f\u0131 b\u00f6lgeleri belirleyece\u011fiz.<\/p>\n
\u00d6rnek bir nsd.conf<\/code> dosyas\u0131:<\/p>\n
# \/etc\/nsd\/nsd.conf\n\nserver:\n    # NSD'nin dinleyece\u011fi IP adresleri (IPv4 ve IPv6)\n    ip-address: 192.168.1.100  # Kendi sunucunuzun IP adresini buraya yaz\u0131n\n    # ip-address: 2001:db8::1  # E\u011fer IPv6 kullan\u0131yorsan\u0131z\n\n    # Dinleyece\u011fi port (varsay\u0131lan 53)\n    port: 53\n\n    # NSD'nin \u00e7al\u0131\u015faca\u011f\u0131 kullan\u0131c\u0131 ve grup\n    username: nsd\n    chroot: \"\/etc\/nsd\"\n    # pidfile: \"\/var\/run\/nsd\/nsd.pid\" # Ubuntu 14.04'te bu genellikle otomatik y\u00f6netilir\n    # xfrdfile: \"\/var\/lib\/nsd\/xfrd.state\" # Zone transfer durumu\n    # zonelistfile: \"\/var\/lib\/nsd\/zone.list\" # Y\u00fckl\u00fc b\u00f6lgelerin listesi\n\n    # G\u00fcnl\u00fckleme ayarlar\u0131\n    hide-version: yes\n    log-file: \"\/var\/log\/nsd.log\"\n    # verbosity: 1 # Detay seviyesi (0: kritik, 1: hata, 2: uyar\u0131, 3: bilgi, 4: hata ay\u0131klama)\n\n    # DNSSEC i\u00e7in gerekli ayarlar\n    # Bu ayar, NSD'nin DNSSEC kay\u0131tlar\u0131n\u0131 do\u011fru bir \u015fekilde sunmas\u0131n\u0131 sa\u011flar.\n    # Bu ayar genellikle varsay\u0131lan olarak etkindir, ancak kontrol etmekte fayda var.\n    # enable-dnssec: yes # NSD 4.x ve \u00fczeri s\u00fcr\u00fcmlerde varsay\u0131lan olarak etkin olabilir.\n\n    # B\u00f6lge tan\u0131mlamalar\u0131 buraya gelecek\n    # zone:\n    #     name: \"example.com\"\n    #     zonefile: \"\/etc\/nsd\/zones\/example.com.zone\"<\/code><\/pre>\n
Bu yap\u0131land\u0131rmay\u0131 yapt\u0131ktan sonra, DNSSEC’i etkinle\u015ftirece\u011fimiz b\u00f6lgeyi tan\u0131mlayaca\u011f\u0131z.<\/p>\n
Zone Dosyas\u0131 Haz\u0131rl\u0131\u011f\u0131<\/h4>\n
DNSSEC’i uygulayaca\u011f\u0131m\u0131z bir b\u00f6lge dosyas\u0131na ihtiyac\u0131m\u0131z var. \u00d6rnek olarak example.com<\/code> alan ad\u0131n\u0131 kullanal\u0131m. Zone dosyalar\u0131n\u0131 \/etc\/nsd\/zones\/<\/code> dizininde tutmak iyi bir uygulamad\u0131r.<\/p>\n
sudo mkdir -p \/etc\/nsd\/zones\nsudo nano \/etc\/nsd\/zones\/example.com.zone<\/code><\/pre>\n
\u00d6rnek example.com.zone<\/code> dosyas\u0131:<\/p>\n
$TTL 3600\n@ IN SOA ns1.example.com. admin.example.com. (\n    2023102701 ; Serial\n    7200       ; Refresh\n    3600       ; Retry\n    1209600    ; Expire\n    3600       ; Minimum TTL\n)\n@            IN NS   ns1.example.com.\n@            IN NS   ns2.example.com.\nns1          IN A    192.168.1.100\nns2          IN A    192.168.1.101\nwww          IN A    192.168.1.100\nmail         IN A    192.168.1.100\n@            IN MX 10 mail.example.com.<\/code><\/pre>\n
Bu dosyay\u0131 kaydettikten sonra, nsd.conf<\/code> dosyas\u0131na bu b\u00f6lge tan\u0131m\u0131n\u0131 eklemeliyiz:<\/p>\n
# \/etc\/nsd\/nsd.conf i\u00e7inde zone tan\u0131m\u0131\nzone:\n    name: \"example.com\"\n    zonefile: \"\/etc\/nsd\/zones\/example.com.zone\"\n    # DNSSEC ile ilgili ayarlar buraya gelecek\n    # allow-notify: 192.168.1.101 NOKEY\n    # provide-xfr: 192.168.1.101 NOKEY<\/code><\/pre>\n
DNSSEC Anahtarlar\u0131n\u0131n Olu\u015fturulmas\u0131<\/h3>\n
DNSSEC, iki ana t\u00fcrde anahtar kullan\u0131r:<\/p>\n
1.  KSK (Key Signing Key – Anahtar \u0130mzalama Anahtar\u0131):<\/strong> Bu anahtar, b\u00f6lgenin DNSKEY kay\u0131tlar\u0131n\u0131 imzalamak i\u00e7in kullan\u0131l\u0131r. Daha uzun bir ge\u00e7erlilik s\u00fcresine sahiptir (genellikle 1-2 y\u0131l) ve daha dikkatli bir \u015fekilde y\u00f6netilir. De\u011fi\u015fim s\u0131kl\u0131\u011f\u0131 d\u00fc\u015f\u00fckt\u00fcr.
\n2.  ZSK (Zone Signing Key – B\u00f6lge \u0130mzalama Anahtar\u0131):<\/strong> Bu anahtar, b\u00f6lgedeki t\u00fcm di\u011fer DNS kay\u0131tlar\u0131n\u0131 (A, MX, NS vb.) imzalamak i\u00e7in kullan\u0131l\u0131r. Daha k\u0131sa bir ge\u00e7erlilik s\u00fcresine sahiptir (genellikle 1-3 ay) ve daha s\u0131k de\u011fi\u015ftirilir.<\/p>\n
Her iki anahtar t\u00fcr\u00fc de ldns-keygen<\/code> arac\u0131yla olu\u015fturulur. RSA\/SHA256 algoritmas\u0131 yayg\u0131n olarak kullan\u0131l\u0131r.<\/p>\n
cd \/etc\/nsd\/zones\/<\/code><\/pre>\n
KSK Olu\u015fturma<\/h4>\n
KSK i\u00e7in genellikle 2048 bit veya daha b\u00fcy\u00fck anahtarlar kullan\u0131l\u0131r. k<\/code> (key) bayra\u011f\u0131, anahtar\u0131n bir KSK oldu\u011funu belirtir.<\/p>\n
sudo ldns-keygen -a RSASHA256 -b 2048 -n KSK example.com.<\/code><\/pre>\n
Bu komut, Kexample.com.+008+XXXXX.key<\/code> (genel anahtar) ve Kexample.com.+008+XXXXX.private<\/code> (\u00f6zel anahtar) ad\u0131nda iki dosya olu\u015fturacakt\u0131r. XXXXX<\/code> k\u0131sm\u0131, anahtar\u0131n benzersiz bir kimli\u011fidir.<\/p>\n
ZSK Olu\u015fturma<\/h4>\n
ZSK i\u00e7in de genellikle 1024 bit veya 2048 bit anahtarlar kullan\u0131l\u0131r. z<\/code> (zone) bayra\u011f\u0131, anahtar\u0131n bir ZSK oldu\u011funu belirtir.<\/p>\n
sudo ldns-keygen -a RSASHA256 -b 1024 -n ZSK example.com.<\/code><\/pre>\n
Bu komut da benzer \u015fekilde Kexample.com.+008+YYYYY.key<\/code> ve Kexample.com.+008+YYYYY.private<\/code> dosyalar\u0131n\u0131 olu\u015fturacakt\u0131r.<\/p>\n
Anahtarlar olu\u015fturulduktan sonra, bu anahtar dosyalar\u0131n\u0131n sahiplik ve izinlerini kontrol etmek \u00f6nemlidir. NSD kullan\u0131c\u0131s\u0131n\u0131n bu dosyalara eri\u015febilmesi gereklidir.<\/p>\n
sudo chown nsd:nsd Kexample.com.*\nsudo chmod 640 Kexample.com.*<\/code><\/pre>\n
Zone Dosyas\u0131n\u0131n \u0130mzalanmas\u0131 (Signing the Zone)<\/h3>\n
Anahtarlar\u0131 olu\u015fturduktan sonra, zone dosyam\u0131z\u0131 bu anahtarlar\u0131 kullanarak imzalamal\u0131y\u0131z. Bu i\u015flem, b\u00f6lgedeki her bir DNS kayd\u0131na (SOA, NS, A, MX vb.) bir RRSIG<\/code> (Resource Record Signature) kayd\u0131 ekler ve ayr\u0131ca genel anahtarlar\u0131m\u0131z\u0131 (DNSKEY kay\u0131tlar\u0131) zone dosyas\u0131na ekler.<\/p>\n
Bu i\u015flemi ldns-signzone<\/code> arac\u0131yla yapar\u0131z. Bu ara\u00e7, hem KSK hem de ZSK’yi kullanarak zone dosyas\u0131n\u0131 imzalar.<\/p>\n
sudo ldns-signzone -e $(date -v +1M +%Y%m%d%H%M%S) -f example.com.zone.signed example.com.zone Kexample.com.+008+XXXXX Kexample.com.+008+YYYYY<\/code><\/pre>\n
Komut A\u00e7\u0131klamas\u0131:<\/strong><\/p>\n
*   -e $(date -v +1M +%Y%m%d%H%M%S)<\/code>: Bu k\u0131s\u0131m, imzalar\u0131n ge\u00e7erlilik biti\u015f tarihini belirtir. date -v +1M<\/code> macOS\/BSD s\u00f6zdizimidir. Linux’ta date -d \"+1 month\" +%Y%m%d%H%M%S<\/code> kullanman\u0131z gerekir. Bu, imzalar\u0131n bir ay sonra sona erece\u011fini belirtir. Bu tarih, ZSK rotasyon periyodunuzla uyumlu olmal\u0131d\u0131r.
\n*   -f example.com.zone.signed<\/code>: \u0130mzalanm\u0131\u015f zone dosyas\u0131n\u0131n kaydedilece\u011fi dosya ad\u0131d\u0131r.
\n*   example.com.zone<\/code>: Orijinal, imzalanmam\u0131\u015f zone dosyas\u0131.
\n*   Kexample.com.+008+XXXXX<\/code>: KSK’nin \u00f6zel anahtar dosyas\u0131n\u0131n ad\u0131n\u0131n \u00f6n eki (.private<\/code> uzant\u0131s\u0131 olmadan).
\n*   Kexample.com.+008+YYYYY<\/code>: ZSK’nin \u00f6zel anahtar dosyas\u0131n\u0131n ad\u0131n\u0131n \u00f6n eki (.private<\/code> uzant\u0131s\u0131 olmadan).<\/p>\n
Bu komut \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131ktan sonra, \/etc\/nsd\/zones\/example.com.zone.signed<\/code> ad\u0131nda yeni bir dosya olu\u015facakt\u0131r. Bu dosya, orijinal kay\u0131tlar\u0131n yan\u0131 s\u0131ra DNSKEY<\/code>, RRSIG<\/code>, NSEC<\/code> (veya NSEC3<\/code>) gibi DNSSEC’e \u00f6zel kay\u0131tlar\u0131 i\u00e7erecektir.<\/p>\n
NSEC\/NSEC3:<\/strong> ldns-signzone<\/code> varsay\u0131lan olarak NSEC<\/code> kay\u0131tlar\u0131 ekler. NSEC kay\u0131tlar\u0131, bir b\u00f6lgedeki mevcut kay\u0131tlar aras\u0131ndaki bo\u015fluklar\u0131 kan\u0131tlayarak “kay\u0131t yok” yan\u0131tlar\u0131n\u0131n (NXDOMAIN) da g\u00fcvenli bir \u015fekilde do\u011frulanmas\u0131n\u0131 sa\u011flar. Ancak NSEC, b\u00f6lge enumeration (b\u00f6lgedeki t\u00fcm kay\u0131tlar\u0131 listeleme) sald\u0131r\u0131lar\u0131na izin verebilir. Bu riski azaltmak i\u00e7in NSEC3<\/code> kullanabilirsiniz. ldns-signzone<\/code> i\u00e7in -3<\/code> parametresi ile NSEC3 etkinle\u015ftirilebilir.<\/p>\n
# NSEC3 kullanmak isterseniz:\nsudo ldns-signzone -e $(date -d \"+1 month\" +%Y%m%d%H%M%S) -f example.com.zone.signed -3 1 example.com.zone Kexample.com.+008+XXXXX Kexample.com.+008+YYYYY<\/code><\/pre>\n
-3 1<\/code> parametresi NSEC3’\u00fc etkinle\u015ftirir ve iterasyon say\u0131s\u0131n\u0131 1 olarak ayarlar.<\/p>\n
\u0130mzalanm\u0131\u015f zone dosyas\u0131n\u0131n i\u00e7eri\u011fini inceleyebilirsiniz:<\/p>\n
sudo less \/etc\/nsd\/zones\/example.com.zone.signed<\/code><\/pre>\n
Bu dosyada, her orijinal kayd\u0131n alt\u0131nda bir RRSIG<\/code> kayd\u0131 ve en \u00fcstte DNSKEY<\/code> kay\u0131tlar\u0131 oldu\u011funu g\u00f6receksiniz. DNSKEY<\/code> kay\u0131tlar\u0131, KSK ve ZSK’mizin genel anahtarlar\u0131n\u0131 i\u00e7erir.<\/p>\n
NSD’nin DNSSEC \u0130\u00e7in Yap\u0131land\u0131r\u0131lmas\u0131<\/h3>\n
Art\u0131k imzalanm\u0131\u015f bir zone dosyam\u0131z oldu\u011funa g\u00f6re, NSD’yi bu dosyay\u0131 kullanacak \u015fekilde yap\u0131land\u0131rmam\u0131z gerekiyor. \/etc\/nsd\/nsd.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyerek example.com<\/code> b\u00f6lgesi i\u00e7in zonefile<\/code> yolunu imzalanm\u0131\u015f dosyaya y\u00f6nlendirmeliyiz.<\/p>\n
# \/etc\/nsd\/nsd.conf i\u00e7inde zone tan\u0131m\u0131\nzone:\n    name: \"example.com\"\n    zonefile: \"\/etc\/nsd\/zones\/example.com.zone.signed\" # \u0130mzalanm\u0131\u015f dosyay\u0131 kullan\n    # DNSSEC i\u00e7in NSD'nin \u00f6zel bir yap\u0131land\u0131rmaya ihtiyac\u0131 yoktur,\n    # \u00e7\u00fcnk\u00fc imzal\u0131 dosyay\u0131 do\u011frudan sunar.\n    # Ancak, g\u00fcvenli transferler i\u00e7in ayarlar yap\u0131labilir.\n    # allow-notify: 192.168.1.101 NOKEY\n    # provide-xfr: 192.168.1.101 NOKEY<\/code><\/pre>\n
nsd.conf<\/code> dosyas\u0131n\u0131 kaydettikten sonra, NSD yap\u0131land\u0131rmas\u0131n\u0131 kontrol edelim ve servisi yeniden ba\u015flatal\u0131m:<\/p>\n
sudo nsd-checkconf \/etc\/nsd\/nsd.conf\nsudo service nsd restart<\/code><\/pre>\n
E\u011fer nsd-checkconf<\/code> herhangi bir hata d\u00f6nd\u00fcrmezse, yap\u0131land\u0131rman\u0131z do\u011fru demektir. NSD servisini yeniden ba\u015flatt\u0131ktan sonra, sunucunuz art\u0131k DNSSEC imzal\u0131 yan\u0131tlar vermeye haz\u0131r olmal\u0131d\u0131r.<\/p>\n
Do\u011frulama ve Test Etme<\/h3>\n
NSD’nin DNSSEC’i do\u011fru bir \u015fekilde sunup sunmad\u0131\u011f\u0131n\u0131 kontrol etmek kritik bir ad\u0131md\u0131r.<\/p>\n
Zone Dosyas\u0131n\u0131n Do\u011fru \u0130mzaland\u0131\u011f\u0131n\u0131 Kontrol Etme<\/h4>\n
dig<\/code> arac\u0131n\u0131 kullanarak DNSSEC kay\u0131tlar\u0131n\u0131 sorgulayabiliriz:<\/p>\n
dig @192.168.1.100 example.com. A +dnssec<\/code><\/pre>\n
Burada 192.168.1.100<\/code> sunucunuzun IP adresidir. Yan\u0131tta RRSIG<\/code> ve DNSKEY<\/code> kay\u0131tlar\u0131n\u0131 g\u00f6rmelisiniz. Ayr\u0131ca ad<\/code> (authenticated data) bayra\u011f\u0131n\u0131n ayarl\u0131 olmas\u0131, yan\u0131t\u0131n DNSSEC taraf\u0131ndan do\u011fruland\u0131\u011f\u0131n\u0131 g\u00f6sterir (e\u011fer sorguyu yapan \u00e7\u00f6z\u00fcmleyici de DNSSEC destekliyorsa).<\/p>\n
Ayr\u0131ca, ldns-verify-zone<\/code> arac\u0131yla imzalanm\u0131\u015f zone dosyas\u0131n\u0131n ge\u00e7erlili\u011fini kontrol edebilirsiniz:<\/p>\n
sudo ldns-verify-zone \/etc\/nsd\/zones\/example.com.zone.signed<\/code><\/pre>\n
Bu komut, imzalar\u0131n ge\u00e7erlili\u011fini ve zone dosyas\u0131n\u0131n b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc kontrol edecektir. Herhangi bir hata yoksa, “Zone \/etc\/nsd\/zones\/example.com.zone.signed is verified” gibi bir mesaj g\u00f6rmelisiniz.<\/p>\n
DS Kay\u0131tlar\u0131n\u0131n \u00dcst B\u00f6lgeye G\u00f6nderilmesi<\/h4>\n
DNSSEC g\u00fcven zincirinin tamamlanmas\u0131 i\u00e7in, \u00fcst b\u00f6lgenin (parent zone) sizin KSK’nizin bir \u00f6zetini (hash) i\u00e7eren bir DS<\/code> (Delegation Signer) kayd\u0131na sahip olmas\u0131 gerekir. Bu, \u00fcst b\u00f6lgenin sizin alt b\u00f6lgenizi imzalad\u0131\u011f\u0131n\u0131n kan\u0131t\u0131d\u0131r.<\/p>\n
ldns-keygen<\/code> arac\u0131, KSK’niz i\u00e7in DS kayd\u0131n\u0131 olu\u015fturman\u0131za yard\u0131mc\u0131 olabilir:<\/p>\n
sudo ldns-keygen -f KSK -s 2048 -a RSASHA256 -n KSK -r \/dev\/urandom example.com.<\/code><\/pre>\n
Bu komut asl\u0131nda anahtar olu\u015fturur. DS kayd\u0131n\u0131 \u00fcretmek i\u00e7in varolan KSK dosyas\u0131n\u0131 kullanmal\u0131y\u0131z.
\nKSK anahtar\u0131n\u0131z\u0131n ad\u0131n\u0131 kullanarak (\u00f6rne\u011fin Kexample.com.+008+XXXXX.key<\/code>) DS kayd\u0131n\u0131 a\u015fa\u011f\u0131daki \u015fekilde olu\u015fturabilirsiniz:<\/p>\n
sudo ldns-gen-ds -f Kexample.com.+008+XXXXX.key example.com.<\/code><\/pre>\n
Bu komut, a\u015fa\u011f\u0131daki gibi bir \u00e7\u0131kt\u0131 verecektir:<\/p>\n
example.com. IN DS 12345 8 2 1234567890ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890<\/code><\/pre>\n
Bu DS<\/code> kayd\u0131n\u0131, alan ad\u0131n\u0131z\u0131 kaydetti\u011finiz kay\u0131t kurulu\u015funun (registrar) web aray\u00fcz\u00fc \u00fczerinden \u00fcst b\u00f6lgeye (\u00f6rne\u011fin .com<\/code> b\u00f6lgesi) g\u00f6ndermeniz gerekir. Bu ad\u0131m tamamland\u0131\u011f\u0131nda, example.com<\/code> i\u00e7in DNSSEC g\u00fcven zinciri tamamen kurulmu\u015f olacakt\u0131r.<\/p>\n
\u00c7evrimi\u00e7i DNSSEC do\u011frulay\u0131c\u0131lar\u0131 da kullanabilirsiniz:
\n*   [Verisign DNSSEC Analyzer](https:\/\/dnssec-analyzer.verisignlabs.com\/)
\n*   [DNSViz](https:\/\/dnsviz.net\/)<\/p>\n
Bu ara\u00e7lar, alan ad\u0131n\u0131z i\u00e7in DNSSEC kurulumunuzu analiz eder ve herhangi bir sorun olup olmad\u0131\u011f\u0131n\u0131 g\u00f6rsel olarak g\u00f6sterir.<\/p>\n
DNSSEC Anahtar Y\u00f6netimi ve Rotasyonu<\/h3>\n
DNSSEC’in etkin ve g\u00fcvenli kalmas\u0131 i\u00e7in anahtar y\u00f6netimi ve d\u00fczenli anahtar rotasyonu hayati \u00f6neme sahiptir. Anahtarlar\u0131n sonsuza kadar ge\u00e7erli kalmas\u0131 g\u00fcvenlik riskleri ta\u015f\u0131r.<\/p>\n
*   ZSK Rotasyonu:<\/strong> ZSK’ler, KSK’lerden daha s\u0131k (genellikle 1-3 ayda bir) de\u011fi\u015ftirilir. ZSK rotasyonu, eski ZSK’n\u0131n imzalar\u0131n\u0131n s\u00fcresi dolmadan yeni bir ZSK ile b\u00f6lgeyi imzalamay\u0131 ve eski ZSK’y\u0131 zone dosyas\u0131ndan kald\u0131rmay\u0131 i\u00e7erir. Bu i\u015flem genellikle otomatize edilmi\u015f betiklerle yap\u0131l\u0131r.
\n*   KSK Rotasyonu:<\/strong> KSK’ler daha uzun \u00f6m\u00fcrl\u00fcd\u00fcr (1-2 y\u0131l) ve rotasyonlar\u0131 daha karma\u015f\u0131kt\u0131r \u00e7\u00fcnk\u00fc DS kayd\u0131n\u0131n \u00fcst b\u00f6lgede de g\u00fcncellenmesini gerektirir. KSK rotasyonu, genellikle “\u00f6nceden yay\u0131nlama” (pre-publication) veya “\u00e7ift imzalama” (double-signing) gibi tekniklerle ger\u00e7ekle\u015ftirilir. Bu s\u00fcre\u00e7, yeni KSK’n\u0131n yay\u0131nlanmas\u0131n\u0131, DS kayd\u0131n\u0131n \u00fcst b\u00f6lgede g\u00fcncellenmesini ve ard\u0131ndan eski KSK’n\u0131n kald\u0131r\u0131lmas\u0131n\u0131 i\u00e7erir.<\/p>\n
Manuel rotasyon ad\u0131mlar\u0131 \u015funlar\u0131 i\u00e7erir:
\n1.  Yeni anahtar \u00e7iftini olu\u015fturma.
\n2.  Zone dosyas\u0131n\u0131 hem eski hem de yeni anahtarlarla imzalama (KSK rotasyonunda DS kayd\u0131n\u0131 g\u00fcncelleme).
\n3.  NSD’yi yeniden y\u00fckleme.
\n4.  Eski anahtar\u0131 kald\u0131rma.
\n5.  Zone dosyas\u0131n\u0131 sadece yeni anahtarla yeniden imzalama.
\n6.  NSD’yi yeniden y\u00fckleme.<\/p>\n
Bu i\u015flemlerin karma\u015f\u0131kl\u0131\u011f\u0131 nedeniyle, otomatize edilmi\u015f DNSSEC ara\u00e7lar\u0131 (\u00f6rne\u011fin BIND’deki dnssec-keymgr<\/code> veya PowerDNS’deki pdnsutil<\/code>) tercih edilir. NSD i\u00e7in, bu t\u00fcr otomasyonlar\u0131 kendi betiklerinizle veya harici ara\u00e7larla sa\u011flaman\u0131z gerekebilir.<\/p>\n
S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h3>\n
DNSSEC kurulumu ve y\u00f6netimi s\u0131ras\u0131nda baz\u0131 yayg\u0131n sorunlarla kar\u015f\u0131la\u015f\u0131labilir:<\/p>\n
*   \u0130mza S\u00fcresinin Dolmas\u0131 (Expired Signatures):<\/strong> E\u011fer zone dosyas\u0131 d\u00fczenli olarak yeniden imzalanmazsa, RRSIG<\/code> kay\u0131tlar\u0131n\u0131n ge\u00e7erlilik s\u00fcresi dolar. Bu durumda, DNSSEC do\u011frulay\u0131c\u0131lar\u0131 b\u00f6lgenizi ge\u00e7ersiz olarak kabul eder ve DNS \u00e7\u00f6z\u00fcmlemesi ba\u015far\u0131s\u0131z olur.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> Zone dosyas\u0131n\u0131 d\u00fczenli olarak (\u00f6rne\u011fin cron job ile) yeniden imzalay\u0131n ve NSD’yi yeniden y\u00fckleyin.
\n*   Anahtar Uyumsuzluklar\u0131:<\/strong> Zone dosyas\u0131nda tan\u0131mlanan DNSKEY<\/code> kay\u0131tlar\u0131 ile ldns-signzone<\/code> komutunda kullan\u0131lan \u00f6zel anahtarlar aras\u0131nda uyumsuzluk olabilir.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> Anahtar dosyalar\u0131n\u0131n do\u011fru adlar\u0131n\u0131 ve yollar\u0131n\u0131 kulland\u0131\u011f\u0131n\u0131zdan emin olun.
\n*   DS Kay\u0131t Hatalar\u0131:<\/strong> \u00dcst b\u00f6lgedeki DS kayd\u0131 yanl\u0131\u015fsa veya g\u00fcncel de\u011filse, g\u00fcven zinciri k\u0131r\u0131l\u0131r.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> DS kayd\u0131n\u0131n do\u011fru oldu\u011funu ve \u00fcst b\u00f6lgede g\u00fcncel olarak yay\u0131nland\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n. ldns-gen-ds<\/code> ile olu\u015fturdu\u011funuz kayd\u0131 dikkatlice kopyalay\u0131n.
\n*   NSD Hata G\u00fcnl\u00fckleri:<\/strong> NSD’nin \/var\/log\/nsd.log<\/code> veya syslog<\/code> dosyalar\u0131ndaki g\u00fcnl\u00fckleri, sorun giderme i\u00e7in paha bi\u00e7ilmez bilgiler i\u00e7erir.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> Hata g\u00fcnl\u00fcklerini d\u00fczenli olarak kontrol edin ve g\u00f6rd\u00fc\u011f\u00fcn\u00fcz hatalar\u0131 ara\u015ft\u0131r\u0131n. nsd-checkconf<\/code> ve nsd-control reload<\/code> komutlar\u0131n\u0131n \u00e7\u0131kt\u0131s\u0131n\u0131 dikkatlice inceleyin.
\n*   Dosya \u0130zinleri:<\/strong> NSD’nin zone dosyalar\u0131na ve anahtar dosyalar\u0131na eri\u015fim izinleri yetersiz olabilir.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> chown<\/code> ve chmod<\/code> komutlar\u0131n\u0131 kullanarak nsd<\/code> kullan\u0131c\u0131s\u0131n\u0131n gerekli dosyalara okuma eri\u015fimine sahip oldu\u011fundan emin olun.<\/p>\n
Sonu\u00e7<\/h3>\n
DNSSEC, internet g\u00fcvenli\u011fi i\u00e7in kritik bir teknolojidir ve DNS zehirlenmesi gibi sald\u0131r\u0131lara kar\u015f\u0131 \u00f6nemli bir koruma sa\u011flar. NSD gibi yetkili bir isim sunucusuyla DNSSEC’i yap\u0131land\u0131rmak, alan ad\u0131n\u0131z\u0131n g\u00fcvenli\u011fini art\u0131rman\u0131n etkili bir yoludur. Ubuntu 14.04 \u00fczerinde NSD ile DNSSEC kurulumu, ldnsutils<\/code> paketindeki ldns-keygen<\/code> ve ldns-signzone<\/code> gibi ara\u00e7lar\u0131 kullanarak anahtarlar\u0131n olu\u015fturulmas\u0131, zone dosyas\u0131n\u0131n imzalanmas\u0131 ve NSD’nin bu imzal\u0131 dosyay\u0131 sunacak \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131 ad\u0131mlar\u0131n\u0131 i\u00e7erir.<\/p>\n
Ba\u015far\u0131l\u0131 bir DNSSEC da\u011f\u0131t\u0131m\u0131, sadece ilk kurulumla bitmez; anahtar rotasyonu ve d\u00fczenli izleme gibi s\u00fcrekli y\u00f6netim gerektirir. Bu makalede a\u00e7\u0131klanan ad\u0131mlar\u0131 dikkatlice takip ederek ve gerekli y\u00f6netim s\u00fcre\u00e7lerini uygulayarak, alan ad\u0131n\u0131z i\u00e7in sa\u011flam ve g\u00fcvenli bir DNSSEC altyap\u0131s\u0131 olu\u015fturabilirsiniz. DNSSEC’in benimsenmesi, internetin genel g\u00fcvenli\u011fini art\u0131rma yolunda \u00f6nemli bir ad\u0131md\u0131r ve yetkili isim sunucusu operat\u00f6rleri i\u00e7in birincil \u00f6ncelik olmal\u0131d\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)\nGiri\u015f ve DNSSEC Temelleri\n\u0130nternet’in temel ta\u015flar\u0131ndan biri olan Alan Ad\u0131 Siste","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-37738","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nNSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)\" \/>\n<meta property=\"og:description\" content=\"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde) Giri\u015f ve DNSSEC Temelleri \u0130nternet'in temel ta\u015flar\u0131ndan biri olan Alan Ad\u0131 Siste\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-13T22:40:42+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"16 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)\",\"datePublished\":\"2026-01-13T22:40:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/\"},\"wordCount\":2504,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/\",\"name\":\"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-01-13T22:40:42+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/","og_locale":"tr_TR","og_type":"article","og_title":"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)","og_description":"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde) Giri\u015f ve DNSSEC Temelleri \u0130nternet'in temel ta\u015flar\u0131ndan biri olan Alan Ad\u0131 Siste","og_url":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-01-13T22:40:42+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"16 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)","datePublished":"2026-01-13T22:40:42+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/"},"wordCount":2504,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/","url":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/","name":"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde) - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-01-13T22:40:42+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/nsd-isim-sunucusunda-dnssec-kurulumu-ubuntu-14-04-uzerinde\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"NSD \u0130sim Sunucusunda DNSSEC Kurulumu (Ubuntu 14.04 \u00dczerinde)"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37738","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=37738"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37738\/revisions"}],"predecessor-version":[{"id":37739,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37738\/revisions\/37739"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=37738"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=37738"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=37738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}