{"id":38900,"date":"2026-02-10T11:00:33","date_gmt":"2026-02-10T08:00:33","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/"},"modified":"2026-02-10T11:00:33","modified_gmt":"2026-02-10T08:00:33","slug":"servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/","title":{"rendered":"Servis Mesh&#8217;te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131"},"content":{"rendered":"<h2>Servis Mesh&#8217;te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131<\/h2>\n<p>Modern bulut tabanl\u0131 uygulamalar, genellikle mikroservis mimarisiyle geli\u015ftirilmektedir. Bu da\u011f\u0131t\u0131k yap\u0131lar, esneklik ve \u00f6l\u00e7eklenebilirlik sunarken, servisler aras\u0131 ileti\u015fimin g\u00fcvenli\u011fini sa\u011flamak \u00f6nemli bir zorluk haline gelmi\u015ftir. \u0130\u015fte tam bu noktada Servis Mesh ve onun sundu\u011fu mTLS (Kar\u015f\u0131l\u0131kl\u0131 TLS) \u00f6zelli\u011fi devreye girerek, mikroservisler aras\u0131ndaki ileti\u015fimi u\u00e7tan uca \u015fifreleyerek ve kar\u015f\u0131l\u0131kl\u0131 kimlik do\u011frulama ile g\u00fcvence alt\u0131na alman\u0131n en etkili yollar\u0131ndan birini sunar.<\/p>\n<h2>1. Servis Mesh ve Mikroservis Mimarilerinde G\u00fcvenlik \u0130htiyac\u0131<\/h2>\n<h3>1.1. Mikroservislerin Y\u00fckseli\u015fi ve Karma\u015f\u0131kl\u0131klar<\/h3>\n<p>Mikroservis mimarisi, b\u00fcy\u00fck ve monolitik uygulamalar\u0131 daha k\u00fc\u00e7\u00fck, ba\u011f\u0131ms\u0131z ve y\u00f6netilebilir servis par\u00e7alar\u0131na ay\u0131rarak geli\u015ftirme h\u0131z\u0131n\u0131, esnekli\u011fi ve hata tolerans\u0131n\u0131 art\u0131rm\u0131\u015ft\u0131r. Ancak bu da\u011f\u0131t\u0131k yap\u0131, servisler aras\u0131 ileti\u015fimin y\u00f6netimini ve g\u00fcvenli\u011fini de karma\u015f\u0131k hale getirmi\u015ftir. A\u011fdaki her bir servis, potansiyel bir sald\u0131r\u0131 y\u00fczeyi olu\u015ftururken, farkl\u0131 teknolojilerle yaz\u0131lm\u0131\u015f servisler aras\u0131nda g\u00fcvenli ve tutarl\u0131 bir ileti\u015fim sa\u011flamak ba\u015fl\u0131 ba\u015f\u0131na bir meydan okumad\u0131r.<\/p>\n<h3>1.2. Servis Mesh Nedir? Temel Kavramlar<\/h3>\n<p>Servis Mesh, mikroservis tabanl\u0131 uygulamalarda servisler aras\u0131 ileti\u015fimi y\u00f6netmek, kontrol etmek ve g\u00f6zlemlemek i\u00e7in \u00f6zel olarak tasarlanm\u0131\u015f bir altyap\u0131 katman\u0131d\u0131r. Temel olarak iki ana bile\u015fenden olu\u015fur:<\/p>\n<ul>\n<li><b>Veri D\u00fczlemi (Data Plane):<\/b> Servis trafi\u011fini y\u00f6neten, y\u00f6nlendiren, y\u00fck dengeleyen ve \u015fifreleyen proxy&#8217;lerden (genellikle Envoy gibi) olu\u015fur. Her bir servis \u00f6rne\u011finin yan\u0131nda (sidecar olarak) \u00e7al\u0131\u015f\u0131r.<\/li>\n<li><b>Kontrol D\u00fczlemi (Control Plane):<\/b> Veri d\u00fczlemindeki proxy&#8217;leri yap\u0131land\u0131ran, politikalar\u0131 uygulayan, sertifika y\u00f6netimi yapan ve telemetri verilerini toplayan merkezi bir y\u00f6netim katman\u0131d\u0131r. Istio, Linkerd ve Consul Connect gibi \u00e7\u00f6z\u00fcmler pop\u00fcler Servis Mesh uygulamalar\u0131d\u0131r.<\/li>\n<\/ul>\n<p>Servis Mesh, geli\u015ftiricilerin g\u00fcvenlik, g\u00f6zlemlenebilirlik ve trafik y\u00f6netimi gibi a\u011f katman\u0131 sorunlar\u0131yla u\u011fra\u015fmak yerine i\u015f mant\u0131\u011f\u0131na odaklanmalar\u0131n\u0131 sa\u011flar.<\/p>\n<h3>1.3. Geleneksel G\u00fcvenlik Yakla\u015f\u0131mlar\u0131n\u0131n Yetersizlikleri<\/h3>\n<p>Geleneksel olarak, mikroservisler aras\u0131 g\u00fcvenlik genellikle uygulama katman\u0131nda veya a\u011f katman\u0131nda k\u0131smi \u00e7\u00f6z\u00fcmlerle sa\u011flanmaya \u00e7al\u0131\u015f\u0131l\u0131rd\u0131. API a\u011f ge\u00e7itleri ile d\u0131\u015f d\u00fcnyaya a\u00e7\u0131lan u\u00e7 noktalar\u0131n g\u00fcvenli\u011fi sa\u011flanabilirken, dahili servisler aras\u0131 ileti\u015fim genellikle daha az denetlenirdi. Bu durum, &#8220;i\u00e7eriden gelen tehditler&#8221; veya &#8220;yanal hareket&#8221; sald\u0131r\u0131lar\u0131 i\u00e7in bir a\u00e7\u0131k kap\u0131 b\u0131rakabilirdi. Her servisin kendi g\u00fcvenlik mekanizmas\u0131n\u0131 uygulamas\u0131 ise tutars\u0131zl\u0131k, y\u00fcksek geli\u015ftirme maliyeti ve hata riskini beraberinde getiriyordu.<\/p>\n<h2>2. mTLS (Kar\u015f\u0131l\u0131kl\u0131 TLS) Nedir ve Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h2>\n<h3>2.1. TLS&#8217;in K\u0131sa Bir \u00d6zeti<\/h3>\n<p>TLS (Transport Layer Security), internet \u00fczerindeki ileti\u015fimi \u015fifrelemek ve kimlik do\u011frulamas\u0131 yapmak i\u00e7in kullan\u0131lan bir protokold\u00fcr. Genellikle web siteleri ile taray\u0131c\u0131lar aras\u0131ndaki ileti\u015fimi g\u00fcvence alt\u0131na almak i\u00e7in kullan\u0131l\u0131r (HTTPS). TLS&#8217;te, sunucu bir sertifika sunarak kimli\u011fini kan\u0131tlar ve istemci bu sertifikay\u0131 do\u011frulayarak sunucunun ger\u00e7ek oldu\u011fundan emin olur. \u0130leti\u015fim daha sonra \u015fifrelenir. Bu, tek y\u00f6nl\u00fc bir kimlik do\u011frulama s\u00fcrecidir; sadece sunucunun kimli\u011fi do\u011frulan\u0131r, istemcinin de\u011fil.<\/p>\n<h3>2.2. mTLS&#8217;in Fark\u0131: \u00c7ift Y\u00f6nl\u00fc Kimlik Do\u011frulama<\/h3>\n<p>mTLS (mutual TLS) veya kar\u015f\u0131l\u0131kl\u0131 TLS, standart TLS&#8217;in bir uzant\u0131s\u0131d\u0131r. Tek y\u00f6nl\u00fc TLS&#8217;ten farkl\u0131 olarak, mTLS&#8217;te hem istemci hem de sunucu birbirlerinin kimli\u011fini do\u011frular. Bu s\u00fcre\u00e7 \u015fu ad\u0131mlarla i\u015fler:<\/p>\n<ol>\n<li>\u0130stemci, sunucuya ba\u011flant\u0131 iste\u011fi g\u00f6nderir.<\/li>\n<li>Sunucu, istemciye kendi sunucu sertifikas\u0131n\u0131 g\u00f6nderir.<\/li>\n<li>\u0130stemci, sunucu sertifikas\u0131n\u0131 do\u011frulad\u0131ktan sonra, kendi istemci sertifikas\u0131n\u0131 sunucuya g\u00f6nderir.<\/li>\n<li>Sunucu, istemci sertifikas\u0131n\u0131 do\u011frulayarak istemcinin kimli\u011fini onaylar.<\/li>\n<li>Her iki taraf da birbirlerinin kimli\u011fini do\u011frulad\u0131ktan sonra, \u015fifrelenmi\u015f bir ileti\u015fim kanal\u0131 kurulur.<\/li>\n<\/ol>\n<p>Bu \u00e7ift y\u00f6nl\u00fc kimlik do\u011frulama, a\u011fdaki her iki taraf\u0131n da g\u00fcvenilir oldu\u011funu garanti eder.<\/p>\n<h3>2.3. Sertifika ve Anahtar Y\u00f6netiminin \u00d6nemi<\/h3>\n<p>mTLS&#8217;in temelini dijital sertifikalar ve \u00f6zel anahtarlar olu\u015fturur. Her servis, bir Sertifika Yetkilisi (CA) taraf\u0131ndan imzalanm\u0131\u015f kendi sertifikas\u0131na ve \u00f6zel anahtar\u0131na sahip olmal\u0131d\u0131r. Bu sertifikalar, servisin kimli\u011fini do\u011frulamak i\u00e7in kullan\u0131l\u0131r. Sertifikalar\u0131n olu\u015fturulmas\u0131, da\u011f\u0131t\u0131lmas\u0131, yenilenmesi ve iptal edilmesi (sertifika ya\u015fam d\u00f6ng\u00fcs\u00fc y\u00f6netimi) olduk\u00e7a karma\u015f\u0131k bir s\u00fcre\u00e7tir ve manuel olarak yap\u0131lmas\u0131 hataya a\u00e7\u0131kt\u0131r. Servis Mesh \u00e7\u00f6z\u00fcmleri, bu sertifika y\u00f6netimini otomatikle\u015ftirerek b\u00fcy\u00fck bir kolayl\u0131k sa\u011flar.<\/p>\n<h2>3. Servis Mesh Ortam\u0131nda mTLS&#8217;in Kritik Rol\u00fc<\/h2>\n<h3>3.1. S\u0131f\u0131r G\u00fcven (Zero Trust) Prensibi ve mTLS<\/h3>\n<p>&#8220;S\u0131f\u0131r G\u00fcven&#8221; (Zero Trust) g\u00fcvenlik modeli, a\u011f i\u00e7inde veya d\u0131\u015f\u0131nda hi\u00e7bir varl\u0131\u011fa otomatik olarak g\u00fcvenilmemesi gerekti\u011fini savunur. Her ileti\u015fim iste\u011fi, kimlik do\u011frulama ve yetkilendirme s\u00fcre\u00e7lerinden ge\u00e7melidir. Servis Mesh&#8217;teki mTLS, bu prensibin uygulanmas\u0131nda merkezi bir rol oynar. Her servisin kimli\u011fi do\u011frulanmadan ileti\u015fim kurmas\u0131na izin verilmez, bu da a\u011f i\u00e7indeki yanal hareket sald\u0131r\u0131lar\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde engeller.<\/p>\n<h3>3.2. U\u00e7tan Uca \u015eifreleme ve Veri B\u00fct\u00fcnl\u00fc\u011f\u00fc<\/h3>\n<p>mTLS, servisler aras\u0131 t\u00fcm ileti\u015fimi \u015fifreleyerek veri gizlili\u011fini sa\u011flar. Bu, hassas verilerin a\u011f i\u00e7inde dinlenmesini (eavesdropping) veya de\u011fi\u015ftirilmesini (tampering) \u00f6nler. Servis Mesh&#8217;in veri d\u00fczlemi proxy&#8217;leri, bu \u015fifreleme ve \u015fifre \u00e7\u00f6zme i\u015flemlerini otomatik olarak ger\u00e7ekle\u015ftirir, b\u00f6ylece uygulama kodunun bu karma\u015f\u0131kl\u0131klarla u\u011fra\u015fmas\u0131na gerek kalmaz.<\/p>\n<h3>3.3. Geli\u015fmi\u015f Eri\u015fim Kontrol\u00fc ve Yetkilendirme<\/h3>\n<p>Servis Mesh, mTLS ile sa\u011flanan g\u00fc\u00e7l\u00fc kimlik do\u011frulama \u00fczerine kurulu geli\u015fmi\u015f eri\u015fim kontrol\u00fc ve yetkilendirme politikalar\u0131 sunar. Bir servisin kimli\u011fi mTLS ile do\u011fruland\u0131ktan sonra, kontrol d\u00fczlemi bu kimli\u011fe dayanarak hangi servisin hangi di\u011fer servisle hangi i\u015flemleri yapabilece\u011fine dair kurallar uygulayabilir. \u00d6rne\u011fin, sadece &#8220;\u00f6deme&#8221; servisinin &#8220;banka&#8221; servisiyle ileti\u015fim kurmas\u0131na izin verilebilir. Bu, g\u00fcvenlik politikalar\u0131n\u0131 a\u011f katman\u0131nda, uygulama kodunu de\u011fi\u015ftirmeden tan\u0131mlama ve uygulama esnekli\u011fi sa\u011flar.<\/p>\n<h2>4. Servis Mesh \u00c7\u00f6z\u00fcmleriyle mTLS Uygulamas\u0131 (\u00d6rnek: Istio)<\/h2>\n<h3>4.1. Kontrol D\u00fczlemi ve Sertifika Yetkilisi (CA)<\/h3>\n<p>Servis Mesh \u00e7\u00f6z\u00fcmleri, mTLS&#8217;i etkinle\u015ftirmek i\u00e7in dahili bir Sertifika Yetkilisi (CA) veya harici bir CA ile entegrasyon sunar. \u00d6rne\u011fin, Istio&#8217;da kontrol d\u00fczleminin bir par\u00e7as\u0131 olan Istiod, Citadel ad\u0131 verilen bir bile\u015fen arac\u0131l\u0131\u011f\u0131yla servis kimliklerini y\u00f6netir ve otomatik olarak sertifikalar olu\u015fturup da\u011f\u0131t\u0131r. Bu sertifikalar, her servisin sidecar proxy&#8217;sine g\u00fcvenli bir \u015fekilde aktar\u0131l\u0131r.<\/p>\n<h3>4.2. Veri D\u00fczlemi Proxy&#8217;leri ve Kimlik Do\u011frulama<\/h3>\n<p>Veri d\u00fczlemindeki proxy&#8217;ler (\u00f6rne\u011fin Envoy), servisler ad\u0131na mTLS el s\u0131k\u0131\u015fmas\u0131n\u0131 ger\u00e7ekle\u015ftirir. Bir servis ba\u015fka bir servisle ileti\u015fim kurmak istedi\u011finde, istek \u00f6nce kaynak servisin sidecar proxy&#8217;sine gider. Bu proxy, hedef servisin proxy&#8217;si ile mTLS el s\u0131k\u0131\u015fmas\u0131 yapar, kimlikleri do\u011frular ve ard\u0131ndan \u015fifrelenmi\u015f bir kanal \u00fczerinden ileti\u015fimi sa\u011flar. Bu s\u00fcre\u00e7, uygulama katman\u0131 i\u00e7in tamamen \u015feffaft\u0131r.<\/p>\n<h3>4.3. Istio ile mTLS Yap\u0131land\u0131rmas\u0131: Bir \u00d6rnek<\/h3>\n<p>Istio&#8217;da mTLS&#8217;i etkinle\u015ftirmek olduk\u00e7a basittir ve genellikle <code>PeerAuthentication<\/code> ve <code>DestinationRule<\/code> kaynaklar\u0131 kullan\u0131larak yap\u0131l\u0131r. A\u015fa\u011f\u0131daki \u00f6rnek, t\u00fcm servisler i\u00e7in kat\u0131 (STRICT) mTLS&#8217;i nas\u0131l etkinle\u015ftirebilece\u011finizi g\u00f6stermektedir:<\/p>\n<pre><code class=\"language-yaml\">apiVersion: security.istio.io\/v1beta1\nkind: PeerAuthentication\nmetadata:\n  name: default\n  namespace: istio-system\nspec:\n  mtls:\n    mode: STRICT<\/pre>\n<p><\/code><br \/>\nBu <code>PeerAuthentication<\/code> kayna\u011f\u0131, <code>istio-system<\/code> namespace'indeki t\u00fcm servisler i\u00e7in mTLS modunu <code>STRICT<\/code> olarak ayarlar. Bu, gelen t\u00fcm isteklerin mTLS ile kimlik do\u011frulamas\u0131 yapmas\u0131n\u0131 gerektirir.<\/p>\n<p>Ayr\u0131ca, giden trafi\u011fin de mTLS kullanmas\u0131n\u0131 sa\u011flamak i\u00e7in bir <code>DestinationRule<\/code> tan\u0131mlamak gerekebilir:<\/p>\n<pre><code class=\"language-yaml\">apiVersion: networking.istio.io\/v1beta1\nkind: DestinationRule\nmetadata:\n  name: default\n  namespace: istio-system\nspec:\n  host: \"*.local\" # T\u00fcm servisleri hedefle\n  trafficPolicy:\n    tls:\n      mode: ISTIO_MUTUAL # Istio'nun kendi mTLS'ini kullan<\/pre>\n<p><\/code><br \/>\nBu <code>DestinationRule<\/code>, <code>*.local<\/code> host'una (yani Servis Mesh i\u00e7indeki t\u00fcm servislere) giden trafi\u011fin <code>ISTIO_MUTUAL<\/code> modunda mTLS kullanmas\u0131n\u0131 sa\u011flar. Bu sayede, servisler aras\u0131 ileti\u015fim u\u00e7tan uca g\u00fcvence alt\u0131na al\u0131n\u0131r.<\/p>\n<h2>5. mTLS Kullan\u0131m\u0131n\u0131n Avantajlar\u0131 ve Potansiyel Zorluklar\u0131<\/h2>\n<h3>5.1. Sa\u011flad\u0131\u011f\u0131 G\u00fcvenlik ve Operasyonel Faydalar<\/h3>\n<p>Servis Mesh'te mTLS kullanman\u0131n bir\u00e7ok \u00f6nemli avantaj\u0131 vard\u0131r:<\/p>\n<ul>\n<li><b>Geli\u015fmi\u015f G\u00fcvenlik:<\/b> S\u0131f\u0131r G\u00fcven prensibini uygulayarak i\u00e7eriden ve d\u0131\u015far\u0131dan gelen tehditlere kar\u015f\u0131 g\u00fc\u00e7l\u00fc bir savunma sa\u011flar.<\/li>\n<li><b>Otomatik Sertifika Y\u00f6netimi:<\/b> Servis Mesh, sertifika ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fc (olu\u015fturma, da\u011f\u0131tma, yenileme) otomatikle\u015ftirerek operasyonel y\u00fck\u00fc azalt\u0131r ve insan hatas\u0131n\u0131 minimize eder.<\/li>\n<li><b>Uygulama \u015eeffafl\u0131\u011f\u0131:<\/b> mTLS, proxy'ler taraf\u0131ndan y\u00f6netildi\u011fi i\u00e7in uygulama kodunda herhangi bir de\u011fi\u015fiklik yap\u0131lmas\u0131na gerek kalmaz. Geli\u015ftiriciler i\u015f mant\u0131\u011f\u0131na odaklanabilir.<\/li>\n<li><b>Uyumluluk:<\/b> GDPR, HIPAA gibi reg\u00fclasyonlara uyum sa\u011flamak i\u00e7in gerekli olan veri gizlili\u011fi ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc destekler.<\/li>\n<li><b>Detayl\u0131 G\u00f6zlemlenebilirlik:<\/b> Kimli\u011fi do\u011frulanm\u0131\u015f trafik, daha detayl\u0131 g\u00fcvenlik denetimi ve izleme imkan\u0131 sunar.<\/li>\n<\/ul>\n<h3>5.2. Performans ve Y\u00f6netimsel Y\u00fckler<\/h3>\n<p>mTLS'in baz\u0131 potansiyel zorluklar\u0131 da bulunmaktad\u0131r:<\/p>\n<ul>\n<li><b>Performans Etkisi:<\/b> \u015eifreleme ve \u015fifre \u00e7\u00f6zme i\u015flemleri ile sertifika de\u011fi\u015fimi, a\u011f gecikmesini ve CPU kullan\u0131m\u0131n\u0131 bir miktar art\u0131rabilir. Ancak modern proxy'ler ve donan\u0131m h\u0131zland\u0131rma ile bu etki genellikle kabul edilebilir d\u00fczeydedir.<\/li>\n<li><b>Karma\u015f\u0131kl\u0131k:<\/b> Servis Mesh'in kendisi, \u00f6zellikle b\u00fcy\u00fck ve karma\u015f\u0131k ortamlarda, ek bir y\u00f6netim katman\u0131 ve \u00f6\u011frenme e\u011frisi getirebilir.<\/li>\n<li><b>Kaynak T\u00fcketimi:<\/b> Her servisin yan\u0131nda \u00e7al\u0131\u015fan sidecar proxy'ler, ek bellek ve CPU kaynaklar\u0131 t\u00fcketir.<\/li>\n<li><b>Sertifika Y\u00f6netimi Zorluklar\u0131 (Manuel Durumlarda):<\/b> Servis Mesh kullan\u0131lmad\u0131\u011f\u0131nda, sertifikalar\u0131n manuel olarak y\u00f6netimi b\u00fcy\u00fck bir operasyonel y\u00fck ve hata kayna\u011f\u0131d\u0131r. Servis Mesh bu y\u00fck\u00fc b\u00fcy\u00fck \u00f6l\u00e7\u00fcde ortadan kald\u0131r\u0131r.<\/li>\n<\/ul>\n<h3>5.3. En \u0130yi Uygulamalar ve \u00c7\u00f6z\u00fcmler<\/h3>\n<p>mTLS'i Servis Mesh ile uygularken \u015fu en iyi uygulamalar dikkate al\u0131nmal\u0131d\u0131r:<\/p>\n<ul>\n<li><b>A\u015famal\u0131 Ge\u00e7i\u015f:<\/b> mTLS'i t\u00fcm ortamda bir anda zorunlu k\u0131lmak yerine, permissive (izin veren) modda ba\u015flay\u0131p kademeli olarak STRICT (kat\u0131) moda ge\u00e7i\u015f yapmak sorunsuz bir ge\u00e7i\u015f sa\u011flar.<\/li>\n<li><b>\u0130zleme ve G\u00f6zlemlenebilirlik:<\/b> mTLS'in etkinli\u011fini ve performans etkisini s\u00fcrekli izlemek i\u00e7in kapsaml\u0131 telemetri ve g\u00fcnl\u00fck kayd\u0131 \u00f6nemlidir.<\/li>\n<li><b>Sertifika Yenileme Otomasyonu:<\/b> Servis Mesh'in sertifika yenileme mekanizmalar\u0131n\u0131n do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun ve periyodik denetimler yap\u0131n.<\/li>\n<li><b>Politika Y\u00f6netimi:<\/b> Eri\u015fim kontrol politikalar\u0131n\u0131 mTLS kimlik do\u011frulama \u00fczerine in\u015fa ederek g\u00fcvenlik duru\u015funu g\u00fc\u00e7lendirin.<\/li>\n<\/ul>\n<h2>Sonu\u00e7<\/h2>\n<p>Servis Mesh'te mTLS, mikroservis tabanl\u0131 uygulamalar\u0131n g\u00fcvenli\u011fini sa\u011flaman\u0131n kritik ve modern bir yoludur. A\u011fdaki her servisin kimli\u011fini do\u011frulayarak ve t\u00fcm ileti\u015fimi \u015fifreleyerek \"S\u0131f\u0131r G\u00fcven\" mimarisinin temelini olu\u015fturur. Sertifika y\u00f6netimini otomatikle\u015ftirme, uygulama katman\u0131ndan ba\u011f\u0131ms\u0131z g\u00fcvenlik sa\u011flama ve geli\u015fmi\u015f eri\u015fim kontrol\u00fc gibi avantajlar\u0131yla, da\u011f\u0131t\u0131k sistemlerde g\u00fcvenlik duru\u015funu \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirir. Her ne kadar performans ve y\u00f6netimsel karma\u015f\u0131kl\u0131k gibi baz\u0131 zorluklar\u0131 olsa da, modern bulut yerel uygulamalar i\u00e7in sundu\u011fu g\u00fcvenlik faydalar\u0131 bu zorluklar\u0131n \u00fcstesinden gelmeyi de\u011ferli k\u0131lmaktad\u0131r. Servis Mesh'in sa\u011flad\u0131\u011f\u0131 bu yetenek, gelece\u011fin g\u00fcvenli mikroservis ileti\u015fiminin vazge\u00e7ilmez bir par\u00e7as\u0131 olmaya devam edecektir.<\/p>\n<h2>S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h2>\n<h3>mTLS nedir ve neden \u00f6nemlidir?<\/h3>\n<p>mTLS (mutual TLS), hem istemcinin hem de sunucunun birbirlerinin kimli\u011fini dijital sertifikalar arac\u0131l\u0131\u011f\u0131yla do\u011frulad\u0131\u011f\u0131, \u00e7ift y\u00f6nl\u00fc bir kimlik do\u011frulama ve \u015fifreleme mekanizmas\u0131d\u0131r. Mikroservis mimarilerinde her servisin g\u00fcvenli\u011fini sa\u011flayarak, \"S\u0131f\u0131r G\u00fcven\" prensibini uygulamak ve yanal hareket sald\u0131r\u0131lar\u0131n\u0131 engellemek i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n<h3>Servis Mesh'te mTLS kullanmak performans\u0131 etkiler mi?<\/h3>\n<p>Evet, mTLS \u015fifreleme ve \u015fifre \u00e7\u00f6zme i\u015flemleri nedeniyle bir miktar performans ek y\u00fck\u00fc getirebilir. Ancak, modern Servis Mesh proxy'leri (\u00f6rne\u011fin Envoy) bu i\u015flemleri optimize etmek i\u00e7in tasarlanm\u0131\u015ft\u0131r ve \u00e7o\u011fu durumda performans etkisi kabul edilebilir d\u00fczeydedir. Donan\u0131m h\u0131zland\u0131rma ve do\u011fru yap\u0131land\u0131rma ile bu etki daha da azalt\u0131labilir.<\/p>\n<h3>Hangi Servis Mesh \u00e7\u00f6z\u00fcmleri mTLS'i destekler?<\/h3>\n<p>Pop\u00fcler Servis Mesh \u00e7\u00f6z\u00fcmlerinin \u00e7o\u011fu, mTLS'i yerle\u015fik bir \u00f6zellik olarak destekler. Bunlara \u00f6rnek olarak Istio, Linkerd ve Consul Connect verilebilir. Bu \u00e7\u00f6z\u00fcmler, sertifika ya\u015fam d\u00f6ng\u00fcs\u00fc y\u00f6netimini ve mTLS yap\u0131land\u0131rmas\u0131n\u0131 otomatikle\u015ftirerek b\u00fcy\u00fck kolayl\u0131k sa\u011flarlar.<\/p>\n<h3>mTLS'i etkinle\u015ftirmek i\u00e7in hangi ad\u0131mlar\u0131 izlemeliyim?<\/h3>\n<p>Genel olarak, bir Servis Mesh \u00e7\u00f6z\u00fcm\u00fc (\u00f6rne\u011fin Istio) kurduktan sonra, kontrol d\u00fczlemi arac\u0131l\u0131\u011f\u0131yla mTLS politikalar\u0131n\u0131 yap\u0131land\u0131rman\u0131z gerekir. \u00c7o\u011fu Servis Mesh, varsay\u0131lan olarak \"permissive\" (izin veren) mTLS modunda ba\u015flar, bu da hem mTLS'li hem de mTLS'siz trafi\u011fe izin verir. Tam g\u00fcvenlik i\u00e7in bunu \"STRICT\" (kat\u0131) moda ge\u00e7irerek t\u00fcm servisler aras\u0131 ileti\u015fimin mTLS ile yap\u0131lmas\u0131n\u0131 zorunlu k\u0131lman\u0131z \u00f6nerilir.<\/p>\n","protected":false},"excerpt":{"rendered":"Servis Mesh&#8217;te mTLS kullanman\u0131n bir\u00e7ok \u00f6nemli avantaj\u0131 vard\u0131r:","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-38900","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Servis Mesh&#039;te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Servis Mesh&#039;te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131\" \/>\n<meta property=\"og:description\" content=\"Servis Mesh&#039;te mTLS kullanman\u0131n bir\u00e7ok \u00f6nemli avantaj\u0131 vard\u0131r:\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-10T08:00:33+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Servis Mesh&#8217;te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131\",\"datePublished\":\"2026-02-10T08:00:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/\"},\"wordCount\":2216,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/\",\"name\":\"Servis Mesh'te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-02-10T08:00:33+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Servis Mesh&#8217;te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Servis Mesh'te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Servis Mesh'te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131","og_description":"Servis Mesh'te mTLS kullanman\u0131n bir\u00e7ok \u00f6nemli avantaj\u0131 vard\u0131r:","og_url":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-02-10T08:00:33+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"11 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Servis Mesh&#8217;te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131","datePublished":"2026-02-10T08:00:33+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/"},"wordCount":2216,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/","url":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/","name":"Servis Mesh'te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-02-10T08:00:33+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/servis-meshte-mtls-guvenli-mikroservis-iletisiminin-temel-tasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Servis Mesh&#8217;te mTLS: G\u00fcvenli Mikroservis \u0130leti\u015fiminin Temel Ta\u015f\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/38900","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=38900"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/38900\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=38900"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=38900"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=38900"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}