{"id":39500,"date":"2026-02-22T19:30:36","date_gmt":"2026-02-22T16:30:36","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/"},"modified":"2026-02-22T19:30:36","modified_gmt":"2026-02-22T16:30:36","slug":"aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/","title":{"rendered":"AWS Network Firewall&#8217;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f"},"content":{"rendered":"<h2>AWS Network Firewall&#8217;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f<\/h2>\n<p>G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, a\u011f trafi\u011finin b\u00fcy\u00fck bir k\u0131sm\u0131 gizlili\u011fi ve b\u00fct\u00fcnl\u00fc\u011f\u00fc sa\u011flamak amac\u0131yla TLS (Transport Layer Security) ile \u015fifrelenmektedir. Ancak bu \u015fifreleme, k\u00f6t\u00fc niyetli akt\u00f6rlerin zararl\u0131 yaz\u0131l\u0131mlar\u0131, veri s\u0131z\u0131nt\u0131lar\u0131n\u0131 veya komuta kontrol (C2) ileti\u015fimini gizlemesi i\u00e7in de bir kalkan g\u00f6revi g\u00f6rebilir. AWS Network Firewall, bu g\u00f6r\u00fcnmez tehditleri ortaya \u00e7\u0131karmak i\u00e7in TLS \u015fifre \u00e7\u00f6zme (decryption) yetene\u011fi sunarak, a\u011f g\u00fcvenli\u011fine yeni bir boyut kazand\u0131r\u0131r. Bu makale, AWS Network Firewall&#8217;\u0131n TLS \u015fifreleme ve \u015fifre \u00e7\u00f6zme mekanizmalar\u0131n\u0131, mimarisini ve en iyi uygulama y\u00f6ntemlerini detayl\u0131 bir \u015fekilde inceleyecektir.<\/p>\n<h2>AWS Network Firewall&#8217;a Genel Bak\u0131\u015f<\/h2>\n<p>AWS Network Firewall, Amazon Sanal \u00d6zel Bulut (VPC) ortamlar\u0131n\u0131z i\u00e7in y\u00f6netilen bir a\u011f g\u00fcvenlik hizmetidir. Geli\u015fmi\u015f tehdit korumas\u0131 sa\u011flamak \u00fczere tasarlanm\u0131\u015f olup, gelen ve giden t\u00fcm trafi\u011fi filtreleyebilir, izleyebilir ve kontrol edebilir.<\/p>\n<h3>Temel \u00d6zellikleri ve Avantajlar\u0131<\/h3>\n<p>AWS Network Firewall, durum bilgisi olan (stateful) ve durum bilgisi olmayan (stateless) kural gruplar\u0131, intrusion detection system (IDS) ve intrusion prevention system (IPS) yetenekleri, URL filtreleme ve domain filtreleme gibi kapsaml\u0131 \u00f6zellikler sunar. Tamamen y\u00f6netilen bir hizmet olmas\u0131 sayesinde, altyap\u0131 y\u00f6netimi y\u00fck\u00fcn\u00fc ortadan kald\u0131r\u0131r ve otomatik \u00f6l\u00e7eklenebilirlik sa\u011flar.<\/p>\n<h3>Neden AWS Network Firewall?<\/h3>\n<p>Geleneksel g\u00fcvenlik \u00e7\u00f6z\u00fcmlerinin aksine, AWS Network Firewall, AWS ekosistemiyle derinlemesine entegre \u00e7al\u0131\u015f\u0131r. Bu entegrasyon, g\u00fcvenlik politikalar\u0131n\u0131n merkezi olarak y\u00f6netilmesini, otomasyonu ve di\u011fer AWS hizmetleriyle (\u00f6rne\u011fin Amazon CloudWatch, AWS Firewall Manager) sorunsuz etkile\u015fimi m\u00fcmk\u00fcn k\u0131lar. \u00d6zellikle bulut tabanl\u0131 uygulamalar ve mikro hizmet mimarileri i\u00e7in tasarlanm\u0131\u015ft\u0131r.<\/p>\n<h3>Da\u011f\u0131t\u0131m Modelleri<\/h3>\n<p>AWS Network Firewall, VPC&#8217;nizin bir kenar\u0131nda (edge) veya merkezi bir g\u00fcvenlik VPC&#8217;sinde (transit gateway ile) da\u011f\u0131t\u0131labilir. Bu esneklik, farkl\u0131 a\u011f topolojilerine ve g\u00fcvenlik gereksinimlerine uyum sa\u011flamas\u0131na olanak tan\u0131r. Genellikle, t\u00fcm giden ve gelen trafi\u011fin firewall \u00fczerinden ge\u00e7mesi sa\u011flanarak kapsaml\u0131 koruma elde edilir.<\/p>\n<h2>TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zmenin \u00d6nemi<\/h2>\n<p>TLS, internet \u00fczerindeki ileti\u015fimin g\u00fcvenli\u011fini sa\u011flayan temel bir protokold\u00fcr. Ancak, bu g\u00fcvenlik katman\u0131 ayn\u0131 zamanda k\u00f6t\u00fc niyetli faaliyetler i\u00e7in de bir saklanma yeri olabilir.<\/p>\n<h3>Geleneksel G\u00fcvenlik \u00c7\u00f6z\u00fcmlerinin S\u0131n\u0131rl\u0131l\u0131klar\u0131<\/h3>\n<p>Geleneksel g\u00fcvenlik duvarlar\u0131, \u015fifrelenmi\u015f trafi\u011fin i\u00e7eri\u011fini g\u00f6remez. Bu durum, &#8220;k\u00f6r nokta&#8221; olarak adland\u0131r\u0131lan bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 yarat\u0131r. \u015eifrelenmi\u015f trafi\u011fin i\u00e7indeki k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar, veri s\u0131z\u0131nt\u0131lar\u0131 veya yetkisiz eri\u015fim giri\u015fimleri tespit edilemez ve engellenemez.<\/p>\n<h3>Gizli Tehditleri Ortaya \u00c7\u0131karma<\/h3>\n<p>TLS \u015fifre \u00e7\u00f6zme, g\u00fcvenlik cihazlar\u0131n\u0131n \u015fifrelenmi\u015f trafi\u011fin i\u00e7eri\u011fini incelemesine olanak tan\u0131r. Bu sayede, IDS\/IPS kurallar\u0131, URL filtreleme ve di\u011fer derin paket inceleme (DPI) yetenekleri, \u015fifrelenmi\u015f ak\u0131\u015flar\u0131n i\u00e7inde gizlenmi\u015f tehditleri (\u00f6rne\u011fin fidye yaz\u0131l\u0131mlar\u0131, botnet komuta kontrol\u00fc, kimlik av\u0131 sitelerine eri\u015fim) tespit edebilir ve engelleyebilir.<\/p>\n<h3>Uyumluluk ve D\u00fczenlemeler<\/h3>\n<p>Bir\u00e7ok end\u00fcstri standard\u0131 ve d\u00fczenleme (\u00f6rne\u011fin PCI DSS, HIPAA, GDPR), hassas verilerin korunmas\u0131n\u0131 ve a\u011f trafi\u011finin denetlenmesini gerektirir. TLS \u015fifre \u00e7\u00f6zme, bu uyumluluk gereksinimlerini kar\u015f\u0131lamak i\u00e7in kritik bir ara\u00e7t\u0131r, \u00e7\u00fcnk\u00fc a\u011fdaki t\u00fcm veri ak\u0131\u015flar\u0131n\u0131n denetlenebilir olmas\u0131n\u0131 sa\u011flar.<\/p>\n<h2>TLS \u015eifre \u00c7\u00f6zme (Decryption) Mekanizmalar\u0131<\/h2>\n<p>TLS \u015fifre \u00e7\u00f6zme, genellikle bir &#8220;man-in-the-middle&#8221; (MITM) proxy yakla\u015f\u0131m\u0131 kullan\u0131larak ger\u00e7ekle\u015ftirilir. Bu s\u00fcre\u00e7, g\u00fcvenli bir \u015fekilde y\u00f6netilmesi gereken ad\u0131mlar\u0131 i\u00e7erir.<\/p>\n<h3>Man-in-the-Middle (MITM) Yakla\u015f\u0131m\u0131<\/h3>\n<p>AWS Network Firewall, TLS \u015fifre \u00e7\u00f6zme i\u00e7in bir ara sunucu (proxy) gibi davran\u0131r. Bir istemci bir sunucuyla TLS ba\u011flant\u0131s\u0131 kurmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131nda, firewall bu ba\u011flant\u0131y\u0131 sonland\u0131r\u0131r ve kendi sertifikas\u0131yla istemciye yan\u0131t verir. Daha sonra firewall, sunucuyla ayr\u0131 bir TLS ba\u011flant\u0131s\u0131 kurar. Bu iki ba\u011flant\u0131 aras\u0131nda, firewall trafi\u011fi \u015fifresini \u00e7\u00f6zerek i\u00e7eri\u011fini inceleyebilir.<\/p>\n<h3>Sertifika G\u00fcveni ve K\u00f6k Sertifikalar<\/h3>\n<p>MITM yakla\u015f\u0131m\u0131n\u0131n \u00e7al\u0131\u015fabilmesi i\u00e7in, istemcilerin firewall taraf\u0131ndan kullan\u0131lan k\u00f6k sertifikaya g\u00fcvenmesi gerekir. Firewall, sunucuya ba\u011flan\u0131rken ger\u00e7ek sunucunun sertifikas\u0131n\u0131 do\u011frular. \u0130stemciye ise, firewall&#8217;\u0131n kendi k\u00f6k sertifikas\u0131 taraf\u0131ndan imzalanm\u0131\u015f bir sertifika sunar. Bu k\u00f6k sertifika, istemci cihazlara (\u00f6rne\u011fin grup politikas\u0131 veya mobil cihaz y\u00f6netimi (MDM) \u00e7\u00f6z\u00fcmleri arac\u0131l\u0131\u011f\u0131yla) da\u011f\u0131t\u0131lmal\u0131d\u0131r.<\/p>\n<h3>\u015eifre \u00c7\u00f6zme S\u00fcreci Ad\u0131mlar\u0131<\/h3>\n<p>1.  <strong>\u0130stemci Ba\u011flant\u0131s\u0131:<\/strong> \u0130stemci, bir hedef sunucuya \u015fifreli bir ba\u011flant\u0131 (HTTPS) ba\u015flat\u0131r.<br \/>\n2.  <strong>Firewall M\u00fcdahalesi:<\/strong> AWS Network Firewall, bu ba\u011flant\u0131y\u0131 yakalar ve bir TLS ara sunucusu gibi davran\u0131r.<br \/>\n3.  <strong>Sertifika Sunumu:<\/strong> Firewall, kendi k\u00f6k sertifikas\u0131 taraf\u0131ndan imzalanm\u0131\u015f, hedef sunucu ad\u0131na sahte bir sertifikay\u0131 istemciye sunar.<br \/>\n4.  <strong>\u0130stemci G\u00fcveni:<\/strong> \u0130stemci, firewall&#8217;\u0131n k\u00f6k sertifikas\u0131na g\u00fcvendi\u011fi i\u00e7in bu sahte sertifikay\u0131 kabul eder ve firewall ile \u015fifreli bir oturum kurar.<br \/>\n5.  <strong>Sunucu Ba\u011flant\u0131s\u0131:<\/strong> Firewall, hedef sunucuyla ger\u00e7ek bir TLS ba\u011flant\u0131s\u0131 kurar ve sunucunun orijinal sertifikas\u0131n\u0131 do\u011frular.<br \/>\n6.  <strong>Trafik \u0130ncelemesi:<\/strong> Firewall, istemci ile sunucu aras\u0131ndaki trafi\u011fi \u015fifresini \u00e7\u00f6zerek i\u00e7eri\u011fini inceler (DPI, IDS\/IPS, URL filtreleme vb.).<br \/>\n7.  <strong>Yeniden \u015eifreleme:<\/strong> \u0130nceleme sonras\u0131, firewall trafi\u011fi yeniden \u015fifreler ve hedef sunucuya iletir. Ayn\u0131 \u015fekilde, sunucudan gelen yan\u0131tlar\u0131 da \u015fifresini \u00e7\u00f6z\u00fcp inceledikten sonra yeniden \u015fifreleyerek istemciye g\u00f6nderir.<\/p>\n<h2>AWS Network Firewall&#8217;da TLS \u015eifre \u00c7\u00f6zme Mimarisi<\/h2>\n<p>AWS Network Firewall, TLS \u015fifre \u00e7\u00f6zme yetene\u011fini, AWS Certificate Manager (ACM) ile entegrasyon ve \u00f6zel TLS denetim yap\u0131land\u0131rmalar\u0131 arac\u0131l\u0131\u011f\u0131yla sa\u011flar.<\/p>\n<h3>AWS Certificate Manager (ACM) Entegrasyonu<\/h3>\n<p>TLS \u015fifre \u00e7\u00f6zme i\u00e7in gerekli olan k\u00f6k sertifikalar ve ara sertifikalar, AWS Certificate Manager (ACM) \u00fczerinde y\u00f6netilir. ACM, sertifika ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fc basitle\u015ftirir ve sertifikalar\u0131n g\u00fcvenli bir \u015fekilde saklanmas\u0131n\u0131 sa\u011flar. Kullan\u0131c\u0131lar, kendi \u00f6zel CA&#8217;lar\u0131n\u0131 ACM&#8217;e aktarabilir veya ACM Private CA kullanarak yeni bir CA olu\u015fturabilirler. Bu CA, firewall&#8217;\u0131n istemcilere sunaca\u011f\u0131 sahte sertifikalar\u0131 imzalamak i\u00e7in kullan\u0131l\u0131r.<\/p>\n<h3>Firewall Policy ve TLS Inspection Configuration<\/h3>\n<p>AWS Network Firewall&#8217;da TLS \u015fifre \u00e7\u00f6zme, bir <code>TLSInspectionConfiguration<\/code> kayna\u011f\u0131 ile tan\u0131mlan\u0131r. Bu yap\u0131land\u0131rma, hangi ACM sertifikas\u0131n\u0131n kullan\u0131laca\u011f\u0131n\u0131 ve \u015fifre \u00e7\u00f6zme davran\u0131\u015f\u0131n\u0131 belirler. Daha sonra bu <code>TLSInspectionConfiguration<\/code>, bir <code>Firewall Policy<\/code> i\u00e7indeki durum bilgisi olan kural gruplar\u0131na (Stateful Rule Groups) atan\u0131r.<\/p>\n<pre><code class=\"language-json\">{\n  \"TLSInspectionConfigurationName\": \"MyTLSDecryptionConfig\",\n  \"TLSInspectionConfiguration\": {\n    \"Certificates\": [\n      {\n        \"CertificateArn\": \"arn:aws:acm:REGION:ACCOUNT_ID:certificate\/CERTIFICATE_ID\"\n      }\n    ],\n    \"ServerCertificateConfigurations\": [\n      {\n        \"Certificate\": {\n          \"CertificateArn\": \"arn:aws:acm:REGION:ACCOUNT_ID:certificate\/SERVER_CERT_ID\"\n        },\n        \"Scopes\": [\n          {\n            \"Protocols\": [\"TLS\"],\n            \"SourcePorts\": [\n              {\"FromPort\": 443, \"ToPort\": 443}\n            ],\n            \"DestinationPorts\": [\n              {\"FromPort\": 443, \"ToPort\": 443}\n            ],\n            \"SourceAddresses\": [\n              {\"AddressDefinition\": \"0.0.0.0\/0\"}\n            ],\n            \"DestinationAddresses\": [\n              {\"AddressDefinition\": \"0.0.0.0\/0\"}\n            ]\n          }\n        ]\n      }\n    ]\n  },\n  \"Description\": \"TLS Decryption configuration for HTTPS traffic\"\n}<\/pre>\n<p><\/code><br \/>\n*Bu \u00f6rnek, basitle\u015ftirilmi\u015f bir <code>TLSInspectionConfiguration<\/code> yap\u0131s\u0131n\u0131 g\u00f6stermektedir. Ger\u00e7ek yap\u0131land\u0131rma daha fazla detay i\u00e7erebilir.*<\/p>\n<h3>Traffic Flow ve Decryption Noktalar\u0131<\/h3>\n<p>VPC'nizdeki trafik, bir y\u00f6nlendirme tablosu (route table) arac\u0131l\u0131\u011f\u0131yla AWS Network Firewall'a y\u00f6nlendirilir. Firewall, gelen trafi\u011fi inceler ve e\u011fer bir TLS \u015fifre \u00e7\u00f6zme kural\u0131 e\u015fle\u015firse, yukar\u0131da a\u00e7\u0131klanan MITM s\u00fcrecini ba\u015flat\u0131r. \u015eifre \u00e7\u00f6zme i\u015flemi, firewall'\u0131n kendisinde ger\u00e7ekle\u015fir ve trafik, belirlenen kural gruplar\u0131ndan ge\u00e7tikten sonra yeniden \u015fifrelenerek hedefine y\u00f6nlendirilir.<\/p>\n<h2>TLS \u015eifre \u00c7\u00f6zme Yap\u0131land\u0131rmas\u0131 ve Best Practices<\/h2>\n<p>AWS Network Firewall'da TLS \u015fifre \u00e7\u00f6zmeyi etkinle\u015ftirmek, dikkatli bir planlama ve yap\u0131land\u0131rma gerektirir.<\/p>\n<h3>\u00d6n Ko\u015fullar ve Haz\u0131rl\u0131k<\/h3>\n<p>1.  <strong>CA Sertifikas\u0131:<\/strong> \u0130stemci cihazlar\u0131n\u0131z\u0131n g\u00fcvenece\u011fi bir k\u00f6k Sertifika Yetkilisi (CA) sertifikas\u0131na ihtiyac\u0131n\u0131z var. Bu, kendi \u00f6zel CA'n\u0131z olabilir veya ACM Private CA kullanabilirsiniz. Bu CA sertifikas\u0131n\u0131 ACM'e aktar\u0131n veya ACM Private CA ile olu\u015fturun.<br \/>\n2.  <strong>\u0130stemci G\u00fcveni:<\/strong> T\u00fcm istemci cihazlar\u0131n\u0131za (\u00f6rne\u011fin EC2 \u00f6rnekleri, \u015firket i\u00e7i makineler) bu k\u00f6k CA sertifikas\u0131n\u0131 da\u011f\u0131t\u0131n ve g\u00fcvenmelerini sa\u011flay\u0131n. Bu ad\u0131m, \u015fifre \u00e7\u00f6zmenin ba\u015far\u0131l\u0131 olmas\u0131 i\u00e7in kritik \u00f6neme sahiptir.<br \/>\n3.  <strong>A\u011f Topolojisi:<\/strong> Trafi\u011fin AWS Network Firewall \u00fczerinden ge\u00e7ti\u011finden emin olun. Bu genellikle VPC y\u00f6nlendirme tablolar\u0131n\u0131n do\u011fru \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131yla sa\u011flan\u0131r.<\/p>\n<h3>Y\u00f6netilen K\u00f6k Sertifika Olu\u015fturma<\/h3>\n<p>ACM Private CA kullanarak yeni bir k\u00f6k CA olu\u015fturabilir veya mevcut bir k\u00f6k CA'n\u0131z\u0131 ACM'e aktarabilirsiniz. Bu CA, firewall'\u0131n istemcilere sunaca\u011f\u0131 sertifikalar\u0131 imzalamak i\u00e7in kullan\u0131lacakt\u0131r.<\/p>\n<h3>Firewall Policy'de TLS Inspection Kurallar\u0131<\/h3>\n<p>Bir <code>Firewall Policy<\/code> olu\u015ftururken veya mevcut bir politikay\u0131 g\u00fcncellerken, TLS denetimi yapmak istedi\u011finiz <code>StatefulRuleGroup<\/code>'lara <code>TLSInspectionConfiguration<\/code>'\u0131n\u0131z\u0131 eklemeniz gerekir. Bu kural gruplar\u0131, hangi trafik ak\u0131\u015flar\u0131n\u0131n \u015fifre \u00e7\u00f6zme i\u015flemine tabi tutulaca\u011f\u0131n\u0131 belirler. \u00d6rne\u011fin, 443 numaral\u0131 porttaki t\u00fcm giden HTTPS trafi\u011fini \u015fifre \u00e7\u00f6zmek isteyebilirsiniz.<\/p>\n<pre><code class=\"language-yaml\"># \u00d6rnek StatefulRuleGroup tan\u0131m\u0131 (basitle\u015ftirilmi\u015f)\nStatefulRuleGroup:\n  RuleGroupName: \"MyTLSDecryptionRules\"\n  Description: \"Rules for decrypted HTTPS traffic\"\n  RulesSource:\n    RulesSourceList:\n      Targets: [\"example.com\", \"malicious.net\"]\n      TargetTypes: [\"HTTP_HOST\"]\n      GeneratedRulesType: \"ALLOWLIST\" # veya DENYLIST\n  TLSInspectionConfigurationArn: \"arn:aws:network-firewall:REGION:ACCOUNT_ID:tls-inspection-configuration\/MyTLSDecryptionConfig\"<\/pre>\n<p><\/code><br \/>\n*Bu \u00f6rnek, belirli hedeflere y\u00f6nelik HTTP_HOST filtrelemesi i\u00e7in bir kural grubunu TLS denetim yap\u0131land\u0131rmas\u0131yla ili\u015fkilendirir.*<\/p>\n<h3>Performans ve \u00d6l\u00e7eklenebilirlik \u0130pu\u00e7lar\u0131<\/h3>\n<p>*   <strong>Se\u00e7ici \u015eifre \u00c7\u00f6zme:<\/strong> Yaln\u0131zca kritik \u00f6neme sahip veya \u015f\u00fcpheli trafi\u011fi \u015fifre \u00e7\u00f6zmeyi d\u00fc\u015f\u00fcn\u00fcn. T\u00fcm trafi\u011fi \u015fifre \u00e7\u00f6zmek, performans\u0131 etkileyebilir ve maliyetleri art\u0131rabilir.<br \/>\n*   <strong>Kaynak \u0130zleme:<\/strong> AWS CloudWatch metriklerini kullanarak firewall'\u0131n performans\u0131n\u0131 ve kaynak kullan\u0131m\u0131n\u0131 yak\u0131ndan izleyin.<br \/>\n*   <strong>Do\u011fru Boyutland\u0131rma:<\/strong> AWS Network Firewall otomatik olarak \u00f6l\u00e7eklenir, ancak trafik modellerinizi anlamak ve do\u011fru da\u011f\u0131t\u0131m modelini se\u00e7mek \u00f6nemlidir.<\/p>\n<h2>\u015eifre \u00c7\u00f6zme Sonras\u0131 G\u00fcvenlik Politikalar\u0131<\/h2>\n<p>Trafik \u015fifresi \u00e7\u00f6z\u00fcld\u00fckten sonra, AWS Network Firewall'\u0131n t\u00fcm derin paket inceleme (DPI) yetenekleri devreye girer. Bu, a\u011f g\u00fcvenli\u011finiz i\u00e7in \u00f6nemli faydalar sa\u011flar.<\/p>\n<h3>IDS\/IPS Kurallar\u0131n\u0131n Uygulanmas\u0131<\/h3>\n<p>\u015eifresi \u00e7\u00f6z\u00fclm\u00fc\u015f trafik \u00fczerinde, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m imzalar\u0131n\u0131, bilinen sald\u0131r\u0131 desenlerini ve anormallikleri tespit etmek i\u00e7in IDS (Intrusion Detection System) ve IPS (Intrusion Prevention System) kurallar\u0131 uygulanabilir. Bu, a\u011f\u0131n\u0131za y\u00f6nelik aktif tehditleri alg\u0131laman\u0131za ve engellemenize olanak tan\u0131r.<\/p>\n<h3>URL Filtreleme ve \u0130\u00e7erik Kontrol\u00fc<\/h3>\n<p>\u015eifresi \u00e7\u00f6z\u00fclm\u00fc\u015f HTTPS trafi\u011fi, URL filtreleme ve i\u00e7erik kontrol\u00fc i\u00e7in de kullan\u0131labilir. Belirli web sitelerine eri\u015fimi engelleyebilir (\u00f6rne\u011fin zararl\u0131 siteler, \u00fcretkenli\u011fi d\u00fc\u015f\u00fcren siteler) veya belirli i\u00e7erik t\u00fcrlerinin (\u00f6rne\u011fin dosya y\u00fcklemeleri) ge\u00e7i\u015fini k\u0131s\u0131tlayabilirsiniz.<\/p>\n<h3>Uygulama Katman\u0131 G\u00fcvenli\u011fi<\/h3>\n<p>TLS \u015fifre \u00e7\u00f6zme, HTTP ba\u015fl\u0131klar\u0131, \u00e7erezler ve di\u011fer uygulama katman\u0131 verileri gibi detayl\u0131 bilgilerin incelenmesine izin verir. Bu, web uygulamalar\u0131na y\u00f6nelik sald\u0131r\u0131lar\u0131 (\u00f6rne\u011fin SQL enjeksiyonu, XSS) tespit etmek ve engellemek i\u00e7in daha geli\u015fmi\u015f kurallar olu\u015fturman\u0131za olanak tan\u0131r.<\/p>\n<h2>S\u0131n\u0131rlamalar ve Dikkat Edilmesi Gerekenler<\/h2>\n<p>TLS \u015fifre \u00e7\u00f6zme g\u00fc\u00e7l\u00fc bir g\u00fcvenlik arac\u0131 olsa da, baz\u0131 s\u0131n\u0131rlamalar\u0131 ve dikkat edilmesi gereken noktalar\u0131 vard\u0131r.<\/p>\n<h3>Performans Etkisi ve Gecikme<\/h3>\n<p>TLS \u015fifre \u00e7\u00f6zme, i\u015flemci yo\u011fun bir i\u015flemdir ve a\u011f trafi\u011fine ek bir gecikme (latency) ekleyebilir. Y\u00fcksek hacimli ve gecikmeye duyarl\u0131 uygulamalar i\u00e7in bu etkiyi g\u00f6z \u00f6n\u00fcnde bulundurmak \u00f6nemlidir. AWS Network Firewall \u00f6l\u00e7eklenebilir olsa da, her \u015fifre \u00e7\u00f6zme i\u015flemi ek kaynak t\u00fcketir.<\/p>\n<h3>Gizlilik ve Veri Korumas\u0131<\/h3>\n<p>\u015eifrelenmi\u015f trafi\u011fin i\u00e7eri\u011finin incelenmesi, gizlilik endi\u015felerini beraberinde getirebilir. \u00d6zellikle ki\u015fisel verilerin veya hassas bilgilerin bulundu\u011fu a\u011flarda, TLS \u015fifre \u00e7\u00f6zme politikalar\u0131, ilgili yasal d\u00fczenlemeler ve \u015firket politikalar\u0131yla uyumlu olmal\u0131d\u0131r. Yaln\u0131zca gerekli olan trafi\u011fi \u015fifre \u00e7\u00f6zmek ve eri\u015fimi s\u0131k\u0131 bir \u015fekilde denetlemek \u00f6nemlidir.<\/p>\n<h3>Sertifika Pinleme (Certificate Pinning) Zorluklar\u0131<\/h3>\n<p>Baz\u0131 uygulamalar (\u00f6zellikle mobil uygulamalar), g\u00fcvenliklerini art\u0131rmak i\u00e7in \"sertifika pinleme\" kullan\u0131r. Bu uygulamalar, belirli bir sunucu sertifikas\u0131n\u0131n parmak izini veya genel anahtar\u0131n\u0131 bekler. TLS \u015fifre \u00e7\u00f6zme s\u0131ras\u0131nda firewall, kendi sertifikas\u0131n\u0131 sundu\u011fu i\u00e7in, pinlenmi\u015f sertifikaya sahip uygulamalar ba\u011flant\u0131y\u0131 reddedecektir. Bu t\u00fcr uygulamalar i\u00e7in \u015fifre \u00e7\u00f6zme i\u015flemi genellikle m\u00fcmk\u00fcn de\u011fildir veya \u00f6zel istisnalar gerektirir.<\/p>\n<h3>Desteklenmeyen Protokoller ve \u015eifre S\u00fcitleri<\/h3>\n<p>AWS Network Firewall, t\u00fcm TLS s\u00fcr\u00fcmlerini veya \u015fifre s\u00fcitlerini desteklemeyebilir. Eski veya standart d\u0131\u015f\u0131 \u015fifreleme y\u00f6ntemleri kullanan uygulamalar, \u015fifre \u00e7\u00f6zme i\u015flemi s\u0131ras\u0131nda sorun ya\u015fayabilir. Bu durumlar i\u00e7in istisnalar tan\u0131mlamak veya alternatif g\u00fcvenlik stratejileri geli\u015ftirmek gerekebilir.<\/p>\n<h2>Sonu\u00e7<\/h2>\n<p>AWS Network Firewall'da TLS \u015fifreleme ve \u015fifre \u00e7\u00f6zme yetene\u011fi, modern bulut a\u011f g\u00fcvenli\u011fi i\u00e7in vazge\u00e7ilmez bir ara\u00e7t\u0131r. \u015eifrelenmi\u015f trafi\u011fin i\u00e7ine gizlenmi\u015f tehditleri ortaya \u00e7\u0131kararak, organizasyonlar\u0131n daha kapsaml\u0131 bir g\u00fcvenlik duru\u015fu sergilemelerine ve uyumluluk gereksinimlerini kar\u015f\u0131lamalar\u0131na olanak tan\u0131r. Do\u011fru yap\u0131land\u0131rma, dikkatli planlama ve en iyi uygulama y\u00f6ntemlerinin takibiyle, AWS Network Firewall, VPC'lerinizdeki g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc art\u0131r\u0131rken, a\u011flar\u0131n\u0131z\u0131 siber tehditlere kar\u015f\u0131 daha diren\u00e7li hale getirecektir. Ancak, performans etkileri, gizlilik endi\u015feleri ve sertifika pinleme gibi potansiyel zorluklar g\u00f6z \u00f6n\u00fcnde bulundurulmal\u0131 ve buna g\u00f6re stratejiler geli\u015ftirilmelidir.<\/p>\n<h2>SSS (S\u0131k Sorulan Sorular)<\/h2>\n<h3>1. TLS \u015fifre \u00e7\u00f6zme performans\u0131 nas\u0131l etkiler?<\/h3>\n<p>TLS \u015fifre \u00e7\u00f6zme, i\u015flemci yo\u011fun bir i\u015flemdir ve a\u011f trafi\u011fine ek bir gecikme (latency) ekleyebilir. AWS Network Firewall otomatik olarak \u00f6l\u00e7eklenir, ancak y\u00fcksek trafik hacimlerinde bu etkiyi g\u00f6zlemlemek ve izlemek \u00f6nemlidir. Yaln\u0131zca kritik trafi\u011fi \u015fifre \u00e7\u00f6zmek, performans\u0131 optimize etmeye yard\u0131mc\u0131 olabilir.<\/p>\n<h3>2. Hangi sertifikalar kullan\u0131lmal\u0131 ve nas\u0131l y\u00f6netilmeli?<\/h3>\n<p>TLS \u015fifre \u00e7\u00f6zme i\u00e7in, istemci cihazlar\u0131n\u0131z\u0131n g\u00fcvendi\u011fi bir k\u00f6k Sertifika Yetkilisi (CA) sertifikas\u0131na ihtiyac\u0131n\u0131z vard\u0131r. Bu sertifikay\u0131 AWS Certificate Manager (ACM) \u00fczerinde y\u00f6netmeli ve istemci cihazlar\u0131n\u0131za da\u011f\u0131tmal\u0131s\u0131n\u0131z. Kendi \u00f6zel CA'n\u0131z\u0131 kullanabilir veya ACM Private CA ile olu\u015fturabilirsiniz.<\/p>\n<h3>3. T\u00fcm trafi\u011fi \u015fifre \u00e7\u00f6zmeli miyim?<\/h3>\n<p>Genellikle t\u00fcm trafi\u011fi \u015fifre \u00e7\u00f6zmek gerekli veya pratik de\u011fildir. Yaln\u0131zca k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m veya veri s\u0131z\u0131nt\u0131s\u0131 riski ta\u015f\u0131yan, kritik \u00f6neme sahip veya uyumluluk gereksinimleri olan trafik ak\u0131\u015flar\u0131n\u0131 \u015fifre \u00e7\u00f6zmeyi hedeflemelisiniz. Bu, performans \u00fczerindeki etkiyi azalt\u0131r ve gizlilik endi\u015felerini y\u00f6netmeye yard\u0131mc\u0131 olur.<\/p>\n<h3>4. Gizlilik endi\u015feleri nas\u0131l giderilir?<\/h3>\n<p>TLS \u015fifre \u00e7\u00f6zme, trafi\u011fin i\u00e7eri\u011fini a\u00e7\u0131\u011fa \u00e7\u0131kard\u0131\u011f\u0131 i\u00e7in gizlilik endi\u015felerine yol a\u00e7abilir. Bu endi\u015feleri gidermek i\u00e7in:<br \/>\n*   Yaln\u0131zca gerekli olan trafi\u011fi \u015fifre \u00e7\u00f6z\u00fcn.<br \/>\n*   Eri\u015fimi s\u0131k\u0131 bir \u015fekilde denetleyin ve yaln\u0131zca yetkili personele izin verin.<br \/>\n*   \u0130lgili yasal d\u00fczenlemelere (GDPR, HIPAA vb.) ve \u015firket politikalar\u0131na tam uyum sa\u011flay\u0131n.<br \/>\n*   Kullan\u0131c\u0131lara \u015feffaf bir \u015fekilde bilgi verin.<\/p>\n<h3>5. Sertifika pinleme kullanan uygulamalar i\u00e7in ne yapmal\u0131y\u0131m?<\/h3>\n<p>Sertifika pinleme kullanan uygulamalar (\u00f6rne\u011fin baz\u0131 mobil uygulamalar), TLS \u015fifre \u00e7\u00f6zme s\u0131ras\u0131nda ba\u011flant\u0131y\u0131 reddedecektir. Bu t\u00fcr uygulamalar i\u00e7in genellikle \u015fifre \u00e7\u00f6zme m\u00fcmk\u00fcn de\u011fildir. Bu durumda, ya bu uygulamalar\u0131 \u015fifre \u00e7\u00f6zme kapsam\u0131ndan hari\u00e7 tutman\u0131z ya da uygulama geli\u015ftiricileriyle i\u015f birli\u011fi yaparak alternatif g\u00fcvenlik mekanizmalar\u0131 bulman\u0131z gerekebilir.<\/p>\n","protected":false},"excerpt":{"rendered":"AWS Network Firewall&#8217;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, a\u011f trafi\u011finin b\u00fcy\u00fck bir k\u0131sm\u0131 &#8230;","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1406],"tags":[],"class_list":{"0":"post-39500","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-aws","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>AWS Network Firewall&#039;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS Network Firewall&#039;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f\" \/>\n<meta property=\"og:description\" content=\"AWS Network Firewall&#039;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, a\u011f trafi\u011finin b\u00fcy\u00fck bir k\u0131sm\u0131 ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-22T16:30:36+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"AWS Network Firewall&#8217;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f\",\"datePublished\":\"2026-02-22T16:30:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/\"},\"wordCount\":2487,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"AWS\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/\",\"name\":\"AWS Network Firewall'da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-02-22T16:30:36+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS Network Firewall&#8217;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"AWS Network Firewall'da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/","og_locale":"tr_TR","og_type":"article","og_title":"AWS Network Firewall'da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f","og_description":"AWS Network Firewall'da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, a\u011f trafi\u011finin b\u00fcy\u00fck bir k\u0131sm\u0131 ...","og_url":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-02-22T16:30:36+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"13 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"AWS Network Firewall&#8217;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f","datePublished":"2026-02-22T16:30:36+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/"},"wordCount":2487,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["AWS"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/","url":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/","name":"AWS Network Firewall'da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-02-22T16:30:36+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/aws-network-firewallda-tls-sifreleme-ve-sifre-cozme-derinlemesine-bir-bakis\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"AWS Network Firewall&#8217;da TLS \u015eifreleme ve \u015eifre \u00c7\u00f6zme: Derinlemesine Bir Bak\u0131\u015f"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/39500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=39500"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/39500\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=39500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=39500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=39500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}