{"id":40396,"date":"2026-02-26T17:40:54","date_gmt":"2026-02-26T14:40:54","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=40396"},"modified":"2026-02-26T17:40:54","modified_gmt":"2026-02-26T14:40:54","slug":"tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","title":{"rendered":"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"

<\/p>\n

Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131<\/h2>\n

G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, g\u00fcvenli ve esnek a\u011f ba\u011flant\u0131lar\u0131 kurmak, hem bireysel kullan\u0131c\u0131lar hem de i\u015fletmeler i\u00e7in hayati \u00f6neme sahiptir. Sanal \u00d6zel A\u011flar (VPN’ler), bu ihtiyac\u0131 kar\u015f\u0131lamak i\u00e7in en yayg\u0131n kullan\u0131lan teknolojilerden biridir. Geleneksel istemci-sunucu tabanl\u0131 VPN \u00e7\u00f6z\u00fcmlerinin yan\u0131 s\u0131ra, Tinc gibi e\u015fler aras\u0131 (peer-to-peer) veya “mesh” tabanl\u0131 VPN’ler, \u00f6zellikle karma\u015f\u0131k a\u011f topolojileri ve dinamik ba\u011flant\u0131 ihtiya\u00e7lar\u0131 i\u00e7in benzersiz avantajlar sunar. Bu makalede, a\u00e7\u0131k kaynakl\u0131, hafif ve esnek bir VPN \u00e7\u00f6z\u00fcm\u00fc olan Tinc’i Ubuntu 14.04 i\u015fletim sistemi \u00fczerinde nas\u0131l kurup temel bir VPN a\u011f\u0131 olu\u015fturaca\u011f\u0131m\u0131z\u0131 ad\u0131m ad\u0131m inceleyece\u011fiz.<\/p>\n

Ubuntu 14.04, uzun s\u00fcreli destek (LTS) s\u00fcr\u00fcm\u00fc olmas\u0131na ra\u011fmen g\u00fcncelli\u011fini yitirmi\u015f bir i\u015fletim sistemidir. Ancak, eski sistemlerde Tinc gibi ara\u00e7lar\u0131n nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 anlamak veya belirli bir legacy sistem \u00fczerinde bu t\u00fcr bir \u00e7\u00f6z\u00fcme ihtiya\u00e7 duyanlar i\u00e7in bu rehber olduk\u00e7a de\u011ferlidir. Tinc’in temel prensipleri ve yap\u0131land\u0131rma ad\u0131mlar\u0131, modern Ubuntu s\u00fcr\u00fcmlerinde de benzer \u015fekilde uygulanabilir, ancak paket y\u00f6netimi ve sistem hizmetleri konusunda baz\u0131 k\u00fc\u00e7\u00fck farkl\u0131l\u0131klar olabilir.<\/p>\n

VPN Temelleri ve Tinc’in Yeri<\/h3>\n

VPN (Virtual Private Network), internet gibi genel a\u011flar \u00fczerinden \u00f6zel bir a\u011fa g\u00fcvenli bir ba\u011flant\u0131 kurmay\u0131 sa\u011flayan bir teknolojidir. VPN’ler, veri trafi\u011fini \u015fifreleyerek ve t\u00fcnelleyerek, kullan\u0131c\u0131lar\u0131n \u00e7evrimi\u00e7i gizlili\u011fini ve g\u00fcvenli\u011fini art\u0131r\u0131r. Geleneksel VPN’ler genellikle merkezi bir sunucuya ba\u011flanarak \u00e7al\u0131\u015f\u0131r; bu sunucu, t\u00fcm istemciler i\u00e7in bir ge\u00e7it g\u00f6revi g\u00f6r\u00fcr. Bu model, g\u00fcvenli\u011fi ve y\u00f6netimi kolayla\u015ft\u0131r\u0131rken, merkezi sunucunun tek hata noktas\u0131 olmas\u0131na ve performans darbo\u011fazlar\u0131 yaratmas\u0131na neden olabilir.<\/p>\n

Farkl\u0131 VPN T\u00fcrleri<\/h4>\n

Piyasada bir\u00e7ok farkl\u0131 VPN protokol\u00fc ve \u00e7\u00f6z\u00fcm\u00fc bulunmaktad\u0131r:<\/p>\n

* IPsec:<\/strong> Y\u00fcksek g\u00fcvenlik ve performans sunan, genellikle kurumsal ortamlarda kullan\u0131lan karma\u015f\u0131k bir protokold\u00fcr.
\n* OpenVPN:<\/strong> A\u00e7\u0131k kaynakl\u0131, esnek ve g\u00fcvenli olmas\u0131yla pop\u00fclerdir. TCP veya UDP \u00fczerinde \u00e7al\u0131\u015fabilir ve bir\u00e7ok platformda desteklenir.
\n* PPTP (Point-to-Point Tunneling Protocol):<\/strong> Daha eski ve g\u00fcvenlik a\u00e7\u0131klar\u0131 nedeniyle art\u0131k tavsiye edilmeyen bir protokold\u00fcr.
\n* L2TP\/IPsec (Layer 2 Tunneling Protocol):<\/strong> IPsec ile birlikte kullan\u0131ld\u0131\u011f\u0131nda g\u00fcvenli bir \u00e7\u00f6z\u00fcm sunar.
\n* WireGuard:<\/strong> Modern, h\u0131zl\u0131 ve basit bir VPN protokol\u00fcd\u00fcr, ancak Ubuntu 14.04 gibi eski \u00e7ekirdeklerde do\u011frudan desteklenmeyebilir.<\/p>\n

Tinc’i Di\u011ferlerinden Ay\u0131ran Nedir?<\/h4>\n

Tinc, yukar\u0131da bahsedilen geleneksel VPN’lerden farkl\u0131 olarak bir “mesh” (a\u011f yap\u0131s\u0131) VPN \u00e7\u00f6z\u00fcm\u00fc sunar. Bu, her bir Tinc d\u00fc\u011f\u00fcm\u00fcn\u00fcn (node) di\u011fer herhangi bir d\u00fc\u011f\u00fcmle do\u011frudan ba\u011flant\u0131 kurabilmesi anlam\u0131na gelir. Tinc’in temel \u00f6zellikleri ve avantajlar\u0131 \u015funlard\u0131r:<\/p>\n

* Mesh Yap\u0131s\u0131:<\/strong> Her d\u00fc\u011f\u00fcm di\u011ferleriyle do\u011frudan ileti\u015fim kurabilir. Bu, merkezi bir sunucuya olan ba\u011f\u0131ml\u0131l\u0131\u011f\u0131 ortadan kald\u0131r\u0131r ve tek hata noktas\u0131n\u0131 elimine eder. Bir d\u00fc\u011f\u00fcm \u00e7evrimd\u0131\u015f\u0131 olsa bile, di\u011fer d\u00fc\u011f\u00fcmler birbirleriyle ileti\u015fim kurmaya devam edebilir.
\n* Esneklik:<\/strong> Tinc, farkl\u0131 a\u011f topolojilerine kolayca uyum sa\u011flayabilir. Yeni d\u00fc\u011f\u00fcmler eklemek veya \u00e7\u0131karmak olduk\u00e7a basittir.
\n* NAT Traversal:<\/strong> A\u011f Adresi \u00c7evirisi (NAT) arkas\u0131ndaki d\u00fc\u011f\u00fcmlerin bile birbirleriyle do\u011frudan ba\u011flant\u0131 kurabilmesini sa\u011flayan geli\u015fmi\u015f \u00f6zelliklere sahiptir. Bu, \u00f6zellikle ev a\u011flar\u0131 veya dinamik IP adresleri olan ortamlarda b\u00fcy\u00fck bir avantajd\u0131r.
\n* \u015eifreleme:<\/strong> Tinc, OpenSSL k\u00fct\u00fcphanesini kullanarak t\u00fcm veri trafi\u011fini \u015fifreler.
\n* Hafif ve A\u00e7\u0131k Kaynak:<\/strong> D\u00fc\u015f\u00fck sistem kaynaklar\u0131 t\u00fcketir ve a\u00e7\u0131k kaynak kodludur, bu da g\u00fcvenlik denetimi ve \u00f6zelle\u015ftirme imkan\u0131 sunar.
\n* IPv4 ve IPv6 Deste\u011fi:<\/strong> Hem IPv4 hem de IPv6 a\u011flar\u0131nda \u00e7al\u0131\u015fabilir.<\/p>\n

Bu \u00f6zellikler sayesinde Tinc, \u00f6zellikle da\u011f\u0131n\u0131k ekipler, \u00e7oklu \u015fubeleri olan k\u00fc\u00e7\u00fck i\u015fletmeler veya farkl\u0131 co\u011frafi konumlarda bulunan ki\u015fisel sunucular aras\u0131nda g\u00fcvenli ve esnek bir a\u011f olu\u015fturmak isteyenler i\u00e7in ideal bir \u00e7\u00f6z\u00fcmd\u00fcr.<\/p>\n

\u00d6n Gereksinimler<\/h3>\n

Tinc VPN kurulumuna ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6n gereksinimlerin kar\u015f\u0131land\u0131\u011f\u0131ndan emin olmal\u0131s\u0131n\u0131z:<\/p>\n

* \u0130ki veya Daha Fazla Ubuntu 14.04 Sunucusu\/Makinesi:<\/strong> Tinc bir mesh VPN oldu\u011fundan, en az iki d\u00fc\u011f\u00fcm\u00fcn olmas\u0131 gereklidir. Bu rehberde, iki d\u00fc\u011f\u00fcm (\u00f6rne\u011fin, node1<\/code> ve node2<\/code>) \u00fczerinden kurulumu anlataca\u011f\u0131z.
\n* Root Eri\u015fimi veya Sudo Yetkileri:<\/strong> Kurulum ve yap\u0131land\u0131rma ad\u0131mlar\u0131 i\u00e7in sistem \u00fczerinde y\u00f6netici yetkilerine sahip olman\u0131z gerekmektedir.
\n* Temel A\u011f Bilgisi:<\/strong> IP adresleri, alt a\u011f maskeleri, y\u00f6nlendirme ve g\u00fcvenlik duvar\u0131 kavramlar\u0131na a\u015fina olman\u0131z faydal\u0131 olacakt\u0131r.
\n* SSH Eri\u015fimi:<\/strong> Her bir Ubuntu 14.04 makinesine SSH \u00fczerinden eri\u015fiminizin olmas\u0131 gerekmektedir.<\/p>\n

Her d\u00fc\u011f\u00fcm i\u00e7in a\u015fa\u011f\u0131daki bilgileri not alman\u0131zda fayda var:<\/p>\n

* Genel IP Adresi (Public IP):<\/strong> Di\u011fer d\u00fc\u011f\u00fcmlerin bu d\u00fc\u011f\u00fcme ba\u011flanmak i\u00e7in kullanaca\u011f\u0131 IP adresi. E\u011fer d\u00fc\u011f\u00fcmler NAT arkas\u0131ndaysa, port y\u00f6nlendirme (port forwarding) yap\u0131lmas\u0131 gerekebilir.
\n* \u00d6zel Tinc IP Adresi (Private Tinc IP):<\/strong> VPN a\u011f\u0131 i\u00e7inde kullan\u0131lacak IP adresi (\u00f6rne\u011fin, 10.0.0.1<\/code>, 10.0.0.2<\/code>).
\n* D\u00fc\u011f\u00fcm Ad\u0131 (Node Name):<\/strong> Her d\u00fc\u011f\u00fcm i\u00e7in benzersiz bir isim (\u00f6rne\u011fin, node1<\/code>, node2<\/code>).<\/p>\n

Tinc Kurulumu<\/h3>\n

Tinc’in Ubuntu 14.04 \u00fczerine kurulumu olduk\u00e7a basittir ve apt-get<\/code> paket y\u00f6neticisi arac\u0131l\u0131\u011f\u0131yla ger\u00e7ekle\u015ftirilir. Bu ad\u0131mlar\u0131 her bir d\u00fc\u011f\u00fcmde ayr\u0131 ayr\u0131 uygulaman\u0131z gerekmektedir.<\/p>\n

Ad\u0131m 1: Sistem G\u00fcncelleme<\/h4>\n

Kuruluma ba\u015flamadan \u00f6nce, sisteminizin paket listelerini g\u00fcncelleyip mevcut paketleri y\u00fckseltmek iyi bir uygulamad\u0131r. Bu, ba\u011f\u0131ml\u0131l\u0131k sorunlar\u0131n\u0131 \u00f6nlemeye yard\u0131mc\u0131 olur.<\/p>\n

sudo apt-get update\nsudo apt-get upgrade -y<\/code><\/pre>\n
Bu komutlar, sisteminizin en g\u00fcncel paket bilgilerine sahip olmas\u0131n\u0131 ve mevcut paketlerin son s\u00fcr\u00fcmlerine y\u00fckseltilmesini sa\u011flar.<\/p>\n
Ad\u0131m 2: Tinc Paketini Kurma<\/h4>\n
Sistem g\u00fcncellendikten sonra, Tinc paketini kurabiliriz:<\/p>\n
sudo apt-get install tinc -y<\/code><\/pre>\n
-y<\/code> bayra\u011f\u0131, kurulum s\u0131ras\u0131nda \u00e7\u0131kan onay sorular\u0131na otomatik olarak “evet” yan\u0131t\u0131 vermeyi sa\u011flar.<\/p>\n
Ad\u0131m 3: Kurulumu Do\u011frulama<\/h4>\n
Tinc’in ba\u015far\u0131yla kuruldu\u011funu do\u011frulamak i\u00e7in s\u00fcr\u00fcm bilgisini kontrol edebilirsiniz:<\/p>\n
tinc --version<\/code><\/pre>\n
\u00c7\u0131kt\u0131 olarak Tinc’in kurulu s\u00fcr\u00fcm\u00fcn\u00fc g\u00f6rmelisiniz, \u00f6rne\u011fin: tinc 1.0.21<\/code>.<\/p>\n
Bu ad\u0131mlar\u0131, VPN a\u011f\u0131na dahil etmek istedi\u011finiz t\u00fcm Ubuntu 14.04 d\u00fc\u011f\u00fcmlerinde tekrarlay\u0131n.<\/p>\n
Tinc VPN Yap\u0131land\u0131rmas\u0131<\/h3>\n
Tinc kurulumundan sonra, her bir d\u00fc\u011f\u00fcm i\u00e7in VPN a\u011f\u0131n\u0131 yap\u0131land\u0131rmam\u0131z gerekmektedir. Bu b\u00f6l\u00fcm, temel bir iki d\u00fc\u011f\u00fcml\u00fc a\u011f i\u00e7in gerekli yap\u0131land\u0131rma ad\u0131mlar\u0131n\u0131 detayland\u0131racakt\u0131r.<\/p>\n
A\u011f Ad\u0131 Belirleme<\/h4>\n
Tinc, her VPN a\u011f\u0131n\u0131 benzersiz bir isimle tan\u0131mlar. Bu isim, \/etc\/tinc\/<\/code> dizini alt\u0131nda bir alt dizin olarak kullan\u0131l\u0131r. Bu rehber i\u00e7in myvpn<\/code> ad\u0131n\u0131 kullanaca\u011f\u0131z.<\/p>\n
Dizin Olu\u015fturma<\/h4>\n
Her d\u00fc\u011f\u00fcmde, se\u00e7ti\u011finiz a\u011f ad\u0131 i\u00e7in bir yap\u0131land\u0131rma dizini olu\u015fturun:<\/p>\n
sudo mkdir -p \/etc\/tinc\/myvpn<\/code><\/pre>\n
Bu komut, \/etc\/tinc\/myvpn<\/code> dizinini olu\u015fturur.<\/p>\n
tinc.conf Dosyas\u0131 Olu\u015fturma<\/h4>\n
Her d\u00fc\u011f\u00fcmde, \/etc\/tinc\/myvpn\/tinc.conf<\/code> dosyas\u0131n\u0131 olu\u015fturup d\u00fczenlememiz gerekmektedir. Bu dosya, Tinc daemon’unun (arka plan s\u00fcreci) nas\u0131l davranaca\u011f\u0131n\u0131 tan\u0131mlar.<\/p>\n
\u00d6rnek tinc.conf<\/code> i\u00e7eri\u011fi (node1<\/code> i\u00e7in):<\/p>\n
# \/etc\/tinc\/myvpn\/tinc.conf\nName = node1\nAddressFamily = ipv4\nInterface = tun0\nMode = router\nPort = 655\nPrivateKeyFile = \/etc\/tinc\/myvpn\/rsa_key.priv\nHostnames = \/etc\/tinc\/myvpn\/hosts<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/p>\n
*   Name = node1<\/code><\/strong>: Bu d\u00fc\u011f\u00fcm\u00fcn benzersiz ad\u0131d\u0131r. Her d\u00fc\u011f\u00fcm i\u00e7in farkl\u0131 bir ad olmal\u0131d\u0131r (\u00f6rn. node2<\/code> i\u00e7in Name = node2<\/code>).
\n*   AddressFamily = ipv4<\/code><\/strong>: Tinc’in IPv4 adresleri kullanaca\u011f\u0131n\u0131 belirtir. IPv6 kullanmak isterseniz ipv6<\/code> veya her ikisi i\u00e7in any<\/code> kullanabilirsiniz.
\n*   Interface = tun0<\/code><\/strong>: Tinc’in olu\u015fturaca\u011f\u0131 sanal a\u011f aray\u00fcz\u00fcn\u00fcn ad\u0131d\u0131r. Varsay\u0131lan olarak tun0<\/code> kullan\u0131l\u0131r, ancak farkl\u0131 bir isim de verebilirsiniz.
\n*   Mode = router<\/code><\/strong>: Tinc’in a\u011f trafi\u011fini y\u00f6nlendirme modunda \u00e7al\u0131\u015faca\u011f\u0131n\u0131 belirtir. Bu, IP paketlerinin Tinc aray\u00fcz\u00fc \u00fczerinden y\u00f6nlendirilmesini sa\u011flar. Alternatif olarak switch<\/code> modu da vard\u0131r, ancak router<\/code> \u00e7o\u011fu durumda tercih edilir.
\n*   Port = 655<\/code><\/strong>: Tinc’in gelen ba\u011flant\u0131lar\u0131 dinleyece\u011fi UDP portudur. Varsay\u0131lan 655’tir. G\u00fcvenlik duvar\u0131n\u0131zda bu portun a\u00e7\u0131k oldu\u011fundan emin olun.
\n*   PrivateKeyFile = \/etc\/tinc\/myvpn\/rsa_key.priv<\/code><\/strong>: Bu d\u00fc\u011f\u00fcm\u00fcn \u00f6zel RSA anahtar dosyas\u0131n\u0131n yolunu belirtir.
\n*   Hostnames = \/etc\/tinc\/myvpn\/hosts<\/code><\/strong>: Di\u011fer d\u00fc\u011f\u00fcmlerin genel anahtar dosyalar\u0131n\u0131n bulundu\u011fu dizini belirtir.<\/p>\n
Bu dosyay\u0131 her d\u00fc\u011f\u00fcm i\u00e7in kendi Name<\/code> de\u011feriyle olu\u015fturun.<\/p>\n
RSA Anahtar\u0131 Olu\u015fturma<\/h4>\n
Tinc, d\u00fc\u011f\u00fcmler aras\u0131ndaki ileti\u015fimi \u015fifrelemek ve kimlik do\u011frulamak i\u00e7in RSA anahtarlar\u0131n\u0131 kullan\u0131r. Her d\u00fc\u011f\u00fcm i\u00e7in bir \u00f6zel ve bir genel anahtar \u00e7ifti olu\u015fturmal\u0131y\u0131z.<\/p>\n
Her d\u00fc\u011f\u00fcmde a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
sudo tincd -n myvpn -K<\/code><\/pre>\n
Bu komut, \/etc\/tinc\/myvpn\/rsa_key.priv<\/code> \u00f6zel anahtar dosyas\u0131n\u0131 ve \/etc\/tinc\/myvpn\/hosts\/<\/code> genel anahtar dosyas\u0131n\u0131 olu\u015fturacakt\u0131r. Komut sizden bir dosya ad\u0131 isteyecektir; varsay\u0131lan ad\u0131 (rsa_key.priv<\/code>) kabul edebilirsiniz.<\/p>\n
\u00d6rnek \u00e7\u0131kt\u0131:<\/p>\n
Generating 2048 bits rsa keypair:\n..................................+++\n.................................+++\nDone.\nPublic key written to \/etc\/tinc\/myvpn\/hosts\/node1\nPrivate key written to \/etc\/tinc\/myvpn\/rsa_key.priv<\/code><\/pre>\n
Ana Bilgisayar Dosyas\u0131 Olu\u015fturma ve D\u00fczenleme<\/h4>\n
tincd -K<\/code> komutu, her d\u00fc\u011f\u00fcm i\u00e7in kendi genel anahtar\u0131n\u0131 i\u00e7eren bir ana bilgisayar dosyas\u0131 olu\u015fturur (\u00f6rn. \/etc\/tinc\/myvpn\/hosts\/node1<\/code>). Bu dosyay\u0131 d\u00fczenleyerek d\u00fc\u011f\u00fcm\u00fcn genel IP adresini ve Tinc VPN i\u00e7indeki \u00f6zel IP adresini belirtmemiz gerekmektedir.<\/p>\n
\u00d6rnek \/etc\/tinc\/myvpn\/hosts\/node1<\/code> i\u00e7eri\u011fi:<\/p>\n
# \/etc\/tinc\/myvpn\/hosts\/node1\nAddress = \nSubnet = 10.0.0.1\/32\nPort = 655\n\n-----BEGIN RSA PUBLIC KEY-----\nMIIBCgKCAQEAy... (bu k\u0131s\u0131m otomatik olu\u015fturulur) ...\n-----END RSA PUBLIC KEY-----<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/p>\n
*   Address = <\/code><\/strong>: Bu, node1<\/code>‘in d\u0131\u015f d\u00fcnyadan eri\u015filebilen genel IP adresidir. Di\u011fer Tinc d\u00fc\u011f\u00fcmleri, bu adresi kullanarak node1<\/code> ile ba\u011flant\u0131 kurmaya \u00e7al\u0131\u015facakt\u0131r. E\u011fer node1<\/code> bir NAT arkas\u0131ndaysa, bu adresi NAT cihaz\u0131n\u0131n genel IP’si olarak ayarlaman\u0131z ve Tinc portunu (varsay\u0131lan 655\/UDP) bu d\u00fc\u011f\u00fcme y\u00f6nlendirmeniz gerekebilir.
\n*   Subnet = 10.0.0.1\/32<\/code><\/strong>: Bu, node1<\/code>‘in Tinc VPN a\u011f\u0131 i\u00e7indeki \u00f6zel IP adresidir. \/32<\/code> maskesi, bu IP adresinin yaln\u0131zca bu d\u00fc\u011f\u00fcme ait oldu\u011funu ve ba\u015fka bir d\u00fc\u011f\u00fcm taraf\u0131ndan kullan\u0131lamayaca\u011f\u0131n\u0131 belirtir. Her d\u00fc\u011f\u00fcm i\u00e7in farkl\u0131 bir Subnet<\/code> IP adresi kullanmal\u0131s\u0131n\u0131z (\u00f6rn. node2<\/code> i\u00e7in 10.0.0.2\/32<\/code>).
\n*   Port = 655<\/code><\/strong>: \u0130ste\u011fe ba\u011fl\u0131d\u0131r, ancak Tinc’in dinleyece\u011fi portu a\u00e7\u0131k\u00e7a belirtmek iyi bir uygulamad\u0131r.<\/p>\n
Bu dosyay\u0131 her d\u00fc\u011f\u00fcm i\u00e7in kendi genel IP adresi ve Tinc \u00f6zel IP adresiyle d\u00fczenleyin.<\/p>\n
A\u011f Aray\u00fcz\u00fc Yap\u0131land\u0131rmas\u0131<\/h4>\n
Tinc’in olu\u015fturdu\u011fu sanal a\u011f aray\u00fcz\u00fcne (tun0) bir IP adresi atamam\u0131z gerekmektedir. Ubuntu 14.04’te bu, \/etc\/network\/interfaces<\/code> dosyas\u0131n\u0131 d\u00fczenleyerek yap\u0131l\u0131r.<\/p>\n
Her d\u00fc\u011f\u00fcmde, \/etc\/network\/interfaces<\/code> dosyas\u0131n\u0131n sonuna a\u015fa\u011f\u0131daki sat\u0131rlar\u0131 ekleyin:<\/p>\n
node1<\/code> i\u00e7in:<\/strong><\/p>\n
# \/etc\/network\/interfaces\n
... (mevcut i\u00e7erik) ...<\/h2>\n\nauto tun0\niface tun0 inet static\n    address 10.0.0.1\n    netmask 255.255.255.0\n    pre-up tincd -n myvpn --vpn-up\n    post-down tincd -n myvpn --vpn-down<\/code><\/pre>\n
node2<\/code> i\u00e7in:<\/strong><\/p>\n
# \/etc\/network\/interfaces\n
... (mevcut i\u00e7erik) ...<\/h2>\n\nauto tun0\niface tun0 inet static\n    address 10.0.0.2\n    netmask 255.255.255.0\n    pre-up tincd -n myvpn --vpn-up\n    post-down tincd -n myvpn --vpn-down<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/p>\n
*   auto tun0<\/code><\/strong>: Sistem ba\u015flad\u0131\u011f\u0131nda tun0<\/code> aray\u00fcz\u00fcn\u00fcn otomatik olarak etkinle\u015ftirilmesini sa\u011flar.
\n*   iface tun0 inet static<\/code><\/strong>: tun0<\/code> aray\u00fcz\u00fcn\u00fcn statik bir IP adresi kullanaca\u011f\u0131n\u0131 belirtir.
\n*   address 10.0.0.X<\/code><\/strong>: Bu, d\u00fc\u011f\u00fcm\u00fcn Tinc VPN i\u00e7indeki IP adresidir. Her d\u00fc\u011f\u00fcm i\u00e7in benzersiz olmal\u0131d\u0131r ve \/etc\/tinc\/myvpn\/hosts\/<\/code> dosyas\u0131ndaki Subnet<\/code> de\u011feriyle uyumlu olmal\u0131d\u0131r.
\n*   netmask 255.255.255.0<\/code><\/strong>: Tinc VPN a\u011f\u0131 i\u00e7in alt a\u011f maskesidir. Bu, 10.0.0.0\/24 gibi bir alt a\u011f kullan\u0131laca\u011f\u0131n\u0131 g\u00f6sterir. E\u011fer yaln\u0131zca \/32<\/code> alt a\u011flar\u0131 kullan\u0131yorsan\u0131z, bu maske t\u00fcm Tinc a\u011f\u0131n\u0131n bu alt a\u011fda oldu\u011funu varsayar.
\n*   pre-up tincd -n myvpn --vpn-up<\/code><\/strong>: tun0<\/code> aray\u00fcz\u00fc y\u00fckseltilmeden \u00f6nce Tinc daemon’unu myvpn<\/code> a\u011f\u0131 i\u00e7in ba\u015flat\u0131r.
\n*   post-down tincd -n myvpn --vpn-down<\/code><\/strong>: tun0<\/code> aray\u00fcz\u00fc kapat\u0131ld\u0131ktan sonra Tinc daemon’unu myvpn<\/code> a\u011f\u0131 i\u00e7in durdurur.<\/p>\n
Bu yap\u0131land\u0131rmalar, Tinc daemon’unun sistem ba\u015flat\u0131ld\u0131\u011f\u0131nda otomatik olarak ba\u015flamas\u0131n\u0131 ve tun0<\/code> aray\u00fcz\u00fcn\u00fcn do\u011fru IP adresiyle yap\u0131land\u0131r\u0131lmas\u0131n\u0131 sa\u011flar.<\/p>\n
D\u00fc\u011f\u00fcmler Aras\u0131 Yap\u0131land\u0131rma Payla\u015f\u0131m\u0131<\/h3>\n
Tinc’in mesh yap\u0131s\u0131n\u0131n \u00e7al\u0131\u015fabilmesi i\u00e7in her d\u00fc\u011f\u00fcm\u00fcn, di\u011fer t\u00fcm d\u00fc\u011f\u00fcmlerin genel anahtar dosyalar\u0131na sahip olmas\u0131 gerekmektedir. Bu, Tinc’in hangi d\u00fc\u011f\u00fcmlerin a\u011fda oldu\u011funu ve onlara nas\u0131l ba\u011flanaca\u011f\u0131n\u0131 bilmesini sa\u011flar.<\/p>\n
Host Dosyalar\u0131n\u0131 De\u011fi\u015fimi<\/h4>\n
Her d\u00fc\u011f\u00fcm\u00fcn kendi \/etc\/tinc\/myvpn\/hosts\/<\/code> dosyas\u0131n\u0131 di\u011fer t\u00fcm d\u00fc\u011f\u00fcmlere kopyalamas\u0131 ve bu dosyalar\u0131 \/etc\/tinc\/myvpn\/hosts\/<\/code> dizinine yerle\u015ftirmesi gerekmektedir.<\/p>\n
\u00d6rne\u011fin, node1<\/code> ve node2<\/code> olmak \u00fczere iki d\u00fc\u011f\u00fcm\u00fcm\u00fcz varsa:<\/p>\n
1.  node1<\/code>‘den node2<\/code>‘ye dosya kopyalama:<\/strong>
\n    node1<\/code> \u00fczerinde:<\/p>\n
scp \/etc\/tinc\/myvpn\/hosts\/node1 user@node2_genel_ip:\/tmp\/node1<\/code><\/pre>\n
    user<\/code> yerine node2<\/code>‘deki SSH kullan\u0131c\u0131 ad\u0131n\u0131z\u0131 yaz\u0131n.<\/p>\n
2.  node2<\/code>‘de dosyay\u0131 yerine ta\u015f\u0131ma:<\/strong>
\n    node2<\/code> \u00fczerinde (SSH ile ba\u011flanarak):<\/p>\n
sudo mv \/tmp\/node1 \/etc\/tinc\/myvpn\/hosts\/node1<\/code><\/pre>\n
3.  node2<\/code>‘den node1<\/code>‘e dosya kopyalama:<\/strong>
\n    node2<\/code> \u00fczerinde:<\/p>\n
scp \/etc\/tinc\/myvpn\/hosts\/node2 user@node1_genel_ip:\/tmp\/node2<\/code><\/pre>\n
4.  node1<\/code>‘de dosyay\u0131 yerine ta\u015f\u0131ma:<\/strong>
\n    node1<\/code> \u00fczerinde (SSH ile ba\u011flanarak):<\/p>\n
sudo mv \/tmp\/node2 \/etc\/tinc\/myvpn\/hosts\/node2<\/code><\/pre>\n
Bu ad\u0131mlardan sonra, her iki d\u00fc\u011f\u00fcm\u00fcn de \/etc\/tinc\/myvpn\/hosts\/<\/code> dizininde hem kendi ana bilgisayar dosyalar\u0131 (node1<\/code> veya node2<\/code>) hem de di\u011fer d\u00fc\u011f\u00fcm\u00fcn ana bilgisayar dosyas\u0131 bulunacakt\u0131r.<\/p>\n
\u00d6nemli Not:<\/strong> E\u011fer d\u00fc\u011f\u00fcmlerden biri NAT arkas\u0131ndaysa ve genel IP adresi tinc.conf<\/code> dosyas\u0131nda ConnectTo<\/code> olarak belirtilmediyse, Tinc o d\u00fc\u011f\u00fcme do\u011frudan ba\u011flanmaya \u00e7al\u0131\u015fmayabilir. Bu durumda, her d\u00fc\u011f\u00fcm\u00fcn \/etc\/tinc\/myvpn\/tinc.conf<\/code> dosyas\u0131na di\u011fer d\u00fc\u011f\u00fcmlerin genel IP adreslerini ConnectTo<\/code> direktifiyle eklemeniz gerekebilir.<\/p>\n
\u00d6rne\u011fin, node1<\/code>‘in tinc.conf<\/code> dosyas\u0131na node2<\/code>‘ye ba\u011flanmas\u0131 i\u00e7in:<\/p>\n
# \/etc\/tinc\/myvpn\/tinc.conf (node1 i\u00e7in)\nName = node1\n...\nConnectTo = <\/code><\/pre>\n
Ve node2<\/code>‘nin tinc.conf<\/code> dosyas\u0131na node1<\/code>‘e ba\u011flanmas\u0131 i\u00e7in:<\/p>\n
# \/etc\/tinc\/myvpn\/tinc.conf (node2 i\u00e7in)\nName = node2\n...\nConnectTo = <\/code><\/pre>\n
Bu, Tinc’in ba\u015flang\u0131\u00e7ta en az bir bilinen d\u00fc\u011f\u00fcme ba\u011flanmaya \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flar, bu da mesh a\u011f\u0131n\u0131n kurulmas\u0131na yard\u0131mc\u0131 olur.<\/p>\n
IP Y\u00f6nlendirme ve G\u00fcvenlik Duvar\u0131 Ayarlar\u0131<\/h3>\n
Tinc VPN’in d\u00fczg\u00fcn \u00e7al\u0131\u015fabilmesi ve a\u011f trafi\u011fini y\u00f6nlendirebilmesi i\u00e7in IP y\u00f6nlendirmenin etkinle\u015ftirilmesi ve g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n ayarlanmas\u0131 gerekmektedir.<\/p>\n
IP Y\u00f6nlendirmeyi Etkinle\u015ftirme<\/h4>\n
Her d\u00fc\u011f\u00fcmde IP y\u00f6nlendirmeyi etkinle\u015ftirmemiz gerekmektedir. Bu, paketlerin bir a\u011f aray\u00fcz\u00fcnden al\u0131n\u0131p ba\u015fka bir a\u011f aray\u00fcz\u00fcne iletilmesini sa\u011flar.<\/p>\n
Ge\u00e7ici olarak etkinle\u015ftirmek i\u00e7in:<\/p>\n
sudo sysctl -w net.ipv4.ip_forward=1<\/code><\/pre>\n
Kal\u0131c\u0131 hale getirmek i\u00e7in, \/etc\/sysctl.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyin ve a\u015fa\u011f\u0131daki sat\u0131r\u0131 bulun veya ekleyin:<\/p>\n
# \/etc\/sysctl.conf\nnet.ipv4.ip_forward = 1<\/code><\/pre>\n
De\u011fi\u015fiklikleri kaydettikten sonra, sudo sysctl -p<\/code> komutunu \u00e7al\u0131\u015ft\u0131rarak ayarlar\u0131 uygulay\u0131n.<\/p>\n
G\u00fcvenlik Duvar\u0131 Kurallar\u0131<\/h4>\n
Her d\u00fc\u011f\u00fcmde, Tinc’in kulland\u0131\u011f\u0131 portun (varsay\u0131lan 655\/UDP) g\u00fcvenlik duvar\u0131ndan ge\u00e7i\u015fine izin vermemiz gerekmektedir. Ubuntu 14.04’te yayg\u0131n olarak kullan\u0131lan g\u00fcvenlik duvar\u0131 ufw<\/code> (Uncomplicated Firewall) veya do\u011frudan iptables<\/code> olabilir.<\/p>\n
UFW Kullan\u0131yorsan\u0131z:<\/strong><\/p>\n
sudo ufw allow 655\/udp\nsudo ufw enable # E\u011fer ufw etkin de\u011filse<\/code><\/pre>\n
IPTables Kullan\u0131yorsan\u0131z:<\/strong><\/p>\n
Tinc portunu a\u00e7mak i\u00e7in:<\/p>\n
sudo iptables -A INPUT -p udp --dport 655 -j ACCEPT<\/code><\/pre>\n
E\u011fer Tinc VPN \u00fczerinden internete \u00e7\u0131k\u0131\u015f veya farkl\u0131 alt a\u011flar aras\u0131 y\u00f6nlendirme yapmak istiyorsan\u0131z, NAT (Network Address Translation) ve y\u00f6nlendirme kurallar\u0131 eklemeniz gerekebilir. \u00d6rne\u011fin, tun0<\/code> aray\u00fcz\u00fcnden gelen trafi\u011fi eth0<\/code> (genel a\u011f aray\u00fcz\u00fcn\u00fcz) \u00fczerinden internete y\u00f6nlendirmek i\u00e7in:<\/p>\n
# Y\u00f6nlendirme kurallar\u0131\nsudo iptables -A FORWARD -i tun0 -o eth0 -j ACCEPT\nsudo iptables -A FORWARD -i eth0 -o tun0 -j ACCEPT\n\n
NAT (Masquerade) kural\u0131<\/h2>\nsudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<\/code><\/pre>\n
Bu kurallar\u0131 kal\u0131c\u0131 hale getirmek i\u00e7in iptables-persistent<\/code> paketini kurabilir veya \/etc\/rc.local<\/code> dosyas\u0131na ekleyebilirsiniz.<\/p>\n
IPTables Kurallar\u0131n\u0131 Kal\u0131c\u0131 Hale Getirme (\u00d6nerilen):<\/strong><\/p>\n
sudo apt-get install iptables-persistent -y<\/code><\/pre>\n
Kurulum s\u0131ras\u0131nda mevcut kurallar\u0131 kaydetmek isteyip istemedi\u011finiz sorulacakt\u0131r. “Evet” yan\u0131t\u0131n\u0131 verin. Daha sonra kurallar\u0131 her de\u011fi\u015ftirdi\u011finizde, a\u015fa\u011f\u0131daki komutlarla kaydetmeyi unutmay\u0131n:<\/p>\n
sudo netfilter-persistent save<\/code><\/pre>\n
Tinc Servisini Ba\u015flatma ve Y\u00f6netme<\/h3>\n
T\u00fcm yap\u0131land\u0131rma ad\u0131mlar\u0131n\u0131 tamamlad\u0131ktan sonra, Tinc servisini ba\u015flatabilir ve y\u00f6netebiliriz.<\/p>\n
Ba\u015flatma<\/h4>\n
Tinc servisini ba\u015flatmak i\u00e7in her d\u00fc\u011f\u00fcmde a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n
sudo service tinc start<\/code><\/pre>\n
Veya e\u011fer \/etc\/network\/interfaces<\/code> dosyas\u0131nda pre-up<\/code> ve post-down<\/code> komutlar\u0131n\u0131 yap\u0131land\u0131rd\u0131ysan\u0131z, a\u011f aray\u00fcz\u00fcn\u00fc yeniden ba\u015flatmak da Tinc’i ba\u015flatacakt\u0131r:<\/p>\n
sudo ifdown tun0\nsudo ifup tun0<\/code><\/pre>\n
Durdurma<\/h4>\n
Tinc servisini durdurmak i\u00e7in:<\/p>\n
sudo service tinc stop<\/code><\/pre>\n
Veya:<\/p>\n
sudo ifdown tun0<\/code><\/pre>\n
Durum Kontrol\u00fc<\/h4>\n
Tinc servisinin durumunu kontrol etmek i\u00e7in:<\/p>\n
sudo service tinc status<\/code><\/pre>\n
Veya daha detayl\u0131 bilgi i\u00e7in:<\/p>\n
sudo tincd -n myvpn -D<\/code><\/pre>\n
Bu komut, Tinc daemon’unu hata ay\u0131klama modunda \u00e7al\u0131\u015ft\u0131r\u0131r ve terminale ayr\u0131nt\u0131l\u0131 loglar yazd\u0131r\u0131r. Ba\u011flant\u0131 sorunlar\u0131n\u0131 gidermek i\u00e7in \u00e7ok faydal\u0131d\u0131r.<\/p>\n
Ba\u011flant\u0131lar\u0131 Kontrol Etme<\/h4>\n
Tinc a\u011f\u0131ndaki ba\u011flant\u0131l\u0131 d\u00fc\u011f\u00fcmleri listelemek i\u00e7in:<\/p>\n
sudo tincd -n myvpn --list-peers<\/code><\/pre>\n
Bu komut, Tinc’in hangi d\u00fc\u011f\u00fcmlerle ba\u011flant\u0131 kurdu\u011funu ve bu ba\u011flant\u0131lar\u0131n durumunu g\u00f6sterecektir.<\/p>\n
VPN Ba\u011flant\u0131s\u0131n\u0131 Test Etme<\/h3>\n
Tinc servisi ba\u015flat\u0131ld\u0131ktan ve bir s\u00fcre bekledikten sonra (d\u00fc\u011f\u00fcmlerin birbirini bulmas\u0131 ve ba\u011flant\u0131 kurmas\u0131 birka\u00e7 saniye s\u00fcrebilir), VPN ba\u011flant\u0131s\u0131n\u0131 test edebiliriz.<\/p>\n
Ping Testi<\/h4>\n
Bir d\u00fc\u011f\u00fcmden di\u011ferinin Tinc VPN IP adresine ping atarak ba\u011flant\u0131y\u0131 test edin.<\/p>\n
node1<\/code> \u00fczerinden node2<\/code>‘ye ping:<\/p>\n
ping 10.0.0.2<\/code><\/pre>\n
node2<\/code> \u00fczerinden node1<\/code>‘e ping:<\/p>\n
ping 10.0.0.1<\/code><\/pre>\n
E\u011fer ping ba\u015far\u0131l\u0131 olursa, Tinc VPN ba\u011flant\u0131s\u0131 d\u00fczg\u00fcn \u00e7al\u0131\u015f\u0131yor demektir.<\/p>\n
SSH Testi<\/h4>\n
Tinc VPN IP adresleri \u00fczerinden SSH ba\u011flant\u0131s\u0131 kurmay\u0131 deneyin. Bu, a\u011f\u0131n sadece ping de\u011fil, ayn\u0131 zamanda daha y\u00fcksek seviyeli protokoller i\u00e7in de \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frular.<\/p>\n
node1<\/code> \u00fczerinden node2<\/code>‘ye SSH:<\/p>\n
ssh user@10.0.0.2<\/code><\/pre>\n
Dosya Aktar\u0131m\u0131<\/h4>\n
scp<\/code> gibi ara\u00e7larla Tinc VPN IP’leri \u00fczerinden dosya aktar\u0131m\u0131 yaparak a\u011f\u0131n bant geni\u015fli\u011fini ve kararl\u0131l\u0131\u011f\u0131n\u0131 test edebilirsiniz.<\/p>\n
scp local_file.txt user@10.0.0.2:\/remote\/path\/<\/code><\/pre>\n
Bu testler ba\u015far\u0131l\u0131 olursa, temel Tinc VPN a\u011f\u0131n\u0131z ba\u015far\u0131yla kurulmu\u015f ve \u00e7al\u0131\u015f\u0131yor demektir.<\/p>\n
Geli\u015fmi\u015f Yap\u0131land\u0131rma ve \u0130pu\u00e7lar\u0131<\/h3>\n
Tinc, basit bir VPN kurulumunun \u00f6tesinde bir\u00e7ok geli\u015fmi\u015f yap\u0131land\u0131rma se\u00e7ene\u011fi sunar.<\/p>\n
\u00c7oklu Alt A\u011flar<\/h4>\n
E\u011fer d\u00fc\u011f\u00fcmlerinizin arkas\u0131nda birden fazla alt a\u011f varsa ve bu alt a\u011flar\u0131n Tinc VPN \u00fczerinden eri\u015filebilir olmas\u0131n\u0131 istiyorsan\u0131z, her d\u00fc\u011f\u00fcm\u00fcn kendi \/etc\/tinc\/myvpn\/hosts\/<\/code> dosyas\u0131na ek Subnet<\/code> direktifleri ekleyebilirsiniz.<\/p>\n
\u00d6rne\u011fin, node1<\/code>‘in arkas\u0131nda 192.168.1.0\/24<\/code> a\u011f\u0131 varsa:<\/p>\n
# \/etc\/tinc\/myvpn\/hosts\/node1\nAddress = \nSubnet = 10.0.0.1\/32\nSubnet = 192.168.1.0\/24 # Yeni alt a\u011f\nPort = 655\n...<\/code><\/pre>\n
Bu durumda, Tinc di\u011fer d\u00fc\u011f\u00fcmlere node1<\/code> \u00fczerinden 192.168.1.0\/24<\/code> a\u011f\u0131na ula\u015f\u0131labilece\u011fini bildirecektir. Bu alt a\u011flara y\u00f6nlendirme yapabilmek i\u00e7in node1<\/code> \u00fczerinde IP y\u00f6nlendirmenin ve g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n do\u011fru yap\u0131land\u0131r\u0131lmas\u0131 gerekmektedir.<\/p>\n
NAT Traversal ve Port Y\u00f6nlendirme<\/h4>\n
Tinc’in en g\u00fc\u00e7l\u00fc \u00f6zelliklerinden biri NAT ge\u00e7i\u015f yetene\u011fidir. E\u011fer d\u00fc\u011f\u00fcmlerden biri veya birka\u00e7\u0131 bir NAT cihaz\u0131n\u0131n (\u00f6rne\u011fin, ev router’\u0131) arkas\u0131ndaysa, Tinc genellikle UDP hole punching tekni\u011fini kullanarak do\u011frudan ba\u011flant\u0131 kurmay\u0131 deneyebilir. Ancak, bu her zaman garanti edilmez.<\/p>\n
*   Port Y\u00f6nlendirme:<\/strong> En g\u00fcvenilir y\u00f6ntem, NAT cihaz\u0131n\u0131zda Tinc’in kulland\u0131\u011f\u0131 UDP portunu (varsay\u0131lan 655) Tinc d\u00fc\u011f\u00fcm\u00fcn\u00fcz\u00fcn yerel IP adresine y\u00f6nlendirmektir.
\n*   ConnectTo<\/code> Direktifi:<\/strong> Yukar\u0131da bahsedildi\u011fi gibi, en az bir bilinen d\u00fc\u011f\u00fcm\u00fcn genel IP adresini di\u011fer d\u00fc\u011f\u00fcmlerin tinc.conf<\/code> dosyalar\u0131nda ConnectTo<\/code> direktifiyle belirtmek, a\u011f\u0131n kurulmas\u0131na yard\u0131mc\u0131 olur.<\/p>\n
G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h4>\n
*   G\u00fc\u00e7l\u00fc Anahtarlar:<\/strong> tincd -K<\/code> komutu varsay\u0131lan olarak 2048 bit RSA anahtarlar\u0131 olu\u015fturur. Daha uzun anahtarlar (\u00f6rne\u011fin, tincd -K 4096<\/code>) daha y\u00fcksek g\u00fcvenlik sa\u011flayabilir, ancak performans maliyeti olabilir.
\n*   Eri\u015fim K\u0131s\u0131tlamas\u0131:<\/strong> Tinc VPN IP adresleri \u00fczerinden eri\u015filebilir olmas\u0131 gereken hizmetleri yaln\u0131zca bu IP’lerden eri\u015fime izin vererek k\u0131s\u0131tlay\u0131n.
\n*   G\u00fcncel Tutma:<\/strong> Ubuntu 14.04 art\u0131k g\u00fcncel bir s\u00fcr\u00fcm olmasa da, Tinc’in kendisi g\u00fcncel s\u00fcr\u00fcmleri desteklemektedir. M\u00fcmk\u00fcnse, daha modern ve g\u00fcncel bir i\u015fletim sistemi kullanmay\u0131 d\u00fc\u015f\u00fcn\u00fcn.
\n*   Loglar\u0131 \u0130zleme:<\/strong> Tinc loglar\u0131n\u0131 (\/var\/log\/syslog<\/code> veya tincd -D<\/code> \u00e7\u0131kt\u0131s\u0131) d\u00fczenli olarak izleyerek olas\u0131 g\u00fcvenlik sorunlar\u0131n\u0131 veya ba\u011flant\u0131 hatalar\u0131n\u0131 tespit edebilirsiniz.<\/p>\n
Sorun Giderme<\/h4>\n
*   Loglar\u0131 Kontrol Edin:<\/strong> \/var\/log\/syslog<\/code> dosyas\u0131n\u0131 Tinc ile ilgili hatalar i\u00e7in kontrol edin. tincd -n myvpn -D<\/code> komutu da faydal\u0131 hata ay\u0131klama bilgileri sa\u011flar.
\n*   G\u00fcvenlik Duvar\u0131:<\/strong> Tinc portunun (655\/UDP) her iki y\u00f6nde de a\u00e7\u0131k oldu\u011fundan emin olun.
\n*   IP Adresleri:<\/strong> Tinc i\u00e7indeki IP adreslerinin (10.0.0.1, 10.0.0.2 vb.) benzersiz oldu\u011fundan ve \/etc\/network\/interfaces<\/code> ile host dosyalar\u0131nda do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olun.
\n*   Anahtar De\u011fi\u015fimi:<\/strong> T\u00fcm d\u00fc\u011f\u00fcmlerin birbirlerinin genel anahtar dosyalar\u0131na sahip oldu\u011fundan emin olun.
\n*   ConnectTo<\/code> Direktifi:<\/strong> \u00d6zellikle NAT arkas\u0131ndaki d\u00fc\u011f\u00fcmler i\u00e7in ConnectTo<\/code> direktifinin do\u011fru ayarland\u0131\u011f\u0131ndan emin olun.
\n*   A\u011f Aray\u00fcz\u00fc Durumu:<\/strong> ifconfig tun0<\/code> veya ip addr show tun0<\/code> komutlar\u0131yla tun0<\/code> aray\u00fcz\u00fcn\u00fcn do\u011fru IP adresiyle aktif olup olmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu makalede, Tinc’in ne oldu\u011funu, neden tercih edilebilece\u011fini ve Ubuntu 14.04 i\u015fletim sistemi \u00fczerinde temel bir Tinc VPN a\u011f\u0131n\u0131n nas\u0131l kurulaca\u011f\u0131n\u0131 ayr\u0131nt\u0131l\u0131 olarak inceledik. Kurulum ad\u0131mlar\u0131ndan, yap\u0131land\u0131rma dosyalar\u0131n\u0131n d\u00fczenlenmesine, d\u00fc\u011f\u00fcmler aras\u0131 anahtar payla\u015f\u0131m\u0131na ve g\u00fcvenlik duvar\u0131 ayarlar\u0131na kadar her a\u015famay\u0131 ad\u0131m ad\u0131m anlatt\u0131k. Ayr\u0131ca, kurulan VPN ba\u011flant\u0131s\u0131n\u0131n nas\u0131l test edilece\u011fine ve Tinc’in geli\u015fmi\u015f kullan\u0131m senaryolar\u0131na dair ipu\u00e7lar\u0131 sunduk.<\/p>\n
Tinc, merkezi bir sunucuya ba\u011f\u0131ml\u0131l\u0131\u011f\u0131 ortadan kald\u0131ran, esnek ve g\u00fcvenli bir mesh VPN \u00e7\u00f6z\u00fcm\u00fc sunarak geleneksel VPN’lere g\u00fc\u00e7l\u00fc bir alternatif olu\u015fturur. \u00d6zellikle da\u011f\u0131t\u0131k sistemler, \u00e7oklu \u015fubeli a\u011flar veya ki\u015fisel sunucular aras\u0131nda g\u00fcvenli ve do\u011frudan ba\u011flant\u0131lar kurmak isteyenler i\u00e7in idealdir. Ubuntu 14.04 gibi daha eski bir sistem \u00fczerinde bile Tinc’in g\u00fcc\u00fcnden yararlanarak sa\u011flam ve g\u00fcvenilir bir VPN altyap\u0131s\u0131 olu\u015fturabilirsiniz. Bu rehber, Tinc d\u00fcnyas\u0131na ilk ad\u0131m\u0131n\u0131z\u0131 atman\u0131z i\u00e7in size sa\u011flam bir temel sa\u011flam\u0131\u015ft\u0131r. \u0130htiya\u00e7lar\u0131n\u0131za g\u00f6re Tinc yap\u0131land\u0131rman\u0131z\u0131 daha da \u00f6zelle\u015ftirebilir ve geni\u015fletebilirsiniz.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Tinc Kurulumu ve Ubuntu 14.","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-40396","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nTinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131\" \/>\n<meta property=\"og:description\" content=\"Tinc Kurulumu ve Ubuntu 14.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-26T14:40:54+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"20 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131\",\"datePublished\":\"2026-02-26T14:40:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\"},\"wordCount\":3360,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\",\"name\":\"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-02-26T14:40:54+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131","og_description":"Tinc Kurulumu ve Ubuntu 14.","og_url":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-02-26T14:40:54+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"20 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131","datePublished":"2026-02-26T14:40:54+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/"},"wordCount":3360,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","url":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/","name":"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-02-26T14:40:54+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/tinc-kurulumu-ve-ubuntu-14-04-uzerinde-temel-bir-vpn-yapilandirmasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Tinc Kurulumu ve Ubuntu 14.04 \u00dczerinde Temel Bir VPN Yap\u0131land\u0131rmas\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/40396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=40396"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/40396\/revisions"}],"predecessor-version":[{"id":40397,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/40396\/revisions\/40397"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=40396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=40396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=40396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}