{"id":40670,"date":"2026-02-28T12:40:44","date_gmt":"2026-02-28T09:40:44","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=40670"},"modified":"2026-02-28T12:40:44","modified_gmt":"2026-02-28T09:40:44","slug":"mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/","title":{"rendered":"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS’te G\u00fcvenli Hale Getirme"},"content":{"rendered":"

<\/p>\n

MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS’te G\u00fcvenli Hale Getirme<\/h2>\n

Bir Linux tabanl\u0131 Sanal \u00d6zel Sunucu (VPS) \u00fczerinde MySQL veya MariaDB veritaban\u0131 \u00e7al\u0131\u015ft\u0131rmak, modern web uygulamalar\u0131n\u0131n ve hizmetlerinin temel bir bile\u015fenidir. Ancak, bu veritabanlar\u0131 hassas veriler i\u00e7erdi\u011fi ve uygulamalar\u0131n kritik operasyonlar\u0131n\u0131 destekledi\u011fi i\u00e7in, g\u00fcvenlikleri asla g\u00f6z ard\u0131 edilmemesi gereken bir \u00f6nceliktir. Siber sald\u0131rganlar s\u00fcrekli olarak zay\u0131f noktalar\u0131 arar ve bir veritaban\u0131n\u0131n g\u00fcvenli\u011finin ihlal edilmesi, veri kayb\u0131na, gizlili\u011fin ihlaline, hizmet kesintilerine ve ciddi itibar kayb\u0131na yol a\u00e7abilir. Bu makale, MySQL ve MariaDB veritabanlar\u0131n\u0131z\u0131 bir Linux VPS ortam\u0131nda kapsaml\u0131 bir \u015fekilde nas\u0131l g\u00fcvence alt\u0131na alabilece\u011finizi ad\u0131m ad\u0131m ele alacakt\u0131r. Amac\u0131m\u0131z, hem ba\u015flang\u0131\u00e7 seviyesindeki kullan\u0131c\u0131lar hem de deneyimli y\u00f6neticiler i\u00e7in uygulanabilir ve etkili g\u00fcvenlik stratejileri sunmakt\u0131r.<\/p>\n

Giri\u015f ve \u0130lk Kurulum G\u00fcvenli\u011fi<\/h3>\n

Veritaban\u0131 g\u00fcvenli\u011finin temeli, kurulum a\u015famas\u0131nda at\u0131lan do\u011fru ad\u0131mlarla ba\u015flar. MySQL ve MariaDB, varsay\u0131lan olarak belirli g\u00fcvenlik a\u00e7\u0131klar\u0131na sahip olabilecek ayarlarla gelebilir. Bu nedenle, ilk yap\u0131land\u0131rma s\u0131ras\u0131nda proaktif olmak hayati \u00f6nem ta\u015f\u0131r.<\/p>\n

MySQL\/MariaDB Kurulumu ve mysql_secure_installation<\/code> Komutu<\/h4>\n

Yeni bir MySQL veya MariaDB kurulumu yapt\u0131ktan sonra, ilk yapman\u0131z gereken \u015fey mysql_secure_installation<\/code> komutunu \u00e7al\u0131\u015ft\u0131rmakt\u0131r. Bu komut, veritaban\u0131 sunucunuzun temel g\u00fcvenlik ayarlar\u0131n\u0131 yap\u0131land\u0131rmak i\u00e7in etkile\u015fimli bir betik sunar.<\/p>\n

* Root Parolas\u0131 Belirleme:<\/strong> \u0130lk olarak, root kullan\u0131c\u0131s\u0131 i\u00e7in g\u00fc\u00e7l\u00fc bir parola belirlemeniz istenecektir. Bu parola, veritaban\u0131 sunucusuna tam y\u00f6netim eri\u015fimi sa\u011flad\u0131\u011f\u0131 i\u00e7in son derece karma\u015f\u0131k ve tahmin edilemez olmal\u0131d\u0131r.
\n* Anonim Kullan\u0131c\u0131lar\u0131 Kald\u0131rma:<\/strong> Varsay\u0131lan olarak, MySQL\/MariaDB anonim kullan\u0131c\u0131lara izin verebilir. Bu kullan\u0131c\u0131lar, herhangi bir kimlik do\u011frulama olmadan veritaban\u0131na eri\u015febilir ve potansiyel bir g\u00fcvenlik riski olu\u015fturur. Bu kullan\u0131c\u0131lar\u0131 kald\u0131rmak, yetkisiz eri\u015fimi engeller.
\n* Uzak Root Giri\u015fini Devre D\u0131\u015f\u0131 B\u0131rakma:<\/strong> Root kullan\u0131c\u0131s\u0131n\u0131n uzaktan ba\u011flant\u0131 kurmas\u0131n\u0131 engellemek kritik bir g\u00fcvenlik \u00f6nlemidir. Root kullan\u0131c\u0131s\u0131 sadece localhost<\/code> \u00fczerinden eri\u015febilmelidir. Uzaktan y\u00f6netim i\u00e7in, ayr\u0131cal\u0131klar\u0131 k\u0131s\u0131tlanm\u0131\u015f ba\u015fka bir kullan\u0131c\u0131 olu\u015fturulmal\u0131d\u0131r.
\n* Test Veritaban\u0131n\u0131 Kald\u0131rma:<\/strong> test<\/code> veritaban\u0131 ve ona eri\u015fim sa\u011flayan kullan\u0131c\u0131lar genellikle varsay\u0131lan olarak olu\u015fturulur. Bu veritaban\u0131, geli\u015ftirme veya test ama\u00e7l\u0131 olsa da, \u00fcretim ortam\u0131nda gereksiz bir risk fakt\u00f6r\u00fcd\u00fcr ve kald\u0131r\u0131lmal\u0131d\u0131r.
\n* Ayr\u0131cal\u0131k Tablolar\u0131n\u0131 Yeniden Y\u00fckleme:<\/strong> Yap\u0131lan de\u011fi\u015fikliklerin etkili olmas\u0131 i\u00e7in ayr\u0131cal\u0131k tablolar\u0131n\u0131n yeniden y\u00fcklenmesi gerekir.<\/p>\n

Bu ad\u0131mlar\u0131n tamamlanmas\u0131, veritaban\u0131 sunucunuzun ilk savunma hatt\u0131n\u0131 g\u00fc\u00e7lendirir ve bir\u00e7ok yayg\u0131n g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kapat\u0131r.<\/p>\n

Kullan\u0131c\u0131 ve Ayr\u0131cal\u0131k Y\u00f6netimi<\/h3>\n

Veritaban\u0131 g\u00fcvenli\u011finin temel ta\u015flar\u0131ndan biri, kullan\u0131c\u0131lar\u0131n ve onlar\u0131n sahip oldu\u011fu ayr\u0131cal\u0131klar\u0131n dikkatli bir \u015fekilde y\u00f6netilmesidir. “En Az Ayr\u0131cal\u0131k Prensibi” (Principle of Least Privilege) bu alanda alt\u0131n kurald\u0131r.<\/p>\n

En Az Ayr\u0131cal\u0131k Prensibi<\/h4>\n

Her uygulaman\u0131n veya kullan\u0131c\u0131n\u0131n, g\u00f6revini yerine getirmek i\u00e7in kesinlikle ihtiya\u00e7 duydu\u011fu minimum ayr\u0131cal\u0131klara sahip olmas\u0131 gerekti\u011fini belirtir. Bu, bir g\u00fcvenlik ihlali durumunda potansiyel zarar\u0131 en aza indirmeye yard\u0131mc\u0131 olur.<\/p>\n

* Uygulamalar \u0130\u00e7in \u00d6zel Kullan\u0131c\u0131lar Olu\u015fturma:<\/strong> Her uygulama veya hizmet i\u00e7in ayr\u0131 bir veritaban\u0131 kullan\u0131c\u0131s\u0131 olu\u015fturun. Asla uygulaman\u0131z\u0131n root kullan\u0131c\u0131s\u0131 ile veritaban\u0131na ba\u011flanmas\u0131na izin vermeyin.
\n* Gerekli \u0130zinleri Verme:<\/strong> Bir kullan\u0131c\u0131ya yaln\u0131zca belirli veritabanlar\u0131, tablolar veya hatta s\u00fctunlar \u00fczerinde ihtiyac\u0131 olan izinleri (SELECT, INSERT, UPDATE, DELETE, vb.) verin. \u00d6rne\u011fin, sadece veri okuyacak bir uygulama i\u00e7in INSERT<\/code>, UPDATE<\/code> veya DELETE<\/code> izinleri vermek gereksizdir.<\/p>\n

CREATE USER 'uygulama_kullanicisi'@'localhost' IDENTIFIED BY 'GucluParola123!';\n    GRANT SELECT, INSERT, UPDATE, DELETE ON veritabani_adi.* TO 'uygulama_kullanicisi'@'localhost';\n    FLUSH PRIVILEGES;<\/code><\/pre>\n
*   GRANT ALL PRIVILEGES<\/code> Kullan\u0131m\u0131ndan Ka\u00e7\u0131nma:<\/strong> Bu komut, kullan\u0131c\u0131ya t\u00fcm veritabanlar\u0131 \u00fczerinde tam kontrol verir ve ciddi bir g\u00fcvenlik riski olu\u015fturur. Geli\u015ftirme veya test ortamlar\u0131 d\u0131\u015f\u0131nda asla kullan\u0131lmamal\u0131d\u0131r.
\n*   Kullan\u0131lmayan Ayr\u0131cal\u0131klar\u0131 \u0130ptal Etme:<\/strong> Zamanla, bir kullan\u0131c\u0131n\u0131n ihtiya\u00e7 duydu\u011fu ayr\u0131cal\u0131klar de\u011fi\u015febilir. D\u00fczenli olarak kullan\u0131c\u0131 ayr\u0131cal\u0131klar\u0131n\u0131 g\u00f6zden ge\u00e7irin ve art\u0131k ihtiya\u00e7 duyulmayanlar\u0131 iptal edin.<\/p>\n
G\u00fc\u00e7l\u00fc Parola Politikalar\u0131<\/h4>\n
Kullan\u0131c\u0131 ayr\u0131cal\u0131klar\u0131 kadar, bu ayr\u0131cal\u0131klar\u0131 koruyan parolalar\u0131n g\u00fcc\u00fc de \u00f6nemlidir.<\/p>\n
*   Karma\u015f\u0131k ve Uzun Parolalar:<\/strong> T\u00fcm veritaban\u0131 kullan\u0131c\u0131lar\u0131 i\u00e7in uzun (en az 12-16 karakter), b\u00fcy\u00fck\/k\u00fc\u00e7\u00fck harf, rakam ve \u00f6zel karakterler i\u00e7eren parolalar kullan\u0131n.
\n*   Parola Son Kullanma Tarihi:<\/strong> Parolalar\u0131n d\u00fczenli aral\u0131klarla de\u011fi\u015ftirilmesini zorunlu k\u0131l\u0131n. MySQL 5.6.6 ve \u00fczeri ile MariaDB 10.1 ve \u00fczeri s\u00fcr\u00fcmlerde parola ya\u015fland\u0131rma (password expiration) \u00f6zellikleri mevcuttur.<\/p>\n
ALTER USER 'kullanici_adi'@'localhost' PASSWORD EXPIRE INTERVAL 90 DAY;<\/code><\/pre>\n
*   Parola Do\u011frulama Eklentileri:<\/strong> MySQL ve MariaDB, parolalar\u0131n belirli g\u00fcvenlik standartlar\u0131n\u0131 kar\u015f\u0131lamas\u0131n\u0131 sa\u011flayan parola do\u011frulama eklentileri sunar. Bu eklentileri etkinle\u015ftirerek parola karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 zorunlu k\u0131labilirsiniz. \u00d6rne\u011fin, MySQL’deki validate_password<\/code> eklentisi.<\/p>\n
INSTALL PLUGIN validate_password SONAME 'validate_password.so';<\/code><\/pre>\n
*   Parolalar\u0131 G\u00fcvenli Saklama:<\/strong> Uygulama kodunda veya yap\u0131land\u0131rma dosyalar\u0131nda parolalar\u0131 asla d\u00fcz metin olarak saklamay\u0131n. Ortam de\u011fi\u015fkenleri, s\u0131r y\u00f6netim ara\u00e7lar\u0131 veya \u015fifreli yap\u0131land\u0131rma dosyalar\u0131 kullan\u0131n.<\/p>\n
A\u011f G\u00fcvenli\u011fi<\/h3>\n
Veritaban\u0131n\u0131za eri\u015fimi k\u0131s\u0131tlamak, d\u0131\u015far\u0131dan gelebilecek sald\u0131r\u0131lara kar\u015f\u0131 en etkili savunma y\u00f6ntemlerinden biridir. A\u011f katman\u0131nda al\u0131nacak \u00f6nlemler, yetkisiz eri\u015fimi b\u00fcy\u00fck \u00f6l\u00e7\u00fcde azalt\u0131r.<\/p>\n
G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rmas\u0131 (UFW\/firewalld)<\/h4>\n
Linux VPS’inizde bir g\u00fcvenlik duvar\u0131 (firewall) etkinle\u015ftirmek ve yap\u0131land\u0131rmak zorunludur. UFW (Ubuntu\/Debian tabanl\u0131 sistemler i\u00e7in) veya firewalld (CentOS\/RHEL tabanl\u0131 sistemler i\u00e7in) gibi ara\u00e7lar bu konuda size yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n
*   3306 Portunu K\u0131s\u0131tlama:<\/strong> MySQL ve MariaDB varsay\u0131lan olarak 3306 numaral\u0131 portu kullan\u0131r. Bu portu yaln\u0131zca veritaban\u0131na eri\u015fmesi gereken belirli IP adreslerinden veya a\u011flardan gelen ba\u011flant\u0131lara izin verecek \u015fekilde yap\u0131land\u0131r\u0131n.<\/p>\n
# UFW i\u00e7in\n    sudo ufw default deny incoming\n    sudo ufw default allow outgoing\n    sudo ufw allow ssh # SSH eri\u015fimi i\u00e7in\n    sudo ufw allow from 192.168.1.100 to any port 3306 # Belirli bir IP'den eri\u015fime izin ver\n    sudo ufw enable\n\n    # firewalld i\u00e7in\n    sudo firewall-cmd --permanent --add-source=192.168.1.100 --zone=public\n    sudo firewall-cmd --permanent --zone=public --add-port=3306\/tcp\n    sudo firewall-cmd --reload<\/code><\/pre>\n
*   bind-address<\/code> Kullan\u0131m\u0131:<\/strong> MySQL\/MariaDB yap\u0131land\u0131rma dosyas\u0131nda (my.cnf<\/code> veya mariadb.cnf<\/code>), bind-address<\/code> parametresini 127.0.0.1<\/code> (localhost) olarak ayarlayarak veritaban\u0131n\u0131n sadece yerel makineden gelen ba\u011flant\u0131lar\u0131 dinlemesini sa\u011flay\u0131n. E\u011fer veritaban\u0131na uzaktan eri\u015fim gerekiyorsa, bu parametreyi sunucunuzun \u00f6zel IP adresine ayarlay\u0131n ve g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 buna g\u00f6re d\u00fczenleyin. Asla 0.0.0.0<\/code> olarak ayarlamay\u0131n, bu veritaban\u0131n\u0131n t\u00fcm a\u011f aray\u00fczlerinden eri\u015filebilir oldu\u011fu anlam\u0131na gelir.<\/p>\n
# my.cnf i\u00e7inde\n    [mysqld]\n    bind-address = 127.0.0.1<\/code><\/pre>\n
SSH T\u00fcnelleme<\/h4>\n
E\u011fer veritaban\u0131na sadece ara s\u0131ra ve g\u00fcvenli bir \u015fekilde uzaktan eri\u015fim sa\u011flaman\u0131z gerekiyorsa, do\u011frudan ba\u011flant\u0131 yerine SSH t\u00fcnelleme kullanmak daha g\u00fcvenlidir. Bu y\u00f6ntem, veritaban\u0131 trafi\u011fini \u015fifreli bir SSH ba\u011flant\u0131s\u0131 \u00fczerinden y\u00f6nlendirir.<\/p>\n
*   Nas\u0131l Kullan\u0131l\u0131r:<\/strong><\/p>\n
ssh -L 3307:127.0.0.1:3306 kullanici_adi@vps_ip_adresi<\/code><\/pre>\n
    Bu komut, yerel makinenizin 3307 portunu VPS’teki 3306 portuna t\u00fcneller. Ard\u0131ndan, yerel makinenizdeki 127.0.0.1:3307<\/code> adresine ba\u011flanarak VPS’teki veritaban\u0131na g\u00fcvenli bir \u015fekilde eri\u015febilirsiniz.<\/p>\n
SSL\/TLS \u015eifrelemesi<\/h4>\n
Veritaban\u0131 sunucusu ile istemciler aras\u0131ndaki ileti\u015fimi \u015fifrelemek, \u00f6zellikle hassas verilerin iletildi\u011fi durumlarda kritik \u00f6neme sahiptir. SSL\/TLS (Secure Sockets Layer\/Transport Layer Security) kullan\u0131m\u0131, verilerin a\u011f \u00fczerinde okunmas\u0131n\u0131 engeller.<\/p>\n
*   Sertifika Olu\u015fturma:<\/strong> CA (Certificate Authority), sunucu sertifikas\u0131 ve anahtar\u0131 ile istemci sertifikas\u0131 ve anahtar\u0131 olu\u015fturman\u0131z gerekir. Bu i\u015flem openssl<\/code> komutu ile yap\u0131labilir.
\n*   Veritaban\u0131 Sunucusunu Yap\u0131land\u0131rma:<\/strong> my.cnf<\/code> dosyas\u0131na SSL\/TLS sertifika yollar\u0131n\u0131 ekleyin:<\/p>\n
[mysqld]\n    ssl-ca=\/etc\/mysql\/ssl\/ca.pem\n    ssl-cert=\/etc\/mysql\/ssl\/server-cert.pem\n    ssl-key=\/etc\/mysql\/ssl\/server-key.pem<\/code><\/pre>\n
*   \u0130stemciyi Yap\u0131land\u0131rma:<\/strong> \u0130stemci taraf\u0131nda da (uygulama kodu veya mysql<\/code> komut sat\u0131r\u0131 istemcisi), SSL\/TLS kullanmak \u00fczere yap\u0131land\u0131rma yapman\u0131z ve gerekli sertifikalar\u0131 belirtmeniz gerekir.<\/p>\n
mysql -h vps_ip_adresi -u kullanici_adi -p --ssl-ca=\/path\/to\/ca.pem --ssl-cert=\/path\/to\/client-cert.pem --ssl-key=\/path\/to\/client-key.pem<\/code><\/pre>\n
*   SSL’i Zorunlu K\u0131lma:<\/strong> Belirli kullan\u0131c\u0131lar\u0131n sadece SSL \u00fczerinden ba\u011flanmas\u0131n\u0131 zorunlu k\u0131labilirsiniz:<\/p>\n
ALTER USER 'kullanici_adi'@'%' REQUIRE SSL;<\/code><\/pre>\n
Yap\u0131land\u0131rma Dosyas\u0131 G\u00fc\u00e7lendirmesi (my.cnf<\/code>)<\/h3>\n
my.cnf<\/code> (veya mariadb.cnf<\/code>) dosyas\u0131, MySQL\/MariaDB sunucunuzun davran\u0131\u015f\u0131n\u0131 kontrol eden ana yap\u0131land\u0131rma dosyas\u0131d\u0131r. Bu dosyadaki belirli parametreleri ayarlayarak g\u00fcvenlik seviyesini art\u0131rabilirsiniz.<\/p>\n
\u00d6nemli Parametreler<\/h4>\n
*   local_infile = 0<\/code>:<\/strong> Bu parametre, kullan\u0131c\u0131lar\u0131n LOAD DATA LOCAL INFILE<\/code> komutunu kullanarak istemci makinesinden sunucuya dosya y\u00fcklemesini engeller. Bu, bir t\u00fcr dosya enjeksiyon sald\u0131r\u0131s\u0131n\u0131 \u00f6nlemeye yard\u0131mc\u0131 olur. Varsay\u0131lan olarak genellikle devre d\u0131\u015f\u0131d\u0131r, ancak kontrol etmekte fayda var.
\n*   skip-name-resolve<\/code>:<\/strong> Bu ayar, MySQL’in istemci ba\u011flant\u0131lar\u0131 i\u00e7in ana bilgisayar adlar\u0131n\u0131 \u00e7\u00f6z\u00fcmlemesini atlar ve sadece IP adreslerini kullan\u0131r. Bu, DNS tabanl\u0131 sald\u0131r\u0131lar\u0131 \u00f6nler ve genellikle performans\u0131 art\u0131r\u0131r. Ancak, ayr\u0131cal\u0131k tablolar\u0131nda ana bilgisayar adlar\u0131 yerine IP adresleri kullanman\u0131z gerekti\u011fi anlam\u0131na gelir.
\n*   max_connections<\/code>:<\/strong> Sunucuya izin verilen maksimum e\u015fzamanl\u0131 ba\u011flant\u0131 say\u0131s\u0131n\u0131 s\u0131n\u0131rlar. Bu, bir DDoS sald\u0131r\u0131s\u0131 s\u0131ras\u0131nda sunucunuzun kaynaklar\u0131n\u0131n t\u00fckenmesini \u00f6nlemeye yard\u0131mc\u0131 olabilir. Ancak, \u00e7ok d\u00fc\u015f\u00fck bir de\u011fer ayarlamak normal operasyonlar\u0131 etkileyebilir.
\n*   secure_file_priv<\/code>:<\/strong> Bu parametre, LOAD DATA INFILE<\/code> ve SELECT ... INTO OUTFILE<\/code> gibi dosya i\u015flemlerinin yaln\u0131zca belirli bir dizinle s\u0131n\u0131rl\u0131 olmas\u0131n\u0131 sa\u011flar. G\u00fcvenli bir dizin belirleyerek veya bo\u015f b\u0131rakarak bu t\u00fcr i\u015flemleri tamamen devre d\u0131\u015f\u0131 b\u0131rakarak dosya sistemi eri\u015fimini k\u0131s\u0131tlayabilirsiniz.<\/p>\n
[mysqld]\n    secure_file_priv = \/var\/lib\/mysql-files # Sadece bu dizine izin ver\n    # secure_file_priv = \"\" # T\u00fcm dosya i\u015flemlerini devre d\u0131\u015f\u0131 b\u0131rak<\/code><\/pre>\n
*   skip-networking<\/code>:<\/strong> E\u011fer veritaban\u0131n\u0131za sadece yerel makineden eri\u015filiyorsa, bu se\u00e7ene\u011fi etkinle\u015ftirerek veritaban\u0131n\u0131n herhangi bir a\u011f aray\u00fcz\u00fcn\u00fc dinlemesini tamamen engelleyebilirsiniz. Bu, en y\u00fcksek a\u011f g\u00fcvenli\u011fi seviyesini sa\u011flar.<\/p>\n
[mysqld]\n    skip-networking<\/code><\/pre>\n
Denetim ve G\u00fcnl\u00fckleme (Auditing and Logging)<\/h3>\n
G\u00fcvenlik olaylar\u0131n\u0131 tespit etmek ve potansiyel sald\u0131r\u0131lar\u0131 ara\u015ft\u0131rmak i\u00e7in kapsaml\u0131 g\u00fcnl\u00fck kayd\u0131 tutmak hayati \u00f6nem ta\u015f\u0131r. MySQL ve MariaDB \u00e7e\u015fitli g\u00fcnl\u00fck dosyalar\u0131 sa\u011flar.<\/p>\n
G\u00fcnl\u00fck T\u00fcrleri<\/h4>\n
*   Hata G\u00fcnl\u00fc\u011f\u00fc (error log<\/code>):<\/strong> Veritaban\u0131 sunucusunun ba\u015flang\u0131\u00e7, kapan\u0131\u015f ve \u00e7al\u0131\u015fma s\u0131ras\u0131nda kar\u015f\u0131la\u015ft\u0131\u011f\u0131 t\u00fcm hatalar\u0131, uyar\u0131lar\u0131 ve kritik olaylar\u0131 kaydeder. D\u00fczenli olarak incelenmelidir.
\n*   Genel Sorgu G\u00fcnl\u00fc\u011f\u00fc (general query log<\/code>):<\/strong> Veritaban\u0131 sunucusuna g\u00f6nderilen her sorguyu ve istemci ba\u011flant\u0131lar\u0131n\u0131 kaydeder. \u00c7ok fazla veri \u00fcretece\u011fi ve performans\u0131 etkileyece\u011fi i\u00e7in \u00fcretim ortam\u0131nda genellikle devre d\u0131\u015f\u0131 b\u0131rak\u0131l\u0131r veya yaln\u0131zca k\u0131sa s\u00fcreli sorun giderme i\u00e7in kullan\u0131l\u0131r.
\n*   Yava\u015f Sorgu G\u00fcnl\u00fc\u011f\u00fc (slow query log<\/code>):<\/strong> Belirli bir s\u00fcreden daha uzun s\u00fcren sorgular\u0131 kaydeder. Performans sorunlar\u0131n\u0131 belirlemenin yan\u0131 s\u0131ra, anormal derecede uzun veya karma\u015f\u0131k sorgular\u0131 tespit ederek potansiyel sald\u0131r\u0131 giri\u015fimlerini (\u00f6rne\u011fin, DoS sald\u0131r\u0131lar\u0131) ortaya \u00e7\u0131karabilir.
\n*   \u0130kili G\u00fcnl\u00fck (binary log<\/code>):<\/strong> Veritaban\u0131nda yap\u0131lan t\u00fcm veri de\u011fi\u015fikliklerini kaydeder. \u00c7o\u011funlukla replikasyon ve zaman bazl\u0131 kurtarma (point-in-time recovery) i\u00e7in kullan\u0131l\u0131r. G\u00fcvenlik a\u00e7\u0131s\u0131ndan, hangi de\u011fi\u015fikliklerin kim taraf\u0131ndan yap\u0131ld\u0131\u011f\u0131n\u0131 izlemek i\u00e7in dolayl\u0131 olarak faydal\u0131 olabilir.<\/p>\n
Denetim Eklentileri (Audit Plugins)<\/h4>\n
MariaDB ve MySQL Enterprise s\u00fcr\u00fcmleri, daha gran\u00fcler denetim yetenekleri sunan denetim eklentilerine sahiptir. Bu eklentiler, belirli kullan\u0131c\u0131 eylemlerini, ba\u011flant\u0131 giri\u015fimlerini, sorgu tiplerini ve daha fazlas\u0131n\u0131 kaydetmenize olanak tan\u0131r.<\/p>\n
*   MariaDB Audit Plugin:<\/strong> MariaDB’de \u00fccretsiz olarak sunulan bu eklenti, veritaban\u0131 etkinliklerini detayl\u0131 bir \u015fekilde g\u00fcnl\u00fc\u011fe kaydetmek i\u00e7in g\u00fc\u00e7l\u00fc bir ara\u00e7t\u0131r.<\/p>\n
INSTALL PLUGIN audit_soname SONAME 'server_audit.so';\n    SET GLOBAL server_audit_logging = ON;\n    SET GLOBAL server_audit_events = 'CONNECT,QUERY,TABLE';<\/code><\/pre>\n
*   MySQL Enterprise Audit:<\/strong> MySQL’in Enterprise s\u00fcr\u00fcm\u00fc ile birlikte gelen bu eklenti, uyumluluk gereksinimlerini kar\u015f\u0131lamak ve g\u00fcvenlik olaylar\u0131n\u0131 izlemek i\u00e7in geli\u015fmi\u015f denetim yetenekleri sunar.<\/p>\n
G\u00fcnl\u00fck dosyalar\u0131n\u0131 d\u00fczenli olarak incelemek ve bunlar\u0131 merkezi bir g\u00fcnl\u00fck y\u00f6netim sistemine (\u00f6rne\u011fin, ELK Stack, Splunk) g\u00f6ndermek, g\u00fcvenlik olaylar\u0131n\u0131 h\u0131zl\u0131 bir \u015fekilde tespit etmenize ve yan\u0131t vermenize yard\u0131mc\u0131 olur.<\/p>\n
Yedekleme ve Kurtarma<\/h3>\n
En iyi g\u00fcvenlik \u00f6nlemleri bile %100 koruma garantisi vermez. Bir sald\u0131r\u0131, donan\u0131m ar\u0131zas\u0131 veya insan hatas\u0131 durumunda verilerinizi kurtarabilmek i\u00e7in sa\u011flam bir yedekleme stratejisine sahip olmak zorunludur.<\/p>\n
Yedeklemelerin \u00d6nemi<\/h4>\n
*   Veri Kayb\u0131n\u0131 \u00d6nleme:<\/strong> En temel ama\u00e7, herhangi bir felaket durumunda veri kayb\u0131n\u0131 \u00f6nlemektir.
\n*   Sald\u0131r\u0131lardan Kurtulma:<\/strong> Fidye yaz\u0131l\u0131m\u0131 veya veri bozulmas\u0131 gibi sald\u0131r\u0131lardan sonra temiz bir duruma geri d\u00f6nmenizi sa\u011flar.
\n*   \u0130\u015f S\u00fcreklili\u011fi:<\/strong> Hizmet kesintilerini en aza indirerek i\u015f s\u00fcreklili\u011fini sa\u011flar.<\/p>\n
G\u00fcvenli Yedekleme Stratejileri<\/h4>\n
*   mysqldump<\/code>:<\/strong> K\u00fc\u00e7\u00fck ve orta \u00f6l\u00e7ekli veritabanlar\u0131 i\u00e7in uygun, mant\u0131ksal bir yedekleme arac\u0131d\u0131r. Yedeklemeleri s\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f ve \u015fifreli bir \u015fekilde saklay\u0131n.<\/p>\n
mysqldump -u root -p --single-transaction veritabani_adi | gzip > \/path\/to\/yedek_adi_$(date +%F).sql.gz<\/code><\/pre>\n
*   Percona XtraBackup:<\/strong> B\u00fcy\u00fck ve yo\u011fun veritabanlar\u0131 i\u00e7in s\u0131cak (online) fiziksel yedeklemeler sa\u011flayan a\u00e7\u0131k kaynakl\u0131 bir ara\u00e7t\u0131r. Kesinti s\u00fcresini minimuma indirir.
\n*   Yedeklemeleri \u015eifreleme:<\/strong> Yedek dosyalar\u0131n\u0131z\u0131 diskte veya bulut depolamada saklarken \u015fifreleyin. gpg<\/code> veya openssl<\/code> gibi ara\u00e7lar\u0131 kullanabilirsiniz.
\n*   G\u00fcvenli Depolama:<\/strong> Yedeklemeleri ana VPS’ten farkl\u0131 bir konumda (\u00f6rne\u011fin, ayr\u0131 bir sunucu, bulut depolama hizmeti) saklay\u0131n. Bu, ana sunucuya bir sald\u0131r\u0131 olmas\u0131 durumunda yedeklerin de tehlikeye girmesini \u00f6nler.
\n*   D\u00fczenli Test:<\/strong> Yedeklemelerinizin ger\u00e7ekten \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in d\u00fczenli olarak test edin. Bir yedeklemenin \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 felaket an\u0131nda \u00f6\u011frenmek istemezsiniz.<\/p>\n
\u0130\u015fletim Sistemi Seviyesi G\u00fcvenli\u011fi<\/h3>\n
Veritaban\u0131 g\u00fcvenli\u011fi, sadece veritaban\u0131 sunucusunun kendi ayarlar\u0131yla s\u0131n\u0131rl\u0131 de\u011fildir; alt\u0131nda yatan i\u015fletim sisteminin g\u00fcvenli\u011fi de ayn\u0131 derecede \u00f6nemlidir.<\/p>\n
Sistem G\u00fcncellemeleri<\/h4>\n
*   OS ve Veritaban\u0131 Paketlerini G\u00fcncel Tutma:<\/strong> \u0130\u015fletim sisteminizi ve MySQL\/MariaDB dahil t\u00fcm paketleri d\u00fczenli olarak g\u00fcncelleyin. G\u00fcvenlik yamalar\u0131, bilinen zay\u0131f noktalar\u0131 kapat\u0131r ve sald\u0131rganlar\u0131n bu a\u00e7\u0131klardan yararlanmas\u0131n\u0131 engeller.<\/p>\n
sudo apt update && sudo apt upgrade # Debian\/Ubuntu\n    sudo yum update # CentOS\/RHEL<\/code><\/pre>\n
SELinux\/AppArmor<\/h4>\n
Bu Mandatory Access Control (MAC) sistemleri, veritaban\u0131 s\u00fcrecinin (ve di\u011fer s\u00fcre\u00e7lerin) sistem kaynaklar\u0131na (dosyalar, a\u011f portlar\u0131 vb.) eri\u015fimini k\u0131s\u0131tlar.<\/p>\n
*   Uygulama \u0130zolasyonu:<\/strong> SELinux veya AppArmor, MySQL\/MariaDB s\u00fcrecinin sadece belirli dizinlere ve dosyalara eri\u015fmesine izin vererek, bir g\u00fcvenlik ihlali durumunda sald\u0131rgan\u0131n sistemde yanal hareket etmesini zorla\u015ft\u0131r\u0131r. Bunlar\u0131 etkinle\u015ftirmek ve do\u011fru profilleri yap\u0131land\u0131rmak, ek bir g\u00fcvenlik katman\u0131 sa\u011flar.<\/p>\n
Dosya \u0130zinleri<\/h4>\n
Veritaban\u0131 dosyalar\u0131n\u0131n ve yap\u0131land\u0131rma dosyalar\u0131n\u0131n do\u011fru dosya izinlerine sahip olmas\u0131 kritik \u00f6neme sahiptir.<\/p>\n
*   mysql<\/code> Kullan\u0131c\u0131s\u0131 Sahipli\u011fi:<\/strong> Veritaban\u0131 dosyalar\u0131n\u0131n (veri dizinleri, tablolar vb.) mysql<\/code> kullan\u0131c\u0131s\u0131na ait oldu\u011fundan ve sadece bu kullan\u0131c\u0131 taraf\u0131ndan yaz\u0131labilir oldu\u011fundan emin olun. Di\u011fer kullan\u0131c\u0131lar\u0131n bu dosyalara eri\u015fimi k\u0131s\u0131tlanmal\u0131d\u0131r.<\/p>\n
sudo chown -R mysql:mysql \/var\/lib\/mysql\n    sudo chmod -R 700 \/var\/lib\/mysql<\/code><\/pre>\n
*   my.cnf<\/code> \u0130zinleri:<\/strong> my.cnf<\/code> gibi hassas yap\u0131land\u0131rma dosyalar\u0131n\u0131n yaln\u0131zca root kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir olmas\u0131n\u0131 sa\u011flay\u0131n.<\/p>\n
sudo chmod 600 \/etc\/mysql\/my.cnf<\/code><\/pre>\n
SSH G\u00fcvenli\u011fi<\/h4>\n
VPS’inize eri\u015fim noktas\u0131 olan SSH’\u0131n g\u00fcvenli\u011fi de veritaban\u0131 g\u00fcvenli\u011finin ayr\u0131lmaz bir par\u00e7as\u0131d\u0131r.<\/p>\n
*   Parola Yerine Anahtar Tabanl\u0131 Kimlik Do\u011frulama:<\/strong> SSH parolalar\u0131 yerine SSH anahtar \u00e7iftleri (public\/private key) kullan\u0131n. Bu, kaba kuvvet sald\u0131r\u0131lar\u0131na kar\u015f\u0131 \u00e7ok daha g\u00fcvenlidir.
\n*   Root Giri\u015fini Devre D\u0131\u015f\u0131 B\u0131rakma:<\/strong> SSH \u00fczerinden do\u011frudan root kullan\u0131c\u0131s\u0131 ile giri\u015f yapmay\u0131 engelleyin. Bunun yerine, normal bir kullan\u0131c\u0131 ile giri\u015f yap\u0131n ve sudo<\/code> kullanarak ayr\u0131cal\u0131k y\u00fckseltin.
\n*   Varsay\u0131lan Portu De\u011fi\u015ftirme:<\/strong> SSH’\u0131n varsay\u0131lan portu olan 22’yi farkl\u0131, standart d\u0131\u015f\u0131 bir porta de\u011fi\u015ftirin. Bu, otomatik botlar\u0131n ve taray\u0131c\u0131lar\u0131n ilk sald\u0131r\u0131lar\u0131n\u0131 engellemeye yard\u0131mc\u0131 olur.
\n*   Parola Kimlik Do\u011frulamay\u0131 Devre D\u0131\u015f\u0131 B\u0131rakma:<\/strong> Anahtar tabanl\u0131 kimlik do\u011frulamay\u0131 etkinle\u015ftirdikten sonra, PasswordAuthentication no<\/code> ayar\u0131n\u0131 yaparak parola ile giri\u015fi tamamen devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/p>\n
D\u00fczenli Bak\u0131m ve \u0130zleme<\/h3>\n
G\u00fcvenlik, bir kez yap\u0131l\u0131p unutulacak bir \u015fey de\u011fildir; s\u00fcrekli bir s\u00fcre\u00e7tir. D\u00fczenli bak\u0131m, denetim ve izleme, veritaban\u0131n\u0131z\u0131n zaman i\u00e7inde g\u00fcvende kalmas\u0131n\u0131 sa\u011flar.<\/p>\n
Rutin G\u00fcvenlik Denetimleri<\/h4>\n
*   Kullan\u0131c\u0131 ve Ayr\u0131cal\u0131k Kontrol\u00fc:<\/strong> Periyodik olarak t\u00fcm veritaban\u0131 kullan\u0131c\u0131lar\u0131n\u0131 ve onlar\u0131n ayr\u0131cal\u0131klar\u0131n\u0131 g\u00f6zden ge\u00e7irin. Gereksiz veya a\u015f\u0131r\u0131 ayr\u0131cal\u0131kl\u0131 kullan\u0131c\u0131lar\u0131 kald\u0131r\u0131n veya ayr\u0131cal\u0131klar\u0131n\u0131 k\u0131s\u0131tlay\u0131n.
\n*   Yap\u0131land\u0131rma Dosyas\u0131 \u0130ncelemesi:<\/strong> my.cnf<\/code> dosyas\u0131n\u0131 d\u00fczenli olarak kontrol edin ve yetkisiz de\u011fi\u015fiklikler olup olmad\u0131\u011f\u0131n\u0131 veya g\u00fcvenlik ayarlar\u0131n\u0131n gev\u015fetilip gev\u015fetilmedi\u011fini teyit edin.
\n*   G\u00fcnl\u00fck \u0130ncelemesi:<\/strong> Hata g\u00fcnl\u00fcklerini, yava\u015f sorgu g\u00fcnl\u00fcklerini ve denetim g\u00fcnl\u00fcklerini d\u00fczenli olarak inceleyin. Anormal ba\u011flant\u0131 giri\u015fimleri, ba\u015far\u0131s\u0131z oturum a\u00e7ma denemeleri veya \u015f\u00fcpheli sorgular olup olmad\u0131\u011f\u0131n\u0131 ara\u015ft\u0131r\u0131n.<\/p>\n
G\u00fcvenlik A\u00e7\u0131\u011f\u0131 Tarama<\/h4>\n
*   Otomatik Taray\u0131c\u0131lar:<\/strong> Veritaban\u0131n\u0131zda bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 taramak i\u00e7in Nessus, OpenVAS gibi g\u00fcvenlik a\u00e7\u0131\u011f\u0131 taray\u0131c\u0131lar\u0131n\u0131 kullan\u0131n. Bu ara\u00e7lar, yanl\u0131\u015f yap\u0131land\u0131rmalar\u0131 veya eski yaz\u0131l\u0131m s\u00fcr\u00fcmlerini tespit edebilir.
\n*   Manuel \u0130nceleme:<\/strong> Veritaban\u0131 \u015femalar\u0131n\u0131, prosed\u00fcrleri ve fonksiyonlar\u0131 SQL enjeksiyonu veya di\u011fer zafiyetlere kar\u015f\u0131 manuel olarak inceleyin.<\/p>\n
Yama Y\u00f6netimi<\/h4>\n
*   G\u00fcvenlik Dan\u0131\u015fmanl\u0131klar\u0131n\u0131 Takip Etme:<\/strong> MySQL ve MariaDB’nin g\u00fcvenlik b\u00fcltenlerini ve dan\u0131\u015fmanl\u0131klar\u0131n\u0131 d\u00fczenli olarak takip edin. Yeni bulunan g\u00fcvenlik a\u00e7\u0131klar\u0131ndan haberdar olun.
\n*   Yamalar\u0131 H\u0131zl\u0131 Uygulama:<\/strong> Mevcut g\u00fcvenlik yamalar\u0131n\u0131 ve g\u00fcncellemeleri, test ortam\u0131nda do\u011frulad\u0131ktan sonra \u00fcretim ortam\u0131na h\u0131zl\u0131 bir \u015fekilde uygulay\u0131n.<\/p>\n
\u0130zleme Ara\u00e7lar\u0131<\/h4>\n
*   Performans ve G\u00fcvenlik \u0130zleme:<\/strong> Prometheus, Grafana, Zabbix gibi izleme ara\u00e7lar\u0131n\u0131 kullanarak veritaban\u0131 sunucunuzun performans\u0131n\u0131, ba\u011flant\u0131 say\u0131s\u0131n\u0131, sorgu y\u00fck\u00fcn\u00fc ve hata oranlar\u0131n\u0131 s\u00fcrekli olarak izleyin. Anormal davran\u0131\u015flar veya ani art\u0131\u015flar, bir sald\u0131r\u0131 giri\u015fiminin g\u00f6stergesi olabilir.
\n*   Uyar\u0131 Sistemleri:<\/strong> \u00d6nemli g\u00fcvenlik olaylar\u0131 (\u00f6rne\u011fin, \u00e7ok say\u0131da ba\u015far\u0131s\u0131z oturum a\u00e7ma, \u015f\u00fcpheli IP’lerden ba\u011flant\u0131 denemeleri) i\u00e7in uyar\u0131 sistemleri kurun. Bu, bir g\u00fcvenlik ihlaline h\u0131zl\u0131 bir \u015fekilde yan\u0131t vermenizi sa\u011flar.<\/p>\n
Geli\u015fmi\u015f G\u00fcvenlik \u00d6nlemleri<\/h3>\n
\u00d6nceki ad\u0131mlar \u00e7o\u011fu durum i\u00e7in yeterli bir g\u00fcvenlik seviyesi sa\u011flarken, y\u00fcksek g\u00fcvenlik gerektiren ortamlar i\u00e7in ek \u00f6nlemler d\u00fc\u015f\u00fcn\u00fclebilir.<\/p>\n
Veritaban\u0131 G\u00fcvenlik Duvarlar\u0131 (Database Firewalls)<\/h4>\n
*   SQL Enjeksiyonu ve Di\u011fer Sald\u0131r\u0131lara Kar\u015f\u0131 Koruma:<\/strong> ModSecurity gibi Web Uygulama G\u00fcvenlik Duvarlar\u0131 (WAF) veya \u00f6zel veritaban\u0131 g\u00fcvenlik duvarlar\u0131, veritaban\u0131na ula\u015fmadan \u00f6nce SQL sorgular\u0131n\u0131 analiz edebilir ve bilinen sald\u0131r\u0131 kal\u0131plar\u0131n\u0131 engelleyebilir. Bu, \u00f6zellikle web uygulamalar\u0131 \u00fczerinden gelen sald\u0131r\u0131lara kar\u015f\u0131 ek bir koruma katman\u0131 sa\u011flar.<\/p>\n
Veri Maskeleme ve Tokenizasyon<\/h4>\n
*   Hassas Verilerin Korunmas\u0131:<\/strong> Geli\u015ftirme veya test ortamlar\u0131nda ger\u00e7ek hassas verileri kullanmak yerine, veri maskeleme (ger\u00e7ek verilerin anlams\u0131z veya sahte verilerle de\u011fi\u015ftirilmesi) veya tokenizasyon (hassas verilerin \u015fifreli belirte\u00e7lerle de\u011fi\u015ftirilmesi) tekniklerini kullan\u0131n. Bu, \u00fcretim d\u0131\u015f\u0131 ortamlarda veri ihlali riskini azalt\u0131r.<\/p>\n
\u015eeffaf Veri \u015eifreleme (Transparent Data Encryption – TDE)<\/h4>\n
*   Disk \u00dczerindeki Verilerin \u015eifrelenmesi:<\/strong> MariaDB Enterprise ve MySQL Enterprise gibi baz\u0131 s\u00fcr\u00fcmler TDE \u00f6zelli\u011fini sunar. TDE, veritaban\u0131 dosyalar\u0131n\u0131 diskte \u015fifreleyerek, yetkisiz eri\u015fim durumunda bile verilerin okunamaz olmas\u0131n\u0131 sa\u011flar. Bu, \u00f6zellikle fiziksel sunucuya eri\u015fim sa\u011flanmas\u0131 durumunda veri h\u0131rs\u0131zl\u0131\u011f\u0131na kar\u015f\u0131 ek bir koruma sa\u011flar.<\/p>\n
Sonu\u00e7<\/h3>\n
MySQL ve MariaDB veritabanlar\u0131n\u0131 Linux VPS’te g\u00fcvence alt\u0131na almak, \u00e7ok katmanl\u0131 bir yakla\u015f\u0131mla ele al\u0131nmas\u0131 gereken s\u00fcrekli bir \u00e7abad\u0131r. \u0130lk kurulumdan itibaren g\u00fc\u00e7l\u00fc parolalar, en az ayr\u0131cal\u0131k ilkesi ve a\u011f k\u0131s\u0131tlamalar\u0131 gibi temel g\u00fcvenlik \u00f6nlemlerini uygulamak, sa\u011flam bir temel olu\u015fturur. Bununla birlikte, kapsaml\u0131 g\u00fcnl\u00fckleme, d\u00fczenli denetimler, sistem g\u00fcncellemeleri ve yedekleme stratejileri, veritaban\u0131n\u0131z\u0131n zaman i\u00e7inde de\u011fi\u015fen tehditlere kar\u015f\u0131 korunmas\u0131n\u0131 sa\u011flar.<\/p>\n
Unutmay\u0131n ki g\u00fcvenlik, bir \u00fcr\u00fcn de\u011fil, bir s\u00fcre\u00e7tir. Yeni tehditler ortaya \u00e7\u0131kt\u0131k\u00e7a ve sistemleriniz geli\u015ftik\u00e7e, g\u00fcvenlik stratejilerinizi g\u00f6zden ge\u00e7irmeli ve g\u00fcncellemelisiniz. Bu makalede belirtilen ad\u0131mlar\u0131 dikkatlice uygulayarak, Linux VPS’inizdeki MySQL ve MariaDB veritabanlar\u0131n\u0131z\u0131n g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131rabilir ve de\u011ferli verilerinizi potansiyel sald\u0131r\u0131lardan koruyabilirsiniz. G\u00fcvenli bir veritaban\u0131, ba\u015far\u0131l\u0131 ve kesintisiz bir hizmetin temelidir.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS’te G\u00fcvenli Hale Getirme Bir Linux tabanl\u0131 Sanal \u00d6zel Sunucu (VPS) \u00fczerinde MySQL veya MariaDB veritaban\u0131 \u00e7al\u0131\u015ft\u0131rmak, modern web uygulamalar\u0131n\u0131n ve hizmetlerinin temel bir bile\u015fenidir.","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-40670","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nMySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS'te G\u00fcvenli Hale Getirme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS'te G\u00fcvenli Hale Getirme\" \/>\n<meta property=\"og:description\" content=\"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS'te G\u00fcvenli Hale Getirme Bir Linux tabanl\u0131 Sanal \u00d6zel Sunucu (VPS) \u00fczerinde MySQL veya MariaDB veritaban\u0131 \u00e7al\u0131\u015ft\u0131rmak, modern web uygulamalar\u0131n\u0131n ve hizmetlerinin temel bir bile\u015fenidir.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-28T09:40:44+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS’te G\u00fcvenli Hale Getirme\",\"datePublished\":\"2026-02-28T09:40:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/\"},\"wordCount\":3383,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/\",\"name\":\"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS'te G\u00fcvenli Hale Getirme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-02-28T09:40:44+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS’te G\u00fcvenli Hale Getirme\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS'te G\u00fcvenli Hale Getirme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/","og_locale":"tr_TR","og_type":"article","og_title":"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS'te G\u00fcvenli Hale Getirme","og_description":"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS'te G\u00fcvenli Hale Getirme Bir Linux tabanl\u0131 Sanal \u00d6zel Sunucu (VPS) \u00fczerinde MySQL veya MariaDB veritaban\u0131 \u00e7al\u0131\u015ft\u0131rmak, modern web uygulamalar\u0131n\u0131n ve hizmetlerinin temel bir bile\u015fenidir.","og_url":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-02-28T09:40:44+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"19 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS’te G\u00fcvenli Hale Getirme","datePublished":"2026-02-28T09:40:44+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/"},"wordCount":3383,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/","url":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/","name":"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS'te G\u00fcvenli Hale Getirme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-02-28T09:40:44+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/mysql-ve-mariadb-veritabanlarini-linux-vpste-guvenli-hale-getirme\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"MySQL ve MariaDB Veritabanlar\u0131n\u0131 Linux VPS’te G\u00fcvenli Hale Getirme"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/40670","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=40670"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/40670\/revisions"}],"predecessor-version":[{"id":40671,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/40670\/revisions\/40671"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=40670"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=40670"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=40670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}