{"id":7580,"date":"2024-12-24T22:30:13","date_gmt":"2024-12-24T19:30:13","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/aws-vpc-kamu-ve-ozel-alt-aglar-ile-nat-gateway\/"},"modified":"2024-12-24T22:30:13","modified_gmt":"2024-12-24T19:30:13","slug":"aws-vpc-kamu-ve-ozel-alt-aglar-ile-nat-gateway","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/aws-vpc-kamu-ve-ozel-alt-aglar-ile-nat-gateway\/","title":{"rendered":"AWS VPC: Kamu ve \u00d6zel Alt A\u011flar ile NAT Gateway"},"content":{"rendered":"

<\/p>\n

AWS VPC: Kamu ve \u00d6zel Alt A\u011flar ile NAT Gateway<\/p>\n

Amazon Web Services (AWS) \u00fczerinde g\u00fcvenli ve \u00f6l\u00e7eklenebilir bir bulut altyap\u0131s\u0131 kurmak istiyorsan\u0131z, Virtual Private Cloud (VPC) kullan\u0131m\u0131 olmazsa olmazd\u0131r. VPC, AWS’nin size sunulan payla\u015f\u0131ml\u0131 fiziksel altyap\u0131 \u00fczerinde, kendi izole edilmi\u015f sanal a\u011f\u0131n\u0131z\u0131 olu\u015fturman\u0131za olanak tan\u0131r. Bu makalede, VPC’nizde kamu ve \u00f6zel alt a\u011flar\u0131 nas\u0131l yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 ve NAT Gateway kullanarak \u00f6zel alt a\u011flar\u0131n\u0131zdaki kaynaklar\u0131n\u0131z\u0131n internete nas\u0131l eri\u015febilece\u011fini ayr\u0131nt\u0131l\u0131 olarak ele alaca\u011f\u0131z.<\/p>\n

VPC Nedir ve Neden Kullanmal\u0131y\u0131z?<\/h2>\n

VPC, kendi sanal a\u011f\u0131n\u0131z\u0131 olu\u015fturarak, kaynaklar\u0131n\u0131z\u0131n di\u011fer AWS m\u00fc\u015fterilerinden izole edilmesini sa\u011flar. Bu, g\u00fcvenlik a\u00e7\u0131s\u0131ndan son derece \u00f6nemlidir. Ayr\u0131ca, a\u011f\u0131n\u0131z i\u00e7in kendi IP adres aral\u0131klar\u0131n\u0131 ve alt a\u011f maskelerini belirleyebilirsiniz. Bu esneklik, \u015firketinizin \u00f6zel gereksinimlerine uygun bir a\u011f mimarisi olu\u015fturman\u0131za olanak tan\u0131r. Sonu\u00e7 olarak, g\u00fcvenli\u011finiz artar ve karma\u015f\u0131kl\u0131k azal\u0131r.<\/p>\n

Kamu ve \u00d6zel Alt A\u011flar: Temel Farklar<\/h2>\n

Bir VPC’de genellikle iki tip alt a\u011f bulunur: kamu ve \u00f6zel alt a\u011flar. Kamu alt a\u011flar\u0131, internet eri\u015fimi sa\u011flayan alt a\u011flard\u0131r. Bu alt a\u011flardaki sunucular\u0131n\u0131z do\u011frudan internet ile ileti\u015fim kurabilir. \u00d6rne\u011fin, web sunucular\u0131 genellikle kamu alt a\u011flar\u0131nda bulunur. \u00d6te yandan, \u00f6zel alt a\u011flar internet eri\u015fimine sahip de\u011fildir ve sadece VPC i\u00e7indeki di\u011fer kaynaklarla ileti\u015fim kurabilir. Veritaban\u0131 sunucular\u0131 gibi hassas kaynaklar genellikle \u00f6zel alt a\u011flarda konumland\u0131r\u0131l\u0131r. Bu \u015fekilde g\u00fcvenlik \u00f6nemli \u00f6l\u00e7\u00fcde artar.<\/p>\n

NAT Gateway’in \u00d6nemi<\/h2>\n

\u00d6zel alt a\u011flar\u0131n\u0131zdaki kaynaklar\u0131n internet eri\u015fimine ihtiya\u00e7 duymas\u0131 durumunda, NAT Gateway devreye girer. NAT Gateway, \u00f6zel IP adreslerini kamu IP adreslerine \u00e7evirerek, \u00f6zel alt a\u011flar\u0131n\u0131zdaki kaynaklar\u0131n internet ile g\u00fcvenli bir \u015fekilde ileti\u015fim kurmas\u0131n\u0131 sa\u011flar. Bu sayede, \u00f6zel alt a\u011flar\u0131n\u0131zdaki kaynaklar\u0131n\u0131z\u0131n do\u011frudan internet’e maruz kalmas\u0131n\u0131 \u00f6nleyerek g\u00fcvenli\u011finizi art\u0131r\u0131rs\u0131n\u0131z. Ayr\u0131ca, NAT Gateway \u00f6l\u00e7eklenebilir bir \u00e7\u00f6z\u00fcmd\u00fcr, yani gereksinimleriniz artt\u0131k\u00e7a otomatik olarak \u00f6l\u00e7eklenir. Ba\u015fka bir deyi\u015fle, NAT Gateway g\u00fcvenilir ve y\u00fcksek performans sunar.<\/p>\n

Ad\u0131m Ad\u0131m Yap\u0131land\u0131rma<\/h2>\n

Bir AWS VPC’sinde kamu ve \u00f6zel alt a\u011flar ile NAT Gateway’i yap\u0131land\u0131rmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyebilirsiniz:<\/p>\n

    \n
  1. Yeni bir VPC olu\u015fturun ve IP adres aral\u0131\u011f\u0131n\u0131 belirleyin.<\/li>\n
  2. VPC’nizde kamu ve \u00f6zel alt a\u011flar olu\u015fturun. Her alt a\u011f i\u00e7in bir alt a\u011f maskesi ve uygun bir IP aral\u0131\u011f\u0131 belirleyin.<\/li>\n
  3. \u0130nternet Ge\u00e7idi (IGW) olu\u015fturun. Bu, VPC’nizin internet ile ileti\u015fim kurmas\u0131n\u0131 sa\u011flar.<\/li>\n
  4. Kamu alt a\u011f\u0131n\u0131za bir veya daha fazla alt a\u011f olu\u015fturun ve bunlar\u0131 IGW’ye ba\u011flay\u0131n.<\/li>\n
  5. \u00d6zel alt a\u011flar\u0131n\u0131za bir veya daha fazla alt a\u011f olu\u015fturun. Bu alt a\u011flar internet eri\u015fimine sahip olmayacakt\u0131r.<\/li>\n
  6. \u00d6zel alt a\u011flar\u0131n\u0131z i\u00e7in bir NAT Gateway olu\u015fturun. Bu, \u00f6zel alt a\u011flar\u0131n\u0131zdaki kaynaklar\u0131n internet ile ileti\u015fim kurmas\u0131n\u0131 sa\u011flar.<\/li>\n
  7. G\u00fcvenlik gruplar\u0131 olu\u015fturun ve bunlar\u0131 alt a\u011flar\u0131n\u0131za uygulay\u0131n. Bu, a\u011f\u0131n\u0131zdaki kaynaklar\u0131n g\u00fcvenli\u011fini sa\u011flar.<\/li>\n
  8. Gerekli kaynaklar\u0131 (EC2 \u00f6rne\u011fi, veritaban\u0131 vb.) ilgili alt a\u011flara yerle\u015ftirin.<\/li>\n<\/ol>\n

    G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h2>\n

    G\u00fcvenli\u011fi sa\u011flamak i\u00e7in a\u015fa\u011f\u0131daki ipu\u00e7lar\u0131n\u0131 uygulaman\u0131z \u00f6nemlidir:<\/p>\n