{"id":2061,"date":"2024-06-02T12:45:00","date_gmt":"2024-06-02T09:45:00","guid":{"rendered":"https:\/\/www.fibacloud.com\/community\/tutorials\/?p=2061"},"modified":"2026-10-04T22:57:46","modified_gmt":"2026-10-04T19:57:46","slug":"vpn-ile-bulut-guvenligi-nasil-saglanir","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/community\/tutorials\/vpn-ile-bulut-guvenligi-nasil-saglanir\/","title":{"rendered":"VPN ile Bulut G\u00fcvenli\u011fi: S\u0131n\u0131rl\u0131 WireGuard Eri\u015fimi"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"2061\" class=\"elementor elementor-2061\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b51d4bc e-con-full e-flex e-con e-parent\" data-id=\"b51d4bc\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6375b52 elementor-widget elementor-widget-text-editor\" data-id=\"6375b52\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 08-05-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>VPN, istemci ile VPN u\u00e7 noktas\u0131 aras\u0131ndaki trafi\u011fi \u015fifreler. Uygulama yetkilendirmesinin, sunucu g\u00fcncellemelerinin veya TLS\u2019nin yerini almaz. Bulut g\u00fcvenli\u011finde iyi bir ba\u015flang\u0131\u00e7, t\u00fcm a\u011f\u0131 a\u00e7mak yerine yaln\u0131z gereken hizmete eri\u015fen dar bir t\u00fcnel kurmakt\u0131r.<\/p>\n<p>Bu rehberde Ubuntu 24.04 LTS kullanan bir istemci ile tek bir bulut sunucusu aras\u0131nda <strong>WireGuard ile s\u0131n\u0131rl\u0131 eri\u015fim<\/strong> haz\u0131rlan\u0131r. \u0130stemci yaln\u0131z sunucunun VPN adresine gider; internet \u00e7\u0131k\u0131\u015f\u0131, varsay\u0131lan rota, NAT ve ba\u015fka sunuculara y\u00f6nlendirme de\u011fi\u015ftirilmez. Daha geni\u015f \u00f6zel a\u011f veya t\u00fcm trafi\u011fi VPN\u2019den ge\u00e7irme tasar\u0131m\u0131 ayr\u0131 bir a\u011f plan\u0131 gerektirir.<\/p>\n<h2>WireGuard ve OpenVPN se\u00e7imi<\/h2>\n<p>WireGuard e\u015fleri a\u00e7\u0131k anahtarlarla tan\u0131mlar; her e\u015fin <code>AllowedIPs<\/code> listesi y\u00f6nlendirme ve gelen kaynak adresi denetimine kat\u0131l\u0131r. OpenVPN farkl\u0131 kimlik do\u011frulama ve PKI se\u00e7eneklerine sahiptir. \u0130kisini tek bir kurulum dizisi gibi kar\u0131\u015ft\u0131rmay\u0131n.<\/p>\n<p>OpenVPN kullan\u0131yorsan\u0131z istemciye CA\u2019n\u0131n <strong>a\u00e7\u0131k sertifikas\u0131<\/strong> ve o istemciye ait kimlik bilgileri verilir. <strong>CA \u00f6zel anahtar\u0131 istemciye kopyalanmaz.<\/strong> Var olan kurumsal OpenVPN d\u00fczeninizi yaln\u0131z bu rehberi izlemek i\u00e7in de\u011fi\u015ftirmeyin; onun onayl\u0131 istemci profili ve iptal s\u00fcre\u00e7lerini kullan\u0131n. A\u015fa\u011f\u0131daki uygulanabilir \u00f6rnek WireGuard i\u00e7indir.<\/p>\n<figure class=\"fc-editorial-figure\" data-fc-visual=\"20260920\" aria-labelledby=\"fc-editorial-caption-2061\"><a href=\"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-content\/uploads\/community-editorial-20260920\/fc-vpn-tr-inline-20260920.webp\" target=\"_blank\" rel=\"noopener\" aria-label=\"G\u00f6rseli tam boyutta a\u00e7\"><picture><source media=\"(max-width: 600px)\" srcset=\"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-content\/uploads\/community-editorial-20260920\/fc-vpn-tr-mobile-20260920.webp\" width=\"720\" height=\"1140\"><img loading=\"lazy\" src=\"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-content\/uploads\/community-editorial-20260920\/fc-vpn-tr-inline-20260920.webp\" srcset=\"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-content\/uploads\/community-editorial-20260920\/fc-vpn-tr-inline-20260920.webp 1440w, https:\/\/www.fibacloud.com\/community\/tutorials\/wp-content\/uploads\/community-editorial-20260920\/fc-vpn-tr-inline-20260920-300x242.webp 300w, https:\/\/www.fibacloud.com\/community\/tutorials\/wp-content\/uploads\/community-editorial-20260920\/fc-vpn-tr-inline-20260920-1024x825.webp 1024w, https:\/\/www.fibacloud.com\/community\/tutorials\/wp-content\/uploads\/community-editorial-20260920\/fc-vpn-tr-inline-20260920-768x619.webp 768w\" sizes=\"auto, (max-width: 900px) 100vw, 820px\" width=\"1440\" height=\"1160\" alt=\"\u015eifreli t\u00fcnel nerede biter?\" class=\"wp-image-2587\"  decoding=\"async\"><\/picture><\/a><figcaption id=\"fc-editorial-caption-2061\"><strong>\u015eifreli t\u00fcnel nerede biter?<\/strong> VPN t\u00fcneli istemci ile VPN a\u011f ge\u00e7idi aras\u0131n\u0131 korur. A\u011f ge\u00e7idinden uygulamaya eri\u015fim ayr\u0131ca y\u00f6nlendirme, g\u00fcvenlik duvar\u0131 ve uygulaman\u0131n kendi TLS\/kimlik do\u011frulamas\u0131yla y\u00f6netilir.<details><summary>G\u00f6rselin ad\u0131m ad\u0131m a\u00e7\u0131klamas\u0131<\/summary><ol><li>Ba\u015flat: \u0130stemci VPN a\u011f ge\u00e7idini do\u011frular.<\/li><li>\u015eifrele: Trafik t\u00fcnel i\u00e7inde korunur.<\/li><li>S\u0131n\u0131rla: A\u011f ge\u00e7idi sonras\u0131 eri\u015fimi kurallarla y\u00f6net.<\/li><li>Koru: Uygulamada TLS ve kimlik do\u011frulamay\u0131 s\u00fcrd\u00fcr.<\/li><\/ol><\/details><\/figcaption><\/figure>\n<h2>\u00d6n ko\u015fullar ve adres plan\u0131<\/h2>\n<p>\u0130ki makinede de y\u00f6netim yetkiniz, \u00e7al\u0131\u015fan bir y\u00f6netim ba\u011flant\u0131n\u0131z ve bulut sunucusunda kurtarma konsolu eri\u015fiminiz olmal\u0131d\u0131r. \u00d6nce ayr\u0131 test sunucular\u0131nda deneyin. \u00d6rnekte:<\/p>\n<table>\n<thead>\n<tr>\n<th>Rol<\/th>\n<th>VPN adresi<\/th>\n<th>Gerekli bilgi<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Bulut sunucusu<\/td>\n<td><code>10.77.0.1\/32<\/code><\/td>\n<td>\u0130stemciden eri\u015filen genel adres ve UDP <code>51820<\/code><\/td>\n<\/tr>\n<tr>\n<td>\u0130stemci<\/td>\n<td><code>10.77.0.2\/32<\/code><\/td>\n<td>Sunucunun a\u00e7\u0131k anahtar\u0131 ve u\u00e7 nokta adresi<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><code>10.77.0.1<\/code> ve <code>10.77.0.2<\/code> mevcut yerel a\u011flar\u0131n\u0131zla \u00e7ak\u0131\u015fmamal\u0131d\u0131r. <code>wg0<\/code> adl\u0131 mevcut bir aray\u00fcz veya yap\u0131land\u0131rma varsa \u00fczerine yazmay\u0131n; ayr\u0131 bir test ad\u0131 ve ona uygun dosya kullan\u0131n. <code>vpn.example.com<\/code> ve <code>198.51.100.10<\/code> dok\u00fcmantasyon \u00f6rnekleridir; ger\u00e7ek sunucu ad\u0131n\u0131z\u0131 ve istemcinin genel kaynak IP\u2019sini yaz\u0131n.<\/p>\n<p>Mevcut durumu iki u\u00e7ta kaydedin:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-63ba7e4 elementor-widget elementor-widget-text-editor\" data-id=\"63ba7e4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">ip -4 address show\nip -4 route show\nsudo wg show<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-46f3e10 elementor-widget elementor-widget-text-editor\" data-id=\"46f3e10\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><code>wg<\/code> hen\u00fcz yoksa paket kurulumundan sonra son komutu \u00e7al\u0131\u015ft\u0131r\u0131n. Ubuntu 24.04 \u00fczerinde iki u\u00e7ta:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7e28229 elementor-widget elementor-widget-text-editor\" data-id=\"7e28229\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">sudo apt update\nsudo apt install wireguard<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2dd0a8e elementor-widget elementor-widget-text-editor\" data-id=\"2dd0a8e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Her u\u00e7ta ayr\u0131 anahtar \u00fcretin<\/h2>\n<p>A\u015fa\u011f\u0131daki i\u015flemleri sunucu ve istemcide ayr\u0131 ayr\u0131 yap\u0131n. \u00c7al\u0131\u015fma dizininde ayn\u0131 adl\u0131 anahtar varsa durun; \u00fcretimdeki anahtar\u0131 yenisiyle de\u011fi\u015ftirmeyin.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c61a4ab elementor-widget elementor-widget-text-editor\" data-id=\"c61a4ab\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">install -d -m 700 \"$HOME\/wireguard-setup\"\ncd \"$HOME\/wireguard-setup\"\numask 077\nwg genkey | tee wg0.private | wg pubkey &gt; wg0.public\ncat wg0.public<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-87bfb0d elementor-widget elementor-widget-text-editor\" data-id=\"87bfb0d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Kar\u015f\u0131 tarafa yaln\u0131z <code>wg0.public<\/code> i\u00e7eri\u011fini g\u00fcvenilir kanaldan iletin. \u00d6zel anahtar o u\u00e7ta kal\u0131r. \u00d6zel anahtar\u0131 sohbet, e-posta, kaynak deposu veya makale ekran g\u00f6r\u00fcnt\u00fcs\u00fcyle payla\u015fmay\u0131n. E\u015flerin a\u00e7\u0131k anahtarlar\u0131n\u0131 hangi cihaza ait olduklar\u0131yla birlikte kaydedin.<\/p>\n<h2>Sunucu ve istemci yap\u0131land\u0131rmas\u0131n\u0131 ay\u0131r\u0131n<\/h2>\n<p>\u0130ki u\u00e7ta da yeni dosya olu\u015fturacaksan\u0131z izinleri <strong>anahtar\u0131 yazmadan \u00f6nce<\/strong> s\u0131n\u0131rland\u0131r\u0131n:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f26d986 elementor-widget elementor-widget-text-editor\" data-id=\"f26d986\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">sudo install -d -m 700 \/etc\/wireguard\nsudo touch \/etc\/wireguard\/wg0.conf\nsudo chmod 600 \/etc\/wireguard\/wg0.conf\nsudoedit \/etc\/wireguard\/wg0.conf<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-05886bc elementor-widget elementor-widget-text-editor\" data-id=\"05886bc\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>A\u015fa\u011f\u0131daki yer tutucular\u0131 ger\u00e7ek anahtarlarla yerel d\u00fczenleyicide de\u011fi\u015ftirin. <code>&lt;...&gt;<\/code> yer tutucular\u0131n\u0131 dosyada b\u0131rakmay\u0131n; bunlar \u00e7al\u0131\u015f\u0131r anahtar de\u011fildir. Anahtarlar\u0131 komut sat\u0131r\u0131 arg\u00fcman\u0131na veya kabuk ge\u00e7mi\u015fine yazmay\u0131n.<\/p>\n<p><strong>Bulut sunucusu \u2014 <code>\/etc\/wireguard\/wg0.conf<\/code>:<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d654a4 elementor-widget elementor-widget-text-editor\" data-id=\"4d654a4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-ini\">[Interface]\nAddress = 10.77.0.1\/32\nListenPort = 51820\nPrivateKey = &lt;SERVER_PRIVATE_KEY&gt;\n\n[Peer]\nPublicKey = &lt;CLIENT_PUBLIC_KEY&gt;\nAllowedIPs = 10.77.0.2\/32<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-abc618d elementor-widget elementor-widget-text-editor\" data-id=\"abc618d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>\u0130stemci \u2014 <code>\/etc\/wireguard\/wg0.conf<\/code>:<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26b89bc elementor-widget elementor-widget-text-editor\" data-id=\"26b89bc\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-ini\">[Interface]\nAddress = 10.77.0.2\/32\nPrivateKey = &lt;CLIENT_PRIVATE_KEY&gt;\n\n[Peer]\nPublicKey = &lt;SERVER_PUBLIC_KEY&gt;\nEndpoint = vpn.example.com:51820\nAllowedIPs = 10.77.0.1\/32\nPersistentKeepalive = 25<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4019734 elementor-widget elementor-widget-text-editor\" data-id=\"4019734\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><code>PersistentKeepalive<\/code> NAT arkas\u0131ndaki istemcinin e\u015flemesini a\u00e7\u0131k tutmaya yard\u0131mc\u0131 olur; her a\u011fda zorunlu de\u011fildir. Sunucu taraf\u0131nda her istemciye ayr\u0131 bir a\u00e7\u0131k anahtar ve \u00e7ak\u0131\u015fmayan <code>\/32<\/code> adres verilir. Ayn\u0131 \u00f6zel anahtar\u0131 bir\u00e7ok kullan\u0131c\u0131yla payla\u015fmay\u0131n. Bu \u00f6rne\u011fe <code>0.0.0.0\/0<\/code>, <code>::\/0<\/code>, NAT veya IP forwarding eklemeyin; bunlar kapsam\u0131 de\u011fi\u015ftirir.<\/p>\n<h2>A\u011f kurallar\u0131n\u0131 dar tutun<\/h2>\n<p>Bulut a\u011f kural\u0131nda yaln\u0131z gereken istemci kaynak IP\u2019sinden sunucunun UDP <code>51820<\/code> portuna izin verin. \u0130stemcinin genel IP\u2019si de\u011fi\u015fiyorsa eri\u015fim modelini y\u00f6neticinizle planlay\u0131n; sessizce t\u00fcm kaynaklar\u0131 a\u00e7may\u0131n.<\/p>\n<p>Sunucuda UFW zaten etkin ve kullan\u0131lan g\u00fcvenlik duvar\u0131ysa \u00f6nce durumunu g\u00f6r\u00fcn. A\u015fa\u011f\u0131daki \u00f6rnekte IP\u2019yi ger\u00e7ek istemci kaynak adresiyle de\u011fi\u015ftirin:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ffca9fe elementor-widget elementor-widget-text-editor\" data-id=\"ffca9fe\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">sudo ufw status numbered\nsudo ufw allow proto udp from 198.51.100.10 to any port 51820<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8a756c0 elementor-widget elementor-widget-text-editor\" data-id=\"8a756c0\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Bu rehber UFW\u2019yi etkinle\u015ftirmez, s\u0131f\u0131rlamaz veya ba\u015fka g\u00fcvenlik duvar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakmaz. Mevcut g\u00fcvenlik duvar\u0131n\u0131z farkl\u0131ysa onun e\u015fde\u011fer dar kural\u0131n\u0131 y\u00f6neticinizle tan\u0131mlay\u0131n. Y\u00f6netim eri\u015fimini sa\u011flayan kurallar\u0131 koruyun.<\/p>\n<p>VPN \u00fczerinden sunaca\u011f\u0131n\u0131z uygulama i\u00e7in ayr\u0131ca uygulama portunu s\u0131n\u0131rland\u0131r\u0131n. \u00d6rne\u011fin zaten yap\u0131land\u0131r\u0131lm\u0131\u015f HTTPS hizmetine yaln\u0131z bu istemciyi kabul etmek i\u00e7in UFW kural\u0131:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b0d5b53 elementor-widget elementor-widget-text-editor\" data-id=\"b0d5b53\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">sudo ufw allow in on wg0 proto tcp from 10.77.0.2 to 10.77.0.1 port 443<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bba53a9 elementor-widget elementor-widget-text-editor\" data-id=\"bba53a9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Bu kural uygulaman\u0131n mevcut genel eri\u015fimini otomatik kapatmaz. Genel\/\u00f6zel eri\u015fim politikas\u0131n\u0131 ayr\u0131ca do\u011frulay\u0131n; VPN \u00fcyeli\u011fini uygulama oturum a\u00e7mas\u0131n\u0131n yerine koymay\u0131n.<\/p>\n<h2>Ba\u011flant\u0131y\u0131 ba\u015flat\u0131n ve do\u011frulay\u0131n<\/h2>\n<p>\u00d6nce sunucuda, sonra istemcide:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ddf7b4 elementor-widget elementor-widget-text-editor\" data-id=\"3ddf7b4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">sudo wg-quick up wg0\nsudo wg show wg0<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cf21259 elementor-widget elementor-widget-text-editor\" data-id=\"cf21259\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>\u0130stemciden k\u00fc\u00e7\u00fck bir trafik iste\u011fi ba\u015flat\u0131n ve sonra el s\u0131k\u0131\u015fma zaman\u0131n\u0131 kontrol edin:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb11393 elementor-widget elementor-widget-text-editor\" data-id=\"eb11393\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">ip route get 10.77.0.1\nping -c 3 10.77.0.1\nsudo wg show wg0 latest-handshakes\nip -4 route show default<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d7d6b86 elementor-widget elementor-widget-text-editor\" data-id=\"d7d6b86\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Rotan\u0131n <code>wg0<\/code> \u00fczerinden gitmesi, yak\u0131n tarihli bir el s\u0131k\u0131\u015fmas\u0131 ve kar\u015f\u0131 y\u00f6nde artan trafik sayac\u0131 beklenir. <code>0<\/code> el s\u0131k\u0131\u015fma de\u011feri hen\u00fcz el s\u0131k\u0131\u015fma olmad\u0131\u011f\u0131n\u0131 g\u00f6sterir. ICMP engelliyse <code>ping<\/code> yan\u0131t\u0131 gelmeyebilir; bu tek ba\u015f\u0131na t\u00fcnelin \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kan\u0131tlamaz. Varsay\u0131lan internet rotan\u0131z \u00f6ncekiyle ayn\u0131 kalmal\u0131d\u0131r.<\/p>\n<p>VPN adresinde do\u011fru sertifikayla sunulan mevcut bir HTTPS uygulaman\u0131z varsa, ger\u00e7ek alan ad\u0131n\u0131 kullanarak TLS\u2019yi kapatmadan deneyin:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-74dc5ab elementor-widget elementor-widget-text-editor\" data-id=\"74dc5ab\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<pre><code class=\"language-bash\">curl --connect-timeout 5 \\\n  --resolve app.example.com:443:10.77.0.1 \\\n  https:\/\/app.example.com\/<\/code><\/pre>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7668d51 elementor-widget elementor-widget-text-editor\" data-id=\"7668d51\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Bu \u00f6rnek uygulamay\u0131 veya sertifikas\u0131n\u0131 kurmaz; \u00f6nceden yap\u0131land\u0131r\u0131lm\u0131\u015f hizmeti do\u011frular. Kimli\u011fi do\u011frulanm\u0131\u015f istemcinin eri\u015fti\u011fini ve yetkisiz hesab\u0131n uygulama taraf\u0131ndan reddedildi\u011fini ayr\u0131ca test edin. Kontrollerden sonra otomatik ba\u015flatma istiyorsan\u0131z iki u\u00e7ta <code>sudo systemctl enable wg-quick@wg0<\/code> kullanabilirsiniz.<\/p>\n<h2>Sorun giderme ve geri d\u00f6n\u00fc\u015f<\/h2>\n<ul>\n<li><strong>El s\u0131k\u0131\u015fma yok:<\/strong> U\u00e7 nokta DNS\/IP\u2019si, UDP portu, iki a\u00e7\u0131k anahtar\u0131n do\u011fru e\u015fte olmas\u0131 ve kaynak IP kural\u0131n\u0131 kontrol edin.<\/li>\n<li><strong>El s\u0131k\u0131\u015fma var, hizmet yok:<\/strong> <code>AllowedIPs<\/code>, hizmetin dinledi\u011fi adres\/port ve <code>wg0<\/code> \u00fczerindeki uygulama kural\u0131n\u0131 inceleyin. Gereksiz NAT veya genel a\u011f izni eklemeyin.<\/li>\n<li><strong>Adres \u00e7ak\u0131\u015fmas\u0131:<\/strong> \u00d6nce t\u00fcneli kapat\u0131n; kullan\u0131lmayan adreslerle iki e\u015fin yap\u0131land\u0131rmas\u0131n\u0131 birlikte d\u00fczeltin.<\/li>\n<li><strong>Anahtar kayb\u0131 veya s\u0131z\u0131nt\u0131s\u0131:<\/strong> \u0130lgili e\u015fin a\u00e7\u0131k anahtar\u0131n\u0131 yetkili yap\u0131land\u0131rmadan \u00e7\u0131kar\u0131n, yeni anahtar \u00e7ifti \u00fcretin ve e\u015fle\u015ftirmeyi yeniden yap\u0131n.<\/li>\n<\/ul>\n<p>Geri d\u00f6n\u00fc\u015f i\u00e7in iki u\u00e7ta <code>sudo wg-quick down wg0<\/code> \u00e7al\u0131\u015ft\u0131r\u0131n. Otomatik ba\u015flatmay\u0131 bu i\u015flemde a\u00e7t\u0131ysan\u0131z <code>sudo systemctl disable wg-quick@wg0<\/code> ile kapat\u0131n. Yaln\u0131z bu denemede eklenen a\u011f kurallar\u0131n\u0131 ve e\u015f kay\u0131tlar\u0131n\u0131 kald\u0131r\u0131n; var olan y\u00f6netim kurallar\u0131na dokunmay\u0131n. Varsay\u0131lan rotay\u0131 ve \u00f6nceki uygulama eri\u015fimini tekrar kontrol edin.<\/p>\n<h2>Kaynaklar<\/h2>\n<ul>\n<li><a href=\"https:\/\/www.wireguard.com\/quickstart\/\" rel=\"nofollow noopener\" target=\"_blank\">WireGuard \u2014 Resm\u00ee h\u0131zl\u0131 ba\u015flang\u0131\u00e7 ve anahtar \u00fcretimi<\/a><\/li>\n<li><a href=\"https:\/\/www.wireguard.com\/protocol\/\" rel=\"nofollow noopener\" target=\"_blank\">WireGuard \u2014 Protokol ve e\u015f kimli\u011fi<\/a><\/li>\n<li><a href=\"https:\/\/manpages.ubuntu.com\/manpages\/noble\/en\/man8\/wg-quick.8.html\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu 24.04 \u2014 wg-quick: aray\u00fcz ve rota y\u00f6netimi<\/a><\/li>\n<li><a href=\"https:\/\/manpages.ubuntu.com\/manpages\/noble\/en\/man8\/ufw.8.html\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu 24.04 \u2014 ufw: aray\u00fcz, protokol ve kaynak adresi kurallar\u0131<\/a><\/li>\n<li><a href=\"https:\/\/openvpn.net\/community-docs\/setting-up-your-own-certificate-authority--ca--and-generating-certificates-and-keys-for-an-openvpn-server-and-multiple-clients.html\" rel=\"nofollow noopener\" target=\"_blank\">OpenVPN \u2014 CA olu\u015fturma ve anahtarlar\u0131n ayr\u0131m\u0131<\/a><\/li>\n<\/ul>\n<p class=\"fc-article-review-date\">Teknik i\u00e7erik ve kaynaklar 4 Ekim 2026 tarihinde g\u00f6zden ge\u00e7irildi. S\u00fcr\u00fcm veya sa\u011flay\u0131c\u0131 de\u011fi\u015fikli\u011finde ilgili resm\u00ee belgeyi yeniden kontrol edin.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Ubuntu 24.04 \u00fczerinde WireGuard ile tek bulut sunucusuna s\u0131n\u0131rl\u0131 VPN eri\u015fimi kurun; anahtarlar\u0131, rotalar\u0131 ve ba\u011flant\u0131y\u0131 do\u011frulay\u0131n.<\/p>\n","protected":false},"author":1,"featured_media":2586,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[174,176,180,172,178],"class_list":["post-2061","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutorials","tag-bulut-guvenligi","tag-siber-guvenlik","tag-sunucu-guvenligi","tag-vpn","tag-vpn-kurulumu"],"lang":"tr","translations":{"tr":2061,"en":2450},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/posts\/2061","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/comments?post=2061"}],"version-history":[{"count":38,"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/posts\/2061\/revisions"}],"predecessor-version":[{"id":2101,"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/posts\/2061\/revisions\/2101"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/media\/2586"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/media?parent=2061"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/categories?post=2061"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/community\/tutorials\/wp-json\/wp\/v2\/tags?post=2061"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}