{"id":888,"date":"2024-03-02T00:00:00","date_gmt":"2024-03-01T21:00:00","guid":{"rendered":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/?p=888"},"modified":"2026-10-06T03:13:30","modified_gmt":"2026-10-06T00:13:30","slug":"vpc-sanal-ozel-bulut-nedir","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/networking\/vpc-sanal-ozel-bulut-nedir\/","title":{"rendered":"VPC (Sanal \u00d6zel Bulut) Nedir?"},"content":{"rendered":"
\n

VPC (Virtual Private Cloud), bulut kaynaklar\u0131 i\u00e7in mant\u0131ksal olarak ayr\u0131lm\u0131\u015f bir a\u011f ortam\u0131d\u0131r. Kaynaklar\u0131n hangi adreslerle konu\u015faca\u011f\u0131n\u0131, hangi rotalar\u0131 kullanaca\u011f\u0131n\u0131 ve hangi eri\u015fimlere izin verilece\u011fini planlamay\u0131 sa\u011flar. VPC, tek ba\u015f\u0131na \u00f6zel fiziksel donan\u0131m veya verinin otomatik olarak \u015fifrelendi\u011fi anlam\u0131na gelmez.<\/p>\n

\"\u0130nternet
Adresleme, y\u00f6nlendirme ve eri\u015fim kurallar\u0131 birlikte tasarlan\u0131r.
G\u00f6rseli b\u00fcy\u00fct \u2192<\/a><\/figcaption><\/figure>\n

VPC, VPN ve VLAN ayn\u0131 kavram de\u011fildir<\/h2>\n

VPC bulut a\u011f\u0131n\u0131n mant\u0131ksal s\u0131n\u0131r\u0131n\u0131 tan\u0131mlar. VPN, a\u011flar veya istemciler aras\u0131nda \u015fifreli bir t\u00fcnel kurar. VLAN ise Ethernet a\u011f\u0131nda ayr\u0131 yay\u0131n alanlar\u0131 olu\u015fturan bir mekanizmad\u0131r. Bir mimaride birlikte kullan\u0131labilirler; birinin varl\u0131\u011f\u0131 di\u011ferinin sa\u011flad\u0131\u011f\u0131 i\u015flevi otomatik olarak olu\u015fturmaz.<\/p>\n

Sa\u011flay\u0131c\u0131lar VPC ad\u0131n\u0131 farkl\u0131 \u00fcr\u00fcn kapsamlar\u0131 i\u00e7in kullanabilir. Alt a\u011f olu\u015fturma, \u00f6zel rota, peering, NAT veya b\u00f6lgesel ba\u011flant\u0131 \u00f6zelliklerini ilgili \u00fcr\u00fcn\u00fcn dok\u00fcman\u0131ndan do\u011frulay\u0131n. Ba\u015fka bir platformdaki ayar\u0131n FibaCloud\u2019da ayn\u0131 adla ve ayn\u0131 davran\u0131\u015fla bulundu\u011funu varsaymay\u0131n.<\/p>\n

Adres plan\u0131n\u0131 ba\u011flant\u0131lardan \u00f6nce haz\u0131rlay\u0131n<\/h2>\n

\u00d6zel IPv4 adres alan\u0131n\u0131 se\u00e7erken mevcut ofis a\u011flar\u0131n\u0131, VPN istemcilerini ve ileride ba\u011flanacak ortamlar\u0131 envantere al\u0131n. \u00c7ak\u0131\u015fan CIDR bloklar\u0131, t\u00fcnel kurulsa bile rotalar\u0131n belirsizle\u015fmesine yol a\u00e7abilir. \u00d6rne\u011fin bir uygulama ve veritaban\u0131 katman\u0131n\u0131 ayr\u0131 aral\u0131klara ay\u0131rmak y\u00f6netimi kolayla\u015ft\u0131rabilir; bunun \u00fcr\u00fcn taraf\u0131ndan desteklenmesi ve kapasite ihtiyac\u0131na uymas\u0131 gerekir.<\/p>\n

IP adresi, alt a\u011f maskesi ve a\u011f ge\u00e7idi birlikte anlam ta\u015f\u0131r. Bir sunucuya \u00f6zel adres tan\u0131mlamak, b\u00fct\u00fcn di\u011fer \u00f6zel a\u011flara ula\u015fabilece\u011fi anlam\u0131na gelmez. IPv6 kullan\u0131yorsan\u0131z ayn\u0131 eri\u015fim politikas\u0131n\u0131 IPv6 taraf\u0131nda da a\u00e7\u0131k\u00e7a tasarlay\u0131n; yaln\u0131z IPv4 kurallar\u0131n\u0131 kontrol etmek eksik kal\u0131r.<\/p>\n

Rota ile izin karar\u0131n\u0131 ay\u0131r\u0131n<\/h2>\n

Bir rota paketin hangi yoldan iletilece\u011fini belirler; g\u00fcvenlik kural\u0131 bu trafi\u011fe izin verilip verilmeyece\u011fini de\u011ferlendirir. Uygulama sunucusundan veritaban\u0131na ula\u015fmak i\u00e7in hem do\u011fru gidi\u015f\/d\u00f6n\u00fc\u015f rotas\u0131 hem de ilgili kaynak, hedef ve port i\u00e7in izin gerekir. NAT kullan\u0131m\u0131 \u00e7\u0131k\u0131\u015f adresini de\u011fi\u015ftirebilir; tek ba\u015f\u0131na uygulama kimlik do\u011frulamas\u0131 sa\u011flamaz.<\/p>\n\n\n\n\n\n\n\n\n
Kontrol<\/th>\nSorulacak soru<\/th>\n<\/tr>\n<\/thead>\n
Adresleme<\/td>\nBa\u011flanacak a\u011flarla CIDR \u00e7ak\u0131\u015fmas\u0131 var m\u0131?<\/td>\n<\/tr>\n
Y\u00f6nlendirme<\/td>\nGidi\u015f ve d\u00f6n\u00fc\u015f trafi\u011fi hangi a\u011f ge\u00e7idini kullan\u0131yor?<\/td>\n<\/tr>\n
Eri\u015fim<\/td>\nHangi kaynak hangi protokol ve porta ula\u015fmal\u0131?<\/td>\n<\/tr>\n
\u015eifreleme<\/td>\nUygulama veya t\u00fcnel katman\u0131nda veri nas\u0131l korunuyor?<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Uygulama katmanlar\u0131n\u0131 gereksinime g\u00f6re ay\u0131r\u0131n<\/h2>\n

Tipik bir web mimarisinde d\u0131\u015f istemci giri\u015f katman\u0131na ula\u015f\u0131rken veritaban\u0131 yaln\u0131z yetkili uygulama kaynaklar\u0131ndan ba\u011flant\u0131 kabul eder. Y\u00f6netim eri\u015fimini de genel kullan\u0131c\u0131 trafi\u011finden ay\u0131r\u0131n. Bulut g\u00fcvenlik duvar\u0131, sunucu \u00fczerindeki firewall ve uygulaman\u0131n dinledi\u011fi adres birbiriyle uyumlu olmal\u0131d\u0131r.<\/p>\n

\u201c\u00d6zel a\u011f i\u00e7inden geliyor\u201d gerek\u00e7esiyle parolas\u0131z veritaban\u0131 veya s\u0131n\u0131rs\u0131z y\u00f6netim yetkisi vermeyin. Kimlik bilgilerini ayr\u0131 y\u00f6netin; gerekli yerlerde TLS kullan\u0131n. A\u011f izolasyonu, uygulama ve hesap g\u00fcvenli\u011fini destekleyen bir katmand\u0131r.<\/p>\n

De\u011fi\u015fikli\u011fi eri\u015fimi kaybetmeden do\u011frulay\u0131n<\/h2>\n

Rota veya firewall de\u011fi\u015fikli\u011finden \u00f6nce \u00e7al\u0131\u015fan y\u00f6netim yolunu ve geri d\u00f6n\u00fc\u015f se\u00e7ene\u011fini kaydedin. \u00d6nce gerekli ba\u011flant\u0131n\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131, ard\u0131ndan izin verilmeyen kaynaktan eri\u015fimin reddedildi\u011fini test edin. DNS \u00e7\u00f6z\u00fcmlemesi, ba\u011flant\u0131 kurulmas\u0131 ve uygulaman\u0131n ba\u015far\u0131l\u0131 yan\u0131t vermesi farkl\u0131 a\u015famalard\u0131r. Olay incelemesi i\u00e7in a\u011f kurallar\u0131n\u0131n sahibi, gerek\u00e7esi ve son kontrol tarihini tutun.<\/p>\n

S\u0131k sorulan sorular<\/h2>\n
\n
VPC i\u00e7indeki t\u00fcm trafik \u015fifreli midir?<\/strong><\/dt>\n
\n

Bunu \u00fcr\u00fcn kapsam\u0131ndan do\u011frulamak gerekir. Mant\u0131ksal a\u011f izolasyonu, uygulama TLS\u2019i veya VPN \u015fifrelemesiyle ayn\u0131 \u00f6zellik de\u011fildir.<\/p>\n<\/dd>\n

Peering yap\u0131l\u0131nca b\u00fct\u00fcn servisler eri\u015filebilir olur mu?<\/strong><\/dt>\n
\n

Hay\u0131r. Desteklenen y\u00f6nlendirme davran\u0131\u015f\u0131, adres \u00e7ak\u0131\u015fmalar\u0131, d\u00f6n\u00fc\u015f rotalar\u0131 ve eri\u015fim kurallar\u0131 ayr\u0131ca de\u011ferlendirilir.<\/p>\n<\/dd>\n<\/dl>\n

Sonraki ad\u0131m<\/h2>\n

FibaCloud VPC<\/a> kapsam\u0131n\u0131 inceleyin; eri\u015fim politikas\u0131n\u0131 g\u00fcvenlik duvar\u0131 rehberi<\/a> ile birlikte haz\u0131rlay\u0131n.<\/p>\n

Kaynaklar<\/h2>\n
    \n
  1. OpenStack Neutron \u2014 Virtual networks, subnets and routing<\/a><\/li>\n
  2. RFC 1918: Address Allocation for Private Internets | RFC Editor<\/a><\/li>\n
  3. RFC 4632: Classless Inter-domain Routing (CIDR): The Internet Address Assignment and Aggregation Plan | RFC Editor<\/a><\/li>\n
  4. NIST SP 800-41, Revision 1, Guidelines on Firewalls and Firewall Policy<\/a><\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

    VPC (Virtual Private Cloud), bulut kaynaklar\u0131 i\u00e7in mant\u0131ksal olarak ayr\u0131lm\u0131\u015f bir a\u011f ortam\u0131d\u0131r. Kaynaklar\u0131n hangi adreslerle konu\u015faca\u011f\u0131n\u0131, hangi rotalar\u0131 kullanaca\u011f\u0131n\u0131 ve hangi eri\u015fimlere izin verilece\u011fini planlamay\u0131 sa\u011flar. VPC, tek ba\u015f\u0131na \u00f6zel fiziksel donan\u0131m veya verinin otomatik olarak \u015fifrelendi\u011fi anlam\u0131na gelmez. Adresleme, y\u00f6nlendirme ve eri\u015fim kurallar\u0131 birlikte tasarlan\u0131r.G\u00f6rseli b\u00fcy\u00fct \u2192 VPC, VPN ve VLAN ayn\u0131 kavram […]<\/p>\n","protected":false},"author":1,"featured_media":1444,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,25,31],"tags":[87,147,146,96,145],"class_list":["post-888","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking","category-buluta-genel-bakis","category-guvenlik","tag-bulut-guvenligi","tag-izolasyon","tag-networking","tag-sanallastirma","tag-vpc"],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/comments?post=888"}],"version-history":[{"count":2,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/888\/revisions"}],"predecessor-version":[{"id":890,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/888\/revisions\/890"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media\/1444"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media?parent=888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/categories?post=888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/tags?post=888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}