{"id":898,"date":"2024-03-02T00:00:00","date_gmt":"2024-03-01T21:00:00","guid":{"rendered":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/?p=898"},"modified":"2026-10-06T03:13:30","modified_gmt":"2026-10-06T00:13:30","slug":"openvpn-nedir","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/networking\/openvpn-nedir\/","title":{"rendered":"OpenVPN Nedir? Nas\u0131l \u00c7al\u0131\u015f\u0131r ve Nas\u0131l Kurulur?"},"content":{"rendered":"
\n

OpenVPN, istemciler veya a\u011flar aras\u0131nda \u015fifreli ba\u011flant\u0131 kurmak i\u00e7in kullan\u0131lan bir VPN \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Ba\u015far\u0131l\u0131 bir kurulum yaln\u0131z t\u00fcnelin a\u00e7\u0131lmas\u0131yla \u00f6l\u00e7\u00fclmez: istemci kimli\u011fi, eri\u015filecek a\u011flar, DNS davran\u0131\u015f\u0131 ve d\u00f6n\u00fc\u015f rotalar\u0131 da do\u011fru olmal\u0131d\u0131r. Bu rehber OpenVPN Community yakla\u015f\u0131m\u0131n\u0131 a\u00e7\u0131klar; ticari Access Server\u2019\u0131n aray\u00fcz ve lisans \u00f6zellikleri ayr\u0131 \u00fcr\u00fcn kapsam\u0131d\u0131r. Buradaki ak\u0131\u015f a\u011f, kimlik ve kabul plan\u0131n\u0131 kurar; paket, CA ve servis kurulumu se\u00e7ilen i\u015fletim sistemi ile OpenVPN s\u00fcr\u00fcm\u00fcn\u00fcn belgelerine g\u00f6re tamamlan\u0131r.<\/p>\n

\"\u0130stemci
Kimlik do\u011frulama, t\u00fcnel ve uygulama eri\u015fimi ayr\u0131 ayr\u0131 kontrol edilir.
G\u00f6rseli b\u00fcy\u00fct \u2192<\/a><\/figcaption><\/figure>\n

Kurulumdan \u00f6nce a\u011f kapsam\u0131n\u0131 belirleyin<\/h2>\n

\u0130stemcilerin yaln\u0131z belirli \u00f6zel a\u011flara m\u0131 yoksa t\u00fcm internet trafi\u011fi i\u00e7in mi t\u00fcnele ihtiya\u00e7 duydu\u011funu kararla\u015ft\u0131r\u0131n. Split tunnel yakla\u015f\u0131m\u0131nda belirli hedefler VPN\u2019den ge\u00e7er; full tunnel yakla\u015f\u0131m\u0131nda varsay\u0131lan rota da t\u00fcnele y\u00f6nlenebilir. Bu se\u00e7im bant geni\u015fli\u011fi, DNS, IPv6 ve eri\u015fim politikalar\u0131n\u0131 etkiler.<\/p>\n

VPN adres havuzunun ofis, ev ve bulut a\u011flar\u0131yla \u00e7ak\u0131\u015fmamas\u0131n\u0131 sa\u011flay\u0131n. Sunucuya ula\u015f\u0131lacak adresi, ta\u015f\u0131ma protokol\u00fcn\u00fc ve portu planlay\u0131n. NAT arkas\u0131ndaki a\u011flar, y\u00f6nlendirme izinleri ve bulut firewall kurallar\u0131 ba\u011flant\u0131 tasar\u0131m\u0131n\u0131n par\u00e7as\u0131d\u0131r. UDP veya TCP se\u00e7imini mevcut a\u011f ko\u015fullar\u0131na g\u00f6re yap\u0131n; tek bir ta\u015f\u0131ma y\u00f6nteminin her durumda daha h\u0131zl\u0131 oldu\u011funu varsaymay\u0131n.<\/p>\n

Paketi ve kimlik altyap\u0131s\u0131n\u0131 haz\u0131rlay\u0131n<\/h2>\n

Desteklenen bir i\u015fletim sisteminde resmi paket kayna\u011f\u0131n\u0131 kullan\u0131n. Sunucu ve istemci s\u00fcr\u00fcmlerini kaydedip ayn\u0131 s\u00fcr\u00fcm ailesinin belgesini esas al\u0131n. \u00d6rnek se\u00e7eneklerin bu kaynaklarda OpenVPN 2.6 davran\u0131\u015f\u0131yla a\u00e7\u0131kland\u0131\u011f\u0131n\u0131, da\u011f\u0131t\u0131m\u0131n\u0131z\u0131n paket ve hizmet ad\u0131n\u0131n farkl\u0131 olabilece\u011fini unutmay\u0131n.<\/p>\n

openvpn --version<\/code><\/pre>\n
Her istemci i\u00e7in ayr\u0131 kimlik ve iptal edilebilir eri\u015fim olu\u015fturun. CA \u00f6zel anahtar\u0131n\u0131 geli\u015fig\u00fczel istemcilere da\u011f\u0131tmay\u0131n; sunucu ve istemci \u00f6zel anahtarlar\u0131n\u0131 koruyun. Sertifika s\u00fcresi, iptal listesi ve yetkisi kald\u0131r\u0131lan kullan\u0131c\u0131n\u0131n nas\u0131l engellenece\u011fi kurulumun ba\u015f\u0131nda belirlenmelidir.<\/p>\n
Sunucu ve istemci yap\u0131land\u0131rmas\u0131n\u0131 e\u015fle\u015ftirin<\/h2>\n
Her iki u\u00e7ta t\u00fcnel t\u00fcr\u00fc, uzak adres, protokol ve g\u00fcvenlik se\u00e7eneklerinin uyumunu kontrol edin. \u0130stemcinin do\u011fru sunucu sertifikas\u0131n\u0131 do\u011frulamas\u0131 \u00f6nemlidir; do\u011frulama hatas\u0131n\u0131 gidermek i\u00e7in kimlik kontrollerini kapatmay\u0131n. Haz\u0131r profillerin i\u00e7erdi\u011fi \u00f6zel anahtar ve parola alanlar\u0131n\u0131 hassas bilgi olarak ele al\u0131n.<\/p>\n
Sunucunun IP y\u00f6nlendirmesi, hedef a\u011fa gidi\u015f rotas\u0131 ve geri d\u00f6n\u00fc\u015f yolu birlikte haz\u0131rlanmal\u0131d\u0131r. Baz\u0131 ortamlarda y\u00f6nlendirilmi\u015f VPN havuzu yeterliyken baz\u0131lar\u0131nda uygun NAT gerekir. K\u00f6r bi\u00e7imde b\u00fct\u00fcn a\u011flara izin veren kurallar eklemek yerine yaln\u0131z gerekli hedef ve portlar\u0131 tan\u0131mlay\u0131n.<\/p>\n
Ba\u011flant\u0131y\u0131 a\u015famal\u0131 olarak kabul edin<\/h2>\n
    \n
  1. Sunucu adresinin \u00e7\u00f6z\u00fcnd\u00fc\u011f\u00fcn\u00fc ve se\u00e7ilen portun ilgili a\u011fdan eri\u015filebilir oldu\u011funu kontrol edin.<\/li>\n
  2. TLS el s\u0131k\u0131\u015fmas\u0131n\u0131n ve istemci kimli\u011finin ba\u015far\u0131yla do\u011fruland\u0131\u011f\u0131n\u0131 g\u00fcnl\u00fckten inceleyin.<\/li>\n
  3. \u0130stemcinin ald\u0131\u011f\u0131 t\u00fcnel adresini ve y\u00fcklenen rotalar\u0131 kontrol edin.<\/li>\n
  4. DNS sorgusunun beklenen \u00e7\u00f6z\u00fcmleyiciye gitti\u011fini ve \u00f6zel adlar\u0131 do\u011fru \u00e7\u00f6zd\u00fc\u011f\u00fcn\u00fc test edin.<\/li>\n
  5. Yetkili uygulamaya eri\u015fimi ve yetkisiz hedefe eri\u015fimin reddedildi\u011fini do\u011frulay\u0131n.<\/li>\n<\/ol>\n
    T\u00fcnel a\u00e7\u0131kken ba\u011flant\u0131 kopmalar\u0131 varsa paket kayb\u0131, MTU, NAT zaman a\u015f\u0131m\u0131 ve ana makine y\u00fck\u00fcn\u00fc ayr\u0131 inceleyin. Genel internet eri\u015fimini t\u00fcnele y\u00f6nlendirdi\u011finizde IPv6 ve DNS\u2019in beklenen politika d\u0131\u015f\u0131nda kalmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/p>\n
    \u0130\u015fletim plan\u0131 kurulum kadar \u00f6nemlidir<\/h2>\n
    Eri\u015fim verilen kullan\u0131c\u0131lar\u0131, sertifika son tarihlerini ve iptal i\u015flemlerini kay\u0131t alt\u0131nda tutun. G\u00fcncellemeleri test ortam\u0131nda do\u011frulay\u0131n; servis ad\u0131n\u0131 veya se\u00e7enekleri tahmin ederek mevcut \u00e7al\u0131\u015fan kuruluma uygulamay\u0131n. VPN a\u011f trafi\u011fini koruyan bir kanald\u0131r; istemci cihaz\u0131ndaki zararl\u0131 yaz\u0131l\u0131m\u0131, uygulama a\u00e7\u0131klar\u0131n\u0131 veya zay\u0131f parolalar\u0131 kendili\u011finden gidermez.<\/p>\n
    S\u0131k sorulan sorular<\/h2>\n
    \n
    VPN a\u00e7\u0131ld\u0131 fakat \u00f6zel sunucuya ula\u015fam\u0131yorum; nereden ba\u015flamal\u0131y\u0131m?<\/strong><\/dt>\n
    \n
    T\u00fcnel adresi, hedef ve d\u00f6n\u00fc\u015f rotas\u0131, sunucu y\u00f6nlendirmesi ve iki u\u00e7taki firewall kurallar\u0131n\u0131 s\u0131rayla kontrol edin. DNS hatas\u0131n\u0131 IP ba\u011flant\u0131 hatas\u0131ndan ay\u0131r\u0131n.<\/p>\n<\/dd>\n
    Ayn\u0131 istemci profilini b\u00fct\u00fcn ekibe da\u011f\u0131tabilir miyim?<\/strong><\/dt>\n
    \n
    Ayr\u0131 kimlikler eri\u015fimi izlemeyi ve tek bir kullan\u0131c\u0131n\u0131n yetkisini iptal etmeyi kolayla\u015ft\u0131r\u0131r. Ortak \u00f6zel anahtar payla\u015f\u0131m\u0131 bu ayr\u0131m\u0131 ortadan kald\u0131r\u0131r.<\/p>\n<\/dd>\n<\/dl>\n
    Sonraki ad\u0131m<\/h2>\n
    Alternatifin eri\u015fim modelini WireGuard rehberi<\/a> ile kar\u015f\u0131la\u015ft\u0131r\u0131n; a\u011f aral\u0131klar\u0131n\u0131 VPC planlamas\u0131<\/a> i\u00e7inde kaydedin.<\/p>\n
    Kaynaklar<\/h2>\n
      \n
    1. OpenVPN Community 2.6 \u2014 Ba\u015fvuru k\u0131lavuzu<\/a><\/li>\n
    2. OpenVPN Community \u2014 Kurulum rehberleri dizini<\/a><\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
      OpenVPN, istemciler veya a\u011flar aras\u0131nda \u015fifreli ba\u011flant\u0131 kurmak i\u00e7in kullan\u0131lan bir VPN \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Ba\u015far\u0131l\u0131 bir kurulum yaln\u0131z t\u00fcnelin a\u00e7\u0131lmas\u0131yla \u00f6l\u00e7\u00fclmez: istemci kimli\u011fi, eri\u015filecek a\u011flar, DNS davran\u0131\u015f\u0131 ve d\u00f6n\u00fc\u015f rotalar\u0131 da do\u011fru olmal\u0131d\u0131r. Bu rehber OpenVPN Community yakla\u015f\u0131m\u0131n\u0131 a\u00e7\u0131klar; ticari Access Server\u2019\u0131n aray\u00fcz ve lisans \u00f6zellikleri ayr\u0131 \u00fcr\u00fcn kapsam\u0131d\u0131r. Buradaki ak\u0131\u015f a\u011f, kimlik ve kabul plan\u0131n\u0131 […]<\/p>\n","protected":false},"author":4,"featured_media":1437,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,31],"tags":[154,87,146,153,150],"class_list":["post-898","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking","category-guvenlik","tag-ag-guvenligi","tag-bulut-guvenligi","tag-networking","tag-openvpn","tag-vpn"],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/898","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/comments?post=898"}],"version-history":[{"count":3,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/898\/revisions"}],"predecessor-version":[{"id":907,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/898\/revisions\/907"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media\/1437"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media?parent=898"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/categories?post=898"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/tags?post=898"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}