{"id":900,"date":"2024-03-02T00:00:00","date_gmt":"2024-03-01T21:00:00","guid":{"rendered":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/?p=900"},"modified":"2026-10-06T03:13:30","modified_gmt":"2026-10-06T00:13:30","slug":"wireguard-nedir","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/networking\/wireguard-nedir\/","title":{"rendered":"WireGuard Nedir? WireGuard Kurulumu ve Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"<div class=\"fc-resource-revision\" data-fc-editorial=\"20261006\">\n<p class=\"fc-article-summary\">WireGuard, e\u015fler aras\u0131nda \u015fifreli IP t\u00fcnelleri kuran bir VPN teknolojisidir. Her e\u015f bir anahtar \u00e7iftiyle tan\u0131mlan\u0131r; eri\u015filecek a\u011flar\u0131n hangi e\u015fle ili\u015fkilendirilece\u011fi yap\u0131land\u0131r\u0131l\u0131r. K\u00fc\u00e7\u00fck bir yap\u0131land\u0131rma dosyas\u0131, b\u00fct\u00fcn y\u00f6nlendirme ve g\u00fcvenlik kararlar\u0131n\u0131n kendili\u011finden do\u011fru oldu\u011fu anlam\u0131na gelmez.<\/p>\n<figure class=\"fc-editorial-figure\"><img loading=\"lazy\" src=\"\/community\/assets\/resource-renewal-20261006\/wireguard-configuration-tr.svg\" width=\"960\" height=\"440\"  decoding=\"async\" alt=\"Her e\u015fin genel anahtar\u0131 izin verilen IP aral\u0131klar\u0131yla ili\u015fkilidir. \u00d6zel anahtar e\u015fte kal\u0131r; hedef trafik do\u011fru e\u015fe y\u00f6nlendirilir.\"><figcaption>AllowedIPs, e\u015f kimli\u011fi ve IP kapsam\u0131 aras\u0131nda ba\u011f kurar.<br \/><a class=\"fc-diagram-open\" href=\"\/community\/assets\/resource-renewal-20261006\/wireguard-configuration-tr.svg\">G\u00f6rseli b\u00fcy\u00fct \u2192<\/a><\/figcaption><\/figure>\n<h2>Temel alanlar\u0131n g\u00f6revini ay\u0131r\u0131n<\/h2>\n<p><code>PrivateKey<\/code> yaln\u0131z ilgili e\u015fte tutulur. <code>PublicKey<\/code>, kar\u015f\u0131 e\u015fin kimli\u011fini tan\u0131mlar. <code>Endpoint<\/code>, e\u015fe ula\u015fmak i\u00e7in kullan\u0131lan d\u0131\u015f adres ve UDP portudur. <code>AllowedIPs<\/code>, \u00e7\u0131k\u0131\u015f paketinin hangi e\u015fe g\u00f6nderilece\u011fini ve o e\u015ften kabul edilecek kaynak adreslerini ili\u015fkilendirir.<\/p>\n<p>WireGuard \u00e7ekirdek protokol\u00fc ile <code>wg-quick<\/code> yard\u0131mc\u0131 arac\u0131n\u0131n i\u015flemleri ayn\u0131 de\u011fildir. <code>wg-quick<\/code> adres ve rota gibi i\u015fletim sistemi ayarlar\u0131n\u0131 da d\u00fczenleyebilir. Bir yap\u0131land\u0131rma ba\u015fka istemci uygulamas\u0131na aktar\u0131ld\u0131\u011f\u0131nda DNS veya rota se\u00e7eneklerinin destekleni\u015fini do\u011frulay\u0131n.<\/p>\n<h2>Anahtarlar\u0131 g\u00fcvenli \u00fcretin<\/h2>\n<p>Da\u011f\u0131t\u0131m\u0131n\u0131za uygun resmi WireGuard ara\u00e7lar\u0131n\u0131 kurduktan sonra, yeni bir \u00e7al\u0131\u015fma dizininde k\u0131s\u0131tl\u0131 dosya izinleriyle anahtar \u00e7ifti olu\u015fturabilirsiniz. A\u015fa\u011f\u0131daki \u00f6rnek mevcut dosyalar\u0131n \u00fczerine yaz\u0131lmayan yeni bir kurulum i\u00e7indir; <code>privatekey<\/code> dosyas\u0131n\u0131 ortak depolamaya y\u00fcklemeyin.<\/p>\n<pre><code>umask 077\nwg genkey &gt; privatekey\nwg pubkey &lt; privatekey &gt; publickey<\/code><\/pre>\n<p>Kar\u015f\u0131 uca yaln\u0131z genel anahtar\u0131 iletin. Kullan\u0131c\u0131 eri\u015fimini kald\u0131rmak i\u00e7in ilgili peer kayd\u0131n\u0131 kald\u0131rma veya anahtar de\u011fi\u015ftirme s\u00fcrecini planlay\u0131n. WireGuard\u2019\u0131n anahtar modeli, tek ba\u015f\u0131na kullan\u0131c\u0131 dizini, parola ak\u0131\u015f\u0131 veya \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulama sistemi de\u011fildir.<\/p>\n<h2>S\u0131n\u0131rl\u0131 bir t\u00fcnelle ba\u015flay\u0131n<\/h2>\n<p>A\u015fa\u011f\u0131daki Linux <code>wg-quick<\/code> \u00f6rne\u011fi, iki t\u00fcnel adresi i\u00e7in istemci yap\u0131land\u0131rmas\u0131n\u0131n i\u00e7eri\u011fini g\u00f6sterir. Sunucu e\u015f yap\u0131land\u0131rmas\u0131 ve aray\u00fczleri etkinle\u015ftirme ad\u0131mlar\u0131 ayr\u0131ca tamamlanmal\u0131d\u0131r. Yer tutucular ger\u00e7ek anahtarlarla de\u011fi\u015ftirilmelidir; bu \u00f6rnek internet \u00e7\u0131k\u0131\u015f\u0131, DNS sunucusu, NAT veya ba\u015fka bir alt a\u011fa y\u00f6nlendirme yap\u0131land\u0131rmaz.<\/p>\n<pre><code>[Interface]\nAddress = 10.20.0.2\/32\nPrivateKey = &lt;ISTEMCI_OZEL_ANAHTARI&gt;\n\n[Peer]\nPublicKey = &lt;SUNUCU_GENEL_ANAHTARI&gt;\nEndpoint = vpn.example.com:51820\nAllowedIPs = 10.20.0.1\/32<\/code><\/pre>\n<p>Sunucuda istemcinin genel anahtar\u0131n\u0131 ve <code>10.20.0.2\/32<\/code> e\u015flemesini tan\u0131mlay\u0131n; dinleme portunu yaln\u0131z gerekli a\u011f politikas\u0131yla eri\u015filebilir k\u0131l\u0131n. Dosyay\u0131 uygulamadan \u00f6nce y\u00f6netim ba\u011flant\u0131n\u0131z\u0131n rotas\u0131n\u0131 de\u011fi\u015ftirmedi\u011finizi kontrol edin. NAT arkas\u0131ndaki bir e\u015fin eri\u015filebilir kalmas\u0131 gerekiyorsa <code>PersistentKeepalive<\/code> se\u00e7ene\u011fini resmi quick start belgesindeki ko\u015fullara g\u00f6re de\u011ferlendirin.<\/p>\n<h2>El s\u0131k\u0131\u015fma ile uygulama eri\u015fimini ayr\u0131 test edin<\/h2>\n<pre><code>sudo wg show\nip address show\nip route show<\/code><\/pre>\n<p>Son el s\u0131k\u0131\u015fma zaman\u0131n\u0131 ve aktar\u0131m saya\u00e7lar\u0131n\u0131 g\u00f6zlemleyin; ard\u0131ndan hedef IP ba\u011flant\u0131s\u0131n\u0131 ve uygulama yan\u0131t\u0131n\u0131 test edin. El s\u0131k\u0131\u015fma g\u00f6r\u00fclmesi b\u00fct\u00fcn a\u011flara eri\u015fim oldu\u011funu kan\u0131tlamaz. \u0130leri a\u011f eri\u015fimi i\u00e7in IP y\u00f6nlendirmesi, d\u00f6n\u00fc\u015f rotas\u0131, gerekiyorsa NAT ve firewall kurallar\u0131 ayr\u0131ca gereklidir.<\/p>\n<h2>Full tunnel ve split tunnel karar\u0131n\u0131 bilin\u00e7li verin<\/h2>\n<p><code>0.0.0.0\/0<\/code> veya <code>::\/0<\/code> gibi geni\u015f kapsamlar varsay\u0131lan trafi\u011fi etkileyebilir. Bu kapsamlar\u0131 eklemeden \u00f6nce DNS, IPv6, yerel a\u011f eri\u015fimi ve geri d\u00f6n\u00fc\u015f plan\u0131n\u0131 test edin. VPN kullan\u0131m\u0131 u\u00e7 cihaz\u0131 veya hedef uygulamay\u0131 g\u00fcvenli hale getirmez; yetkili a\u011f i\u00e7indeki eri\u015fimler i\u00e7in de en az yetki yakla\u015f\u0131m\u0131n\u0131 s\u00fcrd\u00fcr\u00fcn.<\/p>\n<h2>S\u0131k sorulan sorular<\/h2>\n<dl>\n<dt><strong>AllowedIPs yaln\u0131z bir firewall kural\u0131 m\u0131d\u0131r?<\/strong><\/dt>\n<dd>\n<p>Hay\u0131r. E\u015f ile IP kapsam\u0131n\u0131 ili\u015fkilendiren y\u00f6nlendirme ve kabul davran\u0131\u015f\u0131n\u0131n par\u00e7as\u0131d\u0131r. \u0130\u015fletim sistemi rotalar\u0131 ve firewall politikas\u0131 ayr\u0131ca de\u011ferlendirilir.<\/p>\n<\/dd>\n<dt><strong>WireGuard her durumda OpenVPN\u2019den h\u0131zl\u0131 m\u0131d\u0131r?<\/strong><\/dt>\n<dd>\n<p>Genel bir sonu\u00e7 \u00e7\u0131kar\u0131lamaz. \u0130\u015flemci, a\u011f yolu, MTU, y\u00fck ve kullan\u0131lan yap\u0131land\u0131rma ayn\u0131 ko\u015fullarda \u00f6l\u00e7\u00fclmelidir.<\/p>\n<\/dd>\n<\/dl>\n<h2>Sonraki ad\u0131m<\/h2>\n<p>Kimlik ve i\u015fletim ihtiya\u00e7lar\u0131n\u0131 <a href=\"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/networking\/openvpn-nedir\/\">OpenVPN yakla\u015f\u0131m\u0131<\/a> ile kar\u015f\u0131la\u015ft\u0131r\u0131n; \u00f6zel a\u011f hedeflerini <a href=\"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/networking\/vpc-sanal-ozel-bulut-nedir\/\">VPC rehberine<\/a> g\u00f6re planlay\u0131n.<\/p>\n<h2>Kaynaklar<\/h2>\n<ol>\n<li><a href=\"https:\/\/www.wireguard.com\/quickstart\/\" rel=\"noopener\" target=\"_blank\">Quick Start &#8211; WireGuard<\/a><\/li>\n<li><a href=\"https:\/\/git.zx2c4.com\/wireguard-tools\/plain\/src\/man\/wg.8\" rel=\"noopener\" target=\"_blank\">WireGuard \u2014 wg(8) anahtar ve e\u015f ba\u015fvurusu<\/a><\/li>\n<li><a href=\"https:\/\/git.zx2c4.com\/wireguard-tools\/plain\/src\/man\/wg-quick.8\" rel=\"noopener\" target=\"_blank\">WireGuard \u2014 wg-quick(8) yap\u0131land\u0131rma ba\u015fvurusu<\/a><\/li>\n<li><a href=\"https:\/\/www.wireguard.com\/\" rel=\"noopener\" target=\"_blank\">WireGuard \u2014 Cryptokey Routing<\/a><\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>WireGuard, e\u015fler aras\u0131nda \u015fifreli IP t\u00fcnelleri kuran bir VPN teknolojisidir. Her e\u015f bir anahtar \u00e7iftiyle tan\u0131mlan\u0131r; eri\u015filecek a\u011flar\u0131n hangi e\u015fle ili\u015fkilendirilece\u011fi yap\u0131land\u0131r\u0131l\u0131r. K\u00fc\u00e7\u00fck bir yap\u0131land\u0131rma dosyas\u0131, b\u00fct\u00fcn y\u00f6nlendirme ve g\u00fcvenlik kararlar\u0131n\u0131n kendili\u011finden do\u011fru oldu\u011fu anlam\u0131na gelmez. AllowedIPs, e\u015f kimli\u011fi ve IP kapsam\u0131 aras\u0131nda ba\u011f kurar.G\u00f6rseli b\u00fcy\u00fct \u2192 Temel alanlar\u0131n g\u00f6revini ay\u0131r\u0131n PrivateKey yaln\u0131z ilgili e\u015fte [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":1446,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,31],"tags":[],"class_list":["post-900","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/900","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/comments?post=900"}],"version-history":[{"count":3,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/900\/revisions"}],"predecessor-version":[{"id":910,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/900\/revisions\/910"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media\/1446"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media?parent=900"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/categories?post=900"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/tags?post=900"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}