{"id":932,"date":"2024-04-04T22:00:00","date_gmt":"2024-04-04T19:00:00","guid":{"rendered":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/?p=932"},"modified":"2026-10-06T03:13:30","modified_gmt":"2026-10-06T00:13:30","slug":"nfs-nedir-nfs-guvenlik-onlemleri-ve-optimizasyonu","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/depolama\/nfs-nedir-nfs-guvenlik-onlemleri-ve-optimizasyonu\/","title":{"rendered":"NFS Nedir? NFS G\u00fcvenlik \u00d6nlemleri ve Optimizasyonu"},"content":{"rendered":"<div class=\"fc-resource-revision\" data-fc-editorial=\"20261006\">\n<p class=\"fc-article-summary\">NFS (Network File System), bir sunucudaki dosya sisteminin istemciler taraf\u0131ndan a\u011f \u00fczerinden kullan\u0131lmas\u0131n\u0131 sa\u011flayan bir protokold\u00fcr. Payla\u015f\u0131m\u0131n ba\u011flanmas\u0131 tek ba\u015f\u0131na g\u00fcvenli oldu\u011fu anlam\u0131na gelmez: export kapsam\u0131, istemci kimli\u011fi, dosya izinleri ve kullan\u0131lan NFS s\u00fcr\u00fcm\u00fc birlikte de\u011ferlendirilmelidir.<\/p>\n<figure class=\"fc-editorial-figure\"><img loading=\"lazy\" src=\"\/community\/assets\/resource-renewal-20261006\/nfs-security-tr.svg\" width=\"960\" height=\"440\"  decoding=\"async\" alt=\"\u0130zinli istemci export kural\u0131n\u0131 ge\u00e7er; UID\/GID e\u015flemesi ve sunucu dosya izinleri hangi i\u015flemlerin yap\u0131labilece\u011fini belirler.\"><figcaption>Export izni, dosya izinlerini devre d\u0131\u015f\u0131 b\u0131rakmaz.<br \/><a class=\"fc-diagram-open\" href=\"\/community\/assets\/resource-renewal-20261006\/nfs-security-tr.svg\">G\u00f6rseli b\u00fcy\u00fct \u2192<\/a><\/figcaption><\/figure>\n<h2>S\u00fcr\u00fcm ve kimlik modelini belirleyin<\/h2>\n<p>NFSv3 ile NFSv4 ailesinin port, kilitleme, kimlik e\u015fleme ve g\u00fcvenlik davran\u0131\u015flar\u0131 ayn\u0131 de\u011fildir. Sunucu ve istemci s\u00fcr\u00fcm\u00fcn\u00fc se\u00e7ip da\u011f\u0131t\u0131m belgelerini birlikte inceleyin. Kullan\u0131c\u0131lar\u0131n UID\/GID de\u011ferleri veya kimlik hizmetleri uyumsuzsa dosya sahipli\u011fi beklenmedik g\u00f6r\u00fcnebilir.<\/p>\n<p>G\u00fcvenilen bir \u00f6zel a\u011f, kimlik do\u011frulama ihtiyac\u0131n\u0131 ortadan kald\u0131rmaz. Basit adres tabanl\u0131 bir export \u00f6rne\u011fini internet \u00fczerinden herkese a\u00e7\u0131k bir payla\u015f\u0131m haline getirmeyin. Gereksinime g\u00f6re Kerberos ve desteklenen b\u00fct\u00fcnl\u00fck\/gizlilik se\u00e7eneklerini de\u011ferlendirin; bunlar\u0131n yap\u0131land\u0131rma ve kimlik altyap\u0131s\u0131 ihtiyac\u0131n\u0131 ayr\u0131ca planlay\u0131n.<\/p>\n<h2>S\u0131n\u0131rl\u0131 salt okunur payla\u015f\u0131m \u00f6rne\u011fi<\/h2>\n<p>A\u015fa\u011f\u0131daki \u00f6rnek Ubuntu Server belgelerindeki paket adlar\u0131n\u0131 kullan\u0131r; farkl\u0131 bir da\u011f\u0131t\u0131mda paket ve servis adlar\u0131n\u0131 ayr\u0131ca do\u011frulay\u0131n. \u0130ki ayr\u0131 test makinesi, bo\u015f bir deneme dizini ve ger\u00e7ek ortam\u0131n\u0131za uyarlanm\u0131\u015f adresler kullan\u0131n. Sunucu adresi <code>192.168.1.100<\/code>, izinli istemci <code>192.168.1.50<\/code> olarak \u00f6rneklenmi\u015ftir; NFS s\u00fcr\u00fcm\u00fcn\u00fc se\u00e7ip ilgili portlar\u0131 yaln\u0131z bu istemciye a\u00e7\u0131n.<\/p>\n<pre><code>sudo apt-get install nfs-kernel-server\nsudo mkdir -m 0755 \/paylasim\nsudoedit \/etc\/exports<\/code><\/pre>\n<p>Export dosyas\u0131na yaln\u0131z deneme payla\u015f\u0131m\u0131 i\u00e7in \u015fu kural eklenir:<\/p>\n<pre><code>\/paylasim 192.168.1.50(ro,sync,root_squash)<\/code><\/pre>\n<p><code>ro<\/code> sunucu taraf\u0131ndan salt okunur eri\u015fim tan\u0131mlar. <code>sync<\/code> sunucunun yazma onay\u0131 davran\u0131\u015f\u0131yla ilgilidir. <code>root_squash<\/code>, uzak istemcinin root kimli\u011fini anonim kimli\u011fe e\u015fler; anonim kullan\u0131c\u0131n\u0131n dosya izinlerinden gelen okuma eri\u015fimini kendili\u011finden kald\u0131rmaz.<\/p>\n<pre><code>sudo exportfs -ra\nsudo exportfs -v<\/code><\/pre>\n<p><code>exportfs -ra<\/code> mevcut export yap\u0131land\u0131rmas\u0131n\u0131 yeniden uygular; bu nedenle \u00fcretimdeki di\u011fer sat\u0131rlar\u0131 de\u011fi\u015ftirmeden \u00f6nce etkisini inceleyin. \u00c7\u0131kt\u0131da yaln\u0131z ama\u00e7lanan istemci ve se\u00e7eneklerin etkin oldu\u011funu kontrol edin.<\/p>\n<h2>\u0130stemcide ba\u011flama ve kabul<\/h2>\n<pre><code>sudo apt-get install nfs-common\nsudo mkdir -m 0755 \/yerel_dizin\nsudo mount -t nfs -o ro 192.168.1.100:\/paylasim \/yerel_dizin<\/code><\/pre>\n<p>\u0130stemcideki <code>ro<\/code> se\u00e7ene\u011fi ek bir s\u0131n\u0131rd\u0131r; sunucu export kural\u0131n\u0131n yerine ge\u00e7mez. Ba\u011flant\u0131 kurulduktan sonra do\u011fru NFS s\u00fcr\u00fcm\u00fcn\u00fcn kullan\u0131ld\u0131\u011f\u0131n\u0131, dosya sahipli\u011fini ve izinli kullan\u0131c\u0131n\u0131n okuyabildi\u011fini do\u011frulay\u0131n. Ard\u0131ndan yazman\u0131n reddedildi\u011fini ve izin verilmeyen ayr\u0131 bir istemcinin payla\u015f\u0131m\u0131 ba\u011flayamad\u0131\u011f\u0131n\u0131 test edin.<\/p>\n<p>Uzak root ile yap\u0131lan i\u015flemin anonim kimli\u011fe nas\u0131l e\u015flendi\u011fini ayr\u0131ca kontrol edin. Anonim kimli\u011fin eri\u015fimini dosya izinleri belirler; \u201croot tamamen engellendi\u201d sonucunu yaln\u0131z se\u00e7enek ad\u0131na bakarak \u00e7\u0131karmay\u0131n. Kal\u0131c\u0131 mount yap\u0131land\u0131rmas\u0131na ge\u00e7meden \u00f6nce yeniden ba\u015flatma ve geri alma davran\u0131\u015f\u0131n\u0131 ayr\u0131 test edin.<\/p>\n<h2>Performans\u0131 g\u00fcvenlikten \u00f6d\u00fcn vermeden inceleyin<\/h2>\n<p>Sunucu diski, a\u011f gecikmesi, uygulaman\u0131n k\u00fc\u00e7\u00fck\/b\u00fcy\u00fck dosya davran\u0131\u015f\u0131 ve e\u015fzamanl\u0131 istemci say\u0131s\u0131 sonucu etkiler. <code>async<\/code>, b\u00fcy\u00fck tamponlar veya farkl\u0131 cache ayarlar\u0131n\u0131 evrensel h\u0131z \u00f6nerisi olarak uygulamay\u0131n; tutarl\u0131l\u0131k ve hata an\u0131ndaki veri davran\u0131\u015f\u0131n\u0131 anlamadan de\u011fi\u015ftirmeyin. G\u00fcnl\u00fckler, I\/O bekleme ve a\u011f saya\u00e7lar\u0131n\u0131 temsili i\u015f y\u00fck\u00fcyle birlikte g\u00f6zlemleyin.<\/p>\n<h2>S\u0131k sorulan sorular<\/h2>\n<dl>\n<dt><strong>root_squash b\u00fct\u00fcn uzak root eri\u015fimini keser mi?<\/strong><\/dt>\n<dd>\n<p>Hay\u0131r. Uzak root anonim kimli\u011fe e\u015flenir. Bu kimlik, sunucudaki dosya ve dizin izinlerinin verdi\u011fi eri\u015fime sahip olabilir.<\/p>\n<\/dd>\n<dt><strong>Sadece istemcide ro se\u00e7mek yeterli midir?<\/strong><\/dt>\n<dd>\n<p>Sunucu politikas\u0131n\u0131 garanti etmez. Salt okunur kapsam\u0131 export taraf\u0131nda tan\u0131mlay\u0131p izinli ve izinsiz istemcilerle ayr\u0131ca do\u011frulay\u0131n.<\/p>\n<\/dd>\n<\/dl>\n<h2>Sonraki ad\u0131m<\/h2>\n<p>Payla\u015f\u0131m\u0131n alt\u0131nda \u00e7al\u0131\u015fan depolamay\u0131 <a href=\"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/depolama\/zfs-nedir-lvmden-farki-nedir\/\">ZFS\/LVM katmanlar\u0131<\/a> ve eri\u015fim s\u0131n\u0131r\u0131n\u0131 <a href=\"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/networking\/vpc-sanal-ozel-bulut-nedir\/\">VPC planlamas\u0131<\/a> ile birlikte inceleyin.<\/p>\n<h2>Kaynaklar<\/h2>\n<ol>\n<li><a href=\"https:\/\/ubuntu.com\/server\/docs\/how-to\/networking\/install-nfs\/\" rel=\"noopener\" target=\"_blank\">Network File System (NFS) &#8211; Ubuntu Server documentation<\/a><\/li>\n<li><a href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/rw\/nfs-utils.git\/plain\/utils\/exportfs\/exports.man\" rel=\"noopener\" target=\"_blank\">nfs-utils \u2014 exports(5) kaynak belgesi<\/a><\/li>\n<li><a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/exportfs.8.html\" rel=\"noopener\" target=\"_blank\">nfs-utils \u2014 exportfs(8) ba\u015fvurusu<\/a><\/li>\n<li><a href=\"https:\/\/man7.org\/linux\/man-pages\/man5\/nfs.5.html\" rel=\"noopener\" target=\"_blank\">NFS istemci ba\u011flama se\u00e7enekleri \u2014 nfs(5)<\/a><\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>NFS (Network File System), bir sunucudaki dosya sisteminin istemciler taraf\u0131ndan a\u011f \u00fczerinden kullan\u0131lmas\u0131n\u0131 sa\u011flayan bir protokold\u00fcr. Payla\u015f\u0131m\u0131n ba\u011flanmas\u0131 tek ba\u015f\u0131na g\u00fcvenli oldu\u011fu anlam\u0131na gelmez: export kapsam\u0131, istemci kimli\u011fi, dosya izinleri ve kullan\u0131lan NFS s\u00fcr\u00fcm\u00fc birlikte de\u011ferlendirilmelidir. Export izni, dosya izinlerini devre d\u0131\u015f\u0131 b\u0131rakmaz.G\u00f6rseli b\u00fcy\u00fct \u2192 S\u00fcr\u00fcm ve kimlik modelini belirleyin NFSv3 ile NFSv4 ailesinin port, [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":1436,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32,33,29,34,30],"tags":[161,166,168,165,167],"class_list":["post-932","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-depolama","category-blok-depolama","category-linux","category-nesne-depolama","category-networking","tag-bulut-depolama","tag-depolama","tag-linux","tag-nfs","tag-windows"],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/932","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/comments?post=932"}],"version-history":[{"count":2,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/932\/revisions"}],"predecessor-version":[{"id":934,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/932\/revisions\/934"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media\/1436"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media?parent=932"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/categories?post=932"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/tags?post=932"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}