{"id":2272,"date":"2025-11-21T19:15:16","date_gmt":"2025-11-21T16:15:16","guid":{"rendered":"https:\/\/www.dchost.com\/blog\/vps-sunucunuzda-ipv6-kurulum-ve-yapilandirma-rehberi\/"},"modified":"2025-11-21T19:15:16","modified_gmt":"2025-11-21T16:15:16","slug":"vps-sunucunuzda-ipv6-kurulum-ve-yapilandirma-rehberi","status":"publish","type":"post","link":"https:\/\/www.dchost.com\/blog\/vps-sunucunuzda-ipv6-kurulum-ve-yapilandirma-rehberi\/","title":{"rendered":"VPS Sunucunuzda IPv6 Kurulum ve Yap\u0131land\u0131rma Rehberi"},"content":{"rendered":"<div class=\"dchost-blog-content-wrapper\"><div id=\"toc_container\" class=\"toc_transparent no_bullets\"><p class=\"toc_title\">\u0130&ccedil;indekiler<\/p><ul class=\"toc_list\"><li><a href=\"#IPv6yi_VPSinize_Tasimak_Neden_Artik_Ertelenmemeli\"><span class=\"toc_number toc_depth_1\">1<\/span> IPv6\u2019y\u0131 VPS\u2019inize Ta\u015f\u0131mak Neden Art\u0131k Ertelenmemeli?<\/a><\/li><li><a href=\"#IPv6nin_Arka_Plani_Neden_Simdi\"><span class=\"toc_number toc_depth_1\">2<\/span> IPv6\u2019n\u0131n Arka Plan\u0131: Neden \u015eimdi?<\/a><\/li><li><a href=\"#VPSinizde_IPv6ya_Baslamadan_Once_Bilmeniz_Gereken_Temeller\"><span class=\"toc_number toc_depth_1\">3<\/span> VPS\u2019inizde IPv6\u2019ya Ba\u015flamadan \u00d6nce Bilmeniz Gereken Temeller<\/a><ul><li><a href=\"#IPv6_adres_turleri_kisaca\"><span class=\"toc_number toc_depth_2\">3.1<\/span> IPv6 adres t\u00fcrleri (k\u0131saca)<\/a><\/li><li><a href=\"#Prefix_ve_ag_maskesi\"><span class=\"toc_number toc_depth_2\">3.2<\/span> Prefix ve a\u011f maskesi<\/a><\/li><\/ul><\/li><li><a href=\"#Adim_1_DCHost_Panelinde_IPv6_Bilgilerinizi_Kontrol_Edin\"><span class=\"toc_number toc_depth_1\">4<\/span> Ad\u0131m 1: DCHost Panelinde IPv6 Bilgilerinizi Kontrol Edin<\/a><\/li><li><a href=\"#Adim_2_VPS_Uzerinde_IPv6_Destegini_Dogrulayin\"><span class=\"toc_number toc_depth_1\">5<\/span> Ad\u0131m 2: VPS \u00dczerinde IPv6 Deste\u011fini Do\u011frulay\u0131n<\/a><ul><li><a href=\"#IPv6_modulu_yuklu_mu\"><span class=\"toc_number toc_depth_2\">5.1<\/span> IPv6 mod\u00fcl\u00fc y\u00fckl\u00fc m\u00fc?<\/a><\/li><li><a href=\"#sysctl_ile_IPv6nin_devrede_oldugundan_emin_olun\"><span class=\"toc_number toc_depth_2\">5.2<\/span> sysctl ile IPv6\u2019n\u0131n devrede oldu\u011fundan emin olun<\/a><\/li><\/ul><\/li><li><a href=\"#Adim_3_Ag_Arayuzune_IPv6_Adresini_Tanimlama\"><span class=\"toc_number toc_depth_1\">6<\/span> Ad\u0131m 3: A\u011f Aray\u00fcz\u00fcne IPv6 Adresini Tan\u0131mlama<\/a><ul><li><a href=\"#Ubuntu_2004_Netplan_ile_IPv6_yapilandirmasi\"><span class=\"toc_number toc_depth_2\">6.1<\/span> Ubuntu 20.04+ (Netplan ile IPv6 yap\u0131land\u0131rmas\u0131)<\/a><\/li><li><a href=\"#Debian_Eski_Ubuntu_interfaces_ile_IPv6_yapilandirmasi\"><span class=\"toc_number toc_depth_2\">6.2<\/span> Debian \/ Eski Ubuntu (interfaces ile IPv6 yap\u0131land\u0131rmas\u0131)<\/a><\/li><li><a href=\"#RHEL_AlmaLinux_CentOS_ailesi\"><span class=\"toc_number toc_depth_2\">6.3<\/span> RHEL \/ AlmaLinux \/ CentOS ailesi<\/a><\/li><\/ul><\/li><li><a href=\"#Adim_4_IPv6_Baglantisini_Test_Etme\"><span class=\"toc_number toc_depth_1\">7<\/span> Ad\u0131m 4: IPv6 Ba\u011flant\u0131s\u0131n\u0131 Test Etme<\/a><ul><li><a href=\"#Arayuzde_IPv6_adresini_goruyor_musunuz\"><span class=\"toc_number toc_depth_2\">7.1<\/span> Aray\u00fczde IPv6 adresini g\u00f6r\u00fcyor musunuz?<\/a><\/li><li><a href=\"#Gatewaye_ping_atin\"><span class=\"toc_number toc_depth_2\">7.2<\/span> Gateway\u2019e ping at\u0131n<\/a><\/li><li><a href=\"#Internete_IPv6_ile_cikis_var_mi\"><span class=\"toc_number toc_depth_2\">7.3<\/span> Internet\u2019e IPv6 ile \u00e7\u0131k\u0131\u015f var m\u0131?<\/a><\/li><\/ul><\/li><li><a href=\"#Adim_5_Guvenlik_Duvarini_IPv6ya_Gore_Duzenlemek\"><span class=\"toc_number toc_depth_1\">8<\/span> Ad\u0131m 5: G\u00fcvenlik Duvar\u0131n\u0131 IPv6\u2019ya G\u00f6re D\u00fczenlemek<\/a><ul><li><a href=\"#UFW_kullaniyorsaniz_IPv6yi_acmayi_unutmayin\"><span class=\"toc_number toc_depth_2\">8.1<\/span> UFW kullan\u0131yorsan\u0131z IPv6\u2019y\u0131 a\u00e7may\u0131 unutmay\u0131n<\/a><\/li><li><a href=\"#nftables_ile_IPv6_kurallari\"><span class=\"toc_number toc_depth_2\">8.2<\/span> nftables ile IPv6 kurallar\u0131<\/a><\/li><\/ul><\/li><li><a href=\"#Adim_6_Web_Sunucusunu_IPv6da_Dinleyecek_Sekilde_Ayarlamak\"><span class=\"toc_number toc_depth_1\">9<\/span> Ad\u0131m 6: Web Sunucusunu IPv6\u2019da Dinleyecek \u015eekilde Ayarlamak<\/a><ul><li><a href=\"#Nginxte_IPv6_dinlemesi\"><span class=\"toc_number toc_depth_2\">9.1<\/span> Nginx\u2019te IPv6 dinlemesi<\/a><\/li><li><a href=\"#Apachede_IPv6_dinlemesi\"><span class=\"toc_number toc_depth_2\">9.2<\/span> Apache\u2019de IPv6 dinlemesi<\/a><\/li><\/ul><\/li><li><a href=\"#Adim_7_DNSte_AAAA_Kayitlarini_Olusturmak\"><span class=\"toc_number toc_depth_1\">10<\/span> Ad\u0131m 7: DNS\u2019te AAAA Kay\u0131tlar\u0131n\u0131 Olu\u015fturmak<\/a><ul><li><a href=\"#A_ve_AAAA_kayitlarinin_farki\"><span class=\"toc_number toc_depth_2\">10.1<\/span> A ve AAAA kay\u0131tlar\u0131n\u0131n fark\u0131<\/a><\/li><li><a href=\"#Temel_bir_AAAA_kaydi_ornegi\"><span class=\"toc_number toc_depth_2\">10.2<\/span> Temel bir AAAA kayd\u0131 \u00f6rne\u011fi<\/a><\/li><\/ul><\/li><li><a href=\"#IPv6_ile_E-posta_Izleme_ve_Diger_Servisler\"><span class=\"toc_number toc_depth_1\">11<\/span> IPv6 ile E-posta, \u0130zleme ve Di\u011fer Servisler<\/a><ul><li><a href=\"#E-posta_sunucusu_ve_IPv6\"><span class=\"toc_number toc_depth_2\">11.1<\/span> E-posta sunucusu ve IPv6<\/a><\/li><li><a href=\"#Monitoring_ve_log_toplama\"><span class=\"toc_number toc_depth_2\">11.2<\/span> Monitoring ve log toplama<\/a><\/li><\/ul><\/li><li><a href=\"#IPv6-Only_VPS_Senaryolari_ve_NAT64DNS64\"><span class=\"toc_number toc_depth_1\">12<\/span> IPv6-Only VPS Senaryolar\u0131 ve NAT64\/DNS64<\/a><\/li><li><a href=\"#Yaygin_Hatalar_ve_Sorun_Giderme_Ipuclari\"><span class=\"toc_number toc_depth_1\">13<\/span> Yayg\u0131n Hatalar ve Sorun Giderme \u0130pu\u00e7lar\u0131<\/a><ul><li><a href=\"#1_IPv6_adresi_var_ping_yok\"><span class=\"toc_number toc_depth_2\">13.1<\/span> 1. IPv6 adresi var, ping yok<\/a><\/li><li><a href=\"#2_IPv6_calisiyor_ama_site_disaridan_acilmiyor\"><span class=\"toc_number toc_depth_2\">13.2<\/span> 2. IPv6 \u00e7al\u0131\u015f\u0131yor ama site d\u0131\u015far\u0131dan a\u00e7\u0131lm\u0131yor<\/a><\/li><li><a href=\"#3_Sadece_bazi_kullanicilarda_sorun_var\"><span class=\"toc_number toc_depth_2\">13.3<\/span> 3. Sadece baz\u0131 kullan\u0131c\u0131larda sorun var<\/a><\/li><\/ul><\/li><li><a href=\"#Guvenlik_Perspektifinden_IPv6\"><span class=\"toc_number toc_depth_1\">14<\/span> G\u00fcvenlik Perspektifinden IPv6<\/a><\/li><li><a href=\"#Sonuc_DCHost_ile_IPv6ya_Gecisi_Bugun_Baslatin\"><span class=\"toc_number toc_depth_1\">15<\/span> Sonu\u00e7: DCHost ile IPv6\u2019ya Ge\u00e7i\u015fi Bug\u00fcn Ba\u015flat\u0131n<\/a><\/li><\/ul><\/div>\n<h2><span id=\"IPv6yi_VPSinize_Tasimak_Neden_Artik_Ertelenmemeli\">IPv6\u2019y\u0131 <a href=\"https:\/\/www.dchost.com\/tr\/vps\">VPS<\/a>\u2019inize Ta\u015f\u0131mak Neden Art\u0131k Ertelenmemeli?<\/span><\/h2>\n<p>VPS sunucunuz h\u00e2l\u00e2 yaln\u0131zca IPv4 ile mi \u00e7al\u0131\u015f\u0131yor? Bug\u00fcn bir\u00e7ok a\u011f mimarisi ve kapasite planlama toplant\u0131s\u0131nda, masaya ilk gelen konulardan biri art\u0131k IPv6 ge\u00e7i\u015fi. IPv4 adreslerinin t\u00fckenmesi, fiyatlar\u0131n y\u00fckselmesi ve mobil operat\u00f6rler ile b\u00fcy\u00fck ISS\u2019lerin giderek artan \u015fekilde IPv6\u2019y\u0131 varsay\u0131lan h\u00e2le getirmesi, uygulamalar\u0131n\u0131z\u0131 bu yeni d\u00fcnyaya uyumlu h\u00e2le getirmenizi zorunlu k\u0131l\u0131yor. \u00d6zellikle gelece\u011fe d\u00f6n\u00fck projelerde, sadece sunucunun bug\u00fcn \u00e7al\u0131\u015fmas\u0131 de\u011fil, 2\u20133 y\u0131l sonra da ek masraf ve karma\u015f\u0131k ge\u00e7i\u015fler olmadan ayakta kalmas\u0131 \u00f6nemli.<\/p>\n<p>Biz DCHost olarak altyap\u0131m\u0131z\u0131 y\u0131llard\u0131r \u00e7ift y\u0131\u011f\u0131n (IPv4 + IPv6) mant\u0131\u011f\u0131yla tasarl\u0131yoruz ve m\u00fc\u015fterilerimizin projelerini ad\u0131m ad\u0131m IPv6\u2019ya ta\u015f\u0131yoruz. Bu rehberde, <strong>VPS sunucunuzda IPv6 kurulumunu ve yap\u0131land\u0131rmas\u0131n\u0131 u\u00e7tan uca<\/strong> ele alaca\u011f\u0131z: sa\u011flay\u0131c\u0131 taraf\u0131nda IPv6 al\u0131m\u0131ndan, i\u015fletim sistemi a\u011f ayarlar\u0131na, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131ndan DNS AAAA kay\u0131tlar\u0131na ve web sunucusu ayarlar\u0131na kadar. Ger\u00e7ek sahada ya\u015fad\u0131\u011f\u0131m\u0131z senaryolardan yola \u00e7\u0131karak, sizi teoride bo\u011fmadan pratik komutlar, \u00f6rnek konfig\u00fcrasyonlar ve yayg\u0131n hatalardan ka\u00e7\u0131nma ipu\u00e7lar\u0131yla donataca\u011f\u0131z. Yaz\u0131n\u0131n sonunda, yeni bir VPS\u2019i IPv6 ile aya\u011fa kald\u0131rabilecek, mevcut sunucunuzu da g\u00fcvenle dual-stack h\u00e2line getirebileceksiniz.<\/p>\n<h2><span id=\"IPv6nin_Arka_Plani_Neden_Simdi\">IPv6\u2019n\u0131n Arka Plan\u0131: Neden \u015eimdi?<\/span><\/h2>\n<p>IPv6\u2019y\u0131 konfig\u00fcre etmeye ba\u015flamadan \u00f6nce, neden bu kadar kritik h\u00e2le geldi\u011fini netle\u015ftirmek faydal\u0131. IPv4 adreslerinin k\u00fcresel \u00f6l\u00e7ekte h\u0131zla t\u00fckendi\u011fini ve fiyatlar\u0131n rekor seviyelere \u00e7\u0131kt\u0131\u011f\u0131n\u0131 detayl\u0131ca anlatt\u0131\u011f\u0131m\u0131z <a href=\"https:\/\/www.dchost.com\/blog\/ipv4-adres-fiyatlari-rekor-seviyelere-ulasti\/\">IPv4 adres fiyatlar\u0131n\u0131n rekor seviyelere ula\u015fmas\u0131<\/a> yaz\u0131m\u0131zda da vurgulad\u0131\u011f\u0131m\u0131z gibi, yeni adres bulmak her ge\u00e7en g\u00fcn daha zor ve pahal\u0131.<\/p>\n<p>Di\u011fer tarafta, <a href=\"https:\/\/www.dchost.com\/blog\/ipv6-benimseme-oranlari-artiyor-peki-bu-dalga-ne-zaman-sizin-aga-carpar\/\">IPv6 benimseme oranlar\u0131n\u0131n art\u0131\u015f\u0131<\/a> art\u0131k sadece teorik bir istatistik de\u011fil; ger\u00e7ek kullan\u0131c\u0131 trafi\u011finin \u00f6nemli bir k\u0131sm\u0131 do\u011frudan IPv6 \u00fczerinden geliyor. B\u00fcy\u00fck mobil operat\u00f6rler, kurumsal a\u011flar ve CDN\u2019ler IPv6\u2019y\u0131 agresif \u015fekilde yayg\u0131nla\u015ft\u0131r\u0131yor. Bu tablo, \u015fu \u00fc\u00e7 sonucu do\u011furuyor:<\/p>\n<ul>\n<li><strong>Maliyet bask\u0131s\u0131:<\/strong> IPv4 i\u00e7in ek IP bloklar\u0131 almak giderek daha pahal\u0131.<\/li>\n<li><strong>Eri\u015filebilirlik:<\/strong> IPv6 a\u011f\u0131 a\u011f\u0131r basan b\u00f6lgelerde, sadece IPv4 ile kalmak kullan\u0131c\u0131 deneyimini olumsuz etkileyebiliyor.<\/li>\n<li><strong>Gelecek uyumlulu\u011fu:<\/strong> Yeni protokol ve g\u00fcvenlik standartlar\u0131n\u0131n \u00f6nemli k\u0131sm\u0131 IPv6\u2019y\u0131 merkeze al\u0131yor.<\/li>\n<\/ul>\n<p>IPv6\u2019y\u0131 kavramsal olarak daha detayl\u0131 anlamak isterseniz, temel konseptleri giri\u015f seviyesinde anlatt\u0131\u011f\u0131m\u0131z <a href=\"https:\/\/www.dchost.com\/blog\/ipv6-sunucu-nedir\/\">IPv6 sunucu nedir?<\/a> yaz\u0131s\u0131na da g\u00f6z atabilirsiniz. Bu rehberde ise do\u011frudan prati\u011fe, yani VPS d\u00fczeyinde kurulum ve yap\u0131land\u0131rmaya odaklanaca\u011f\u0131z.<\/p>\n<h2><span id=\"VPSinizde_IPv6ya_Baslamadan_Once_Bilmeniz_Gereken_Temeller\">VPS\u2019inizde IPv6\u2019ya Ba\u015flamadan \u00d6nce Bilmeniz Gereken Temeller<\/span><\/h2>\n<p>Yap\u0131land\u0131rmaya ge\u00e7meden \u00f6nce, IPv6 adres t\u00fcrleri ve temel kavramlar\u0131 k\u0131saca hat\u0131rlayal\u0131m. Bu b\u00f6l\u00fcm, \u00f6zellikle konfig\u00fcrasyon dosyalar\u0131nda hangi de\u011ferin ne anlama geldi\u011fini akl\u0131n\u0131zda tutman\u0131z i\u00e7in \u00f6nemli.<\/p>\n<h3><span id=\"IPv6_adres_turleri_kisaca\">IPv6 adres t\u00fcrleri (k\u0131saca)<\/span><\/h3>\n<ul>\n<li><strong>Global Unicast (GUA):<\/strong> \u0130nternette y\u00f6nlendirilebilir, herkese a\u00e7\u0131k IPv6 adresleridir. VPS\u2019inize DCHost panelinden atanan adres genellikle bu t\u00fcrdedir (\u00f6rnek: <code>2001:db8:1234:5678::10<\/code>).<\/li>\n<li><strong>Link-local:<\/strong> Tek bir Layer 2 a\u011f \u00fczerinde (\u00f6rne\u011fin ayn\u0131 host \u00fczerindeki sanal aray\u00fczler) kullan\u0131lan, otomatik \u00fcretilen adreslerdir (\u00f6rnek: <code>fe80::\/64<\/code>). Varsay\u0131lan gateway \u00e7o\u011fu zaman bu adres tipindedir.<\/li>\n<li><strong>ULA (Unique Local Address):<\/strong> \u00d6zel, yerel IPv6 adresleri (IPv4\u2019teki 10.0.0.0\/8 mant\u0131\u011f\u0131na benzer). Genellikle dahili a\u011flar ve VPN\u2019lerde kullan\u0131l\u0131r.<\/li>\n<\/ul>\n<h3><span id=\"Prefix_ve_ag_maskesi\">Prefix ve a\u011f maskesi<\/span><\/h3>\n<p>IPv6\u2019da <code>\/64<\/code>, <code>\/56<\/code> gibi prefix de\u011ferleri g\u00f6receksiniz. \u00d6rne\u011fin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">2001:db8:1234:5678::\/64\n<\/code><\/pre>\n<p>Bu ifade, ilk 64 bit\u2019in a\u011f k\u0131sm\u0131 oldu\u011fu bir blo\u011fu ifade eder. \u00c7o\u011fu VPS senaryosunda size tek bir <code>\/64<\/code> veya bazen birka\u00e7 IP\u2019den olu\u015fan daha dar bir blok verilir. DCHost taraf\u0131nda panelinizde g\u00f6rd\u00fc\u011f\u00fcn\u00fcz <code>IPv6 Prefix<\/code> ve <code>IPv6 Gateway<\/code> alanlar\u0131, birazdan d\u00fczenleyece\u011fimiz konfig\u00fcrasyon dosyalar\u0131n\u0131n en kritik girdileridir.<\/p>\n<h2><span id=\"Adim_1_DCHost_Panelinde_IPv6_Bilgilerinizi_Kontrol_Edin\">Ad\u0131m 1: DCHost Panelinde IPv6 Bilgilerinizi Kontrol Edin<\/span><\/h2>\n<p>\u0130lk ad\u0131m, VPS\u2019inize ger\u00e7ekten IPv6 atanm\u0131\u015f oldu\u011fundan emin olmak. DCHost m\u00fc\u015fteri panelinizde VPS detay sayfas\u0131na girdi\u011finizde, genellikle \u015fu bilgileri g\u00f6r\u00fcrs\u00fcn\u00fcz:<\/p>\n<ul>\n<li><strong>IPv6 Adresi:<\/strong> \u00d6rne\u011fin <code>2001:db8:1234:5678::10<\/code><\/li>\n<li><strong>Prefix:<\/strong> \u00c7o\u011funlukla <code>\/64<\/code><\/li>\n<li><strong>IPv6 Gateway:<\/strong> \u00d6rne\u011fin <code>fe80::1<\/code> gibi bir link-local adres<\/li>\n<\/ul>\n<p>E\u011fer burada IPv6 bilgisi g\u00f6rm\u00fcyorsan\u0131z, destek talebi a\u00e7arak IPv6 talep edebilirsiniz. Bir\u00e7ok senaryoda, DCHost VPS paketlerinde IPv6 deste\u011fini varsay\u0131lan olarak sunuyoruz; sadece konfig\u00fcrasyonu i\u015fletim sistemine yans\u0131tman\u0131z gerekiyor.<\/p>\n<h2><span id=\"Adim_2_VPS_Uzerinde_IPv6_Destegini_Dogrulayin\">Ad\u0131m 2: VPS \u00dczerinde IPv6 Deste\u011fini Do\u011frulay\u0131n<\/span><\/h2>\n<p>Sunucunuza SSH ile ba\u011fland\u0131ktan sonra, \u00f6nce \u00e7ekirdek ve a\u011f y\u0131\u011f\u0131n\u0131 taraf\u0131nda IPv6\u2019n\u0131n devrede olup olmad\u0131\u011f\u0131n\u0131 kontrol edelim.<\/p>\n<h3><span id=\"IPv6_modulu_yuklu_mu\">IPv6 mod\u00fcl\u00fc y\u00fckl\u00fc m\u00fc?<\/span><\/h3>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">lsmod | grep ipv6\n<\/code><\/pre>\n<p>Herhangi bir \u00e7\u0131kt\u0131 geliyorsa, IPv6 \u00e7ekirdek mod\u00fcl\u00fc y\u00fckl\u00fcd\u00fcr. \u00c7\u0131km\u0131yorsa, \u00e7o\u011fu modern Linux da\u011f\u0131t\u0131m\u0131nda yine de IPv6 etkin gelir; as\u0131l belirleyici <code>sysctl<\/code> ayarlar\u0131d\u0131r.<\/p>\n<h3><span id=\"sysctl_ile_IPv6nin_devrede_oldugundan_emin_olun\">sysctl ile IPv6\u2019n\u0131n devrede oldu\u011fundan emin olun<\/span><\/h3>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sysctl net.ipv6.conf.all.disable_ipv6\n<\/code><\/pre>\n<p>E\u011fer sonu\u00e7 <code>net.ipv6.conf.all.disable_ipv6 = 0<\/code> ise sorun yok. 1 g\u00f6r\u00fcrseniz, IPv6 devre d\u0131\u015f\u0131d\u0131r. Ge\u00e7ici olarak etkinle\u015ftirmek i\u00e7in:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo sysctl -w net.ipv6.conf.all.disable_ipv6=0\nsudo sysctl -w net.ipv6.conf.default.disable_ipv6=0\n<\/code><\/pre>\n<p>Kal\u0131c\u0131 yapmak i\u00e7in ise <code>\/etc\/sysctl.conf<\/code> veya da\u011f\u0131t\u0131ma g\u00f6re <code>\/etc\/sysctl.d\/99-sysctl.conf<\/code> dosyas\u0131na \u015fu sat\u0131rlar\u0131 ekleyin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">net.ipv6.conf.all.disable_ipv6 = 0\nnet.ipv6.conf.default.disable_ipv6 = 0\n<\/code><\/pre>\n<p>Ard\u0131ndan:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo sysctl -p\n<\/code><\/pre>\n<h2><span id=\"Adim_3_Ag_Arayuzune_IPv6_Adresini_Tanimlama\">Ad\u0131m 3: A\u011f Aray\u00fcz\u00fcne IPv6 Adresini Tan\u0131mlama<\/span><\/h2>\n<p>Burada da\u011f\u0131t\u0131ma g\u00f6re iki ana senaryoya bakaca\u011f\u0131z: <strong>Ubuntu\/Debian (netplan veya interfaces)<\/strong> ve <strong>RHEL\/AlmaLinux t\u00fcrevleri<\/strong>. \u00d6rneklerde \u015fu bilgileri varsayal\u0131m:<\/p>\n<ul>\n<li>IPv6 adresiniz: <code>2001:db8:1234:5678::10<\/code><\/li>\n<li>Prefix: <code>\/64<\/code><\/li>\n<li>Gateway: <code>fe80::1<\/code><\/li>\n<li>A\u011f aray\u00fcz\u00fc ad\u0131: <code>eth0<\/code> (baz\u0131 sistemlerde <code>ens3<\/code>, <code>ens18<\/code> vb. olabilir, <code>ip a<\/code> ile bak\u0131n)<\/li>\n<\/ul>\n<h3><span id=\"Ubuntu_2004_Netplan_ile_IPv6_yapilandirmasi\">Ubuntu 20.04+ (Netplan ile IPv6 yap\u0131land\u0131rmas\u0131)<\/span><\/h3>\n<p>Ubuntu\u2019nun yeni s\u00fcr\u00fcmlerinde a\u011f ayarlar\u0131 netplan \u00fczerinden y\u00f6netilir. Konfig\u00fcrasyon dosyas\u0131 genellikle <code>\/etc\/netplan\/01-netcfg.yaml<\/code> veya benzeri isimdedir.<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo nano \/etc\/netplan\/01-netcfg.yaml\n<\/code><\/pre>\n<p>\u00d6rnek bir yap\u0131land\u0131rma:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">network:\n  version: 2\n  renderer: networkd\n  ethernets:\n    eth0:\n      dhcp4: yes\n      dhcp6: no\n      addresses:\n        - 2001:db8:1234:5678::10\/64\n      gateway6: fe80::1\n      nameservers:\n        addresses:\n          - 2001:4860:4860::8888\n          - 2001:4860:4860::8844\n<\/code><\/pre>\n<p>Burada \u00f6nemli noktalar:<\/p>\n<ul>\n<li><code>dhcp6: no<\/code> ile statik IPv6 kullan\u0131yoruz (\u00e7o\u011fu VPS senaryosunda budur).<\/li>\n<li><code>addresses<\/code> alt\u0131nda IPv6 adresinizi ve prefix\u2019inizi yaz\u0131yorsunuz.<\/li>\n<li><code>gateway6<\/code> alan\u0131na panelde g\u00f6rd\u00fc\u011f\u00fcn\u00fcz IPv6 gateway\u2019i yaz\u0131yorsunuz (\u00e7o\u011fu zaman link-local).<\/li>\n<\/ul>\n<p>Dosyay\u0131 kaydedip \u00e7\u0131k\u0131n, ard\u0131ndan yap\u0131land\u0131rmay\u0131 uygulay\u0131n:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo netplan apply\n<\/code><\/pre>\n<p>E\u011fer SSH \u00fczerinden ba\u011fl\u0131ysan\u0131z, olas\u0131 bir konfig\u00fcrasyon hatas\u0131 durumunda ba\u011flant\u0131 kopabilir. Bu y\u00fczden uzak ba\u011flant\u0131larda <code>sudo netplan try<\/code> komutunu kullan\u0131p, onay s\u00fcresi dolmadan hatal\u0131 ayar\u0131 geri alabilece\u011finizi unutmay\u0131n.<\/p>\n<h3><span id=\"Debian_Eski_Ubuntu_interfaces_ile_IPv6_yapilandirmasi\">Debian \/ Eski Ubuntu (interfaces ile IPv6 yap\u0131land\u0131rmas\u0131)<\/span><\/h3>\n<p>Daha klasik kurulumlarda <code>\/etc\/network\/interfaces<\/code> dosyas\u0131 devrededir.<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo nano \/etc\/network\/interfaces\n<\/code><\/pre>\n<p>\u00d6rnek konfig\u00fcrasyon:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">auto eth0\niface eth0 inet dhcp\n\niface eth0 inet6 static\n    address 2001:db8:1234:5678::10\n    netmask 64\n    gateway fe80::1\n<\/code><\/pre>\n<p>Ard\u0131ndan a\u011f servisini yeniden ba\u015flat\u0131n:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo systemctl restart networking\n<\/code><\/pre>\n<p>Ya da da\u011f\u0131t\u0131ma g\u00f6re:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo service networking restart\n<\/code><\/pre>\n<h3><span id=\"RHEL_AlmaLinux_CentOS_ailesi\">RHEL \/ AlmaLinux \/ CentOS ailesi<\/span><\/h3>\n<p>Bu ailede geleneksel olarak <code>\/etc\/sysconfig\/network-scripts\/ifcfg-eth0<\/code> dosyas\u0131 kullan\u0131l\u0131r, ancak modern s\u00fcr\u00fcmlerde NetworkManager ve <code>nmcli<\/code> a\u011f\u0131rl\u0131ktad\u0131r. Klasik dosya tabanl\u0131 \u00f6rnek \u00fczerinden gidelim:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo nano \/etc\/sysconfig\/network-scripts\/ifcfg-eth0\n<\/code><\/pre>\n<p>\u0130\u00e7erik \u00f6rne\u011fi:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">DEVICE=eth0\nBOOTPROTO=dhcp\nONBOOT=yes\n\nIPV6INIT=yes\nIPV6_AUTOCONF=no\nIPV6ADDR=2001:db8:1234:5678::10\/64\nIPV6_DEFAULTGW=fe80::1\n<\/code><\/pre>\n<p>Kaydedip \u00e7\u0131kt\u0131ktan sonra:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo systemctl restart network\n<\/code><\/pre>\n<h2><span id=\"Adim_4_IPv6_Baglantisini_Test_Etme\">Ad\u0131m 4: IPv6 Ba\u011flant\u0131s\u0131n\u0131 Test Etme<\/span><\/h2>\n<p>Konfig\u00fcrasyonlar\u0131 uygulad\u0131ktan sonra, IPv6\u2019n\u0131n ger\u00e7ekten \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulayal\u0131m.<\/p>\n<h3><span id=\"Arayuzde_IPv6_adresini_goruyor_musunuz\">Aray\u00fczde IPv6 adresini g\u00f6r\u00fcyor musunuz?<\/span><\/h3>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ip -6 addr show dev eth0\n<\/code><\/pre>\n<p>\u00c7\u0131kt\u0131da global IPv6 adresinizi (\u00f6rne\u011fin <code>2001:db8:1234:5678::10<\/code>) g\u00f6rmelisiniz. Sadece <code>fe80::<\/code> ile ba\u015flayan link-local adresler g\u00f6r\u00fcyorsan\u0131z, statik adres ekleme k\u0131sm\u0131nda hata yapm\u0131\u015f olabilirsiniz.<\/p>\n<h3><span id=\"Gatewaye_ping_atin\">Gateway\u2019e ping at\u0131n<\/span><\/h3>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ping6 -c 4 fe80::1%eth0\n<\/code><\/pre>\n<p>Baz\u0131 sistemlerde link-local gateway\u2019e ping atarken aray\u00fcz\u00fc <code>%eth0<\/code> ekleyerek belirtmeniz gerekir.<\/p>\n<h3><span id=\"Internete_IPv6_ile_cikis_var_mi\">Internet\u2019e IPv6 ile \u00e7\u0131k\u0131\u015f var m\u0131?<\/span><\/h3>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ping6 -c 4 2606:4700:4700::1111\nping6 -c 4 2001:4860:4860::8888\n<\/code><\/pre>\n<p>Ve alan ad\u0131 \u00fczerinden test:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ping6 -c 4 ipv6.google.com\n<\/code><\/pre>\n<p>Ayr\u0131ca d\u0131\u015far\u0131dan hangi IP ile \u00e7\u0131kt\u0131\u011f\u0131n\u0131z\u0131 g\u00f6rmek i\u00e7in:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">curl -6 https:\/\/ifconfig.io\n<\/code><\/pre>\n<p>Bu komut size IPv6 \u00e7\u0131k\u0131\u015f adresinizi g\u00f6sterecektir.<\/p>\n<h2><span id=\"Adim_5_Guvenlik_Duvarini_IPv6ya_Gore_Duzenlemek\">Ad\u0131m 5: G\u00fcvenlik Duvar\u0131n\u0131 IPv6\u2019ya G\u00f6re D\u00fczenlemek<\/span><\/h2>\n<p>Bir\u00e7ok kullan\u0131c\u0131 IPv6 adresini ba\u015far\u0131yla ekledikten sonra \u201cba\u011flant\u0131 var ama d\u0131\u015far\u0131dan siteye eri\u015filmiyor\u201d sorunuyla kar\u015f\u0131la\u015f\u0131yor. \u00c7o\u011fu zaman sebep, g\u00fcvenlik duvar\u0131n\u0131n IPv6 trafi\u011fini engellemesi oluyor. IPv4 i\u00e7in yazd\u0131\u011f\u0131n\u0131z kurallar, otomatik olarak IPv6\u2019ya uygulanmaz.<\/p>\n<h3><span id=\"UFW_kullaniyorsaniz_IPv6yi_acmayi_unutmayin\">UFW kullan\u0131yorsan\u0131z IPv6\u2019y\u0131 a\u00e7may\u0131 unutmay\u0131n<\/span><\/h3>\n<p>Ubuntu d\u00fcnyas\u0131nda s\u0131k g\u00f6rd\u00fc\u011f\u00fcm\u00fcz UFW\u2019de, \u00f6nce IPv6 deste\u011finin a\u00e7\u0131k oldu\u011fundan emin olun:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo nano \/etc\/ufw\/ufw.conf\n<\/code><\/pre>\n<p>\u015eu sat\u0131r\u0131 kontrol edin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">IPV6=yes\n<\/code><\/pre>\n<p>Ard\u0131ndan UFW\u2019yi yeniden ba\u015flat\u0131n:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo ufw disable\nsudo ufw enable\n<\/code><\/pre>\n<p>Tipik web sunucusu i\u00e7in izinler:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo ufw allow 22\/tcp\nsudo ufw allow 80\/tcp\nsudo ufw allow 443\/tcp\n<\/code><\/pre>\n<p>Bu kurallar hem IPv4 hem IPv6 i\u00e7in ge\u00e7erli olacakt\u0131r, ancak <code>IPV6=yes<\/code> olmadan sadece IPv4\u2019te \u00e7al\u0131\u015f\u0131rlar.<\/p>\n<h3><span id=\"nftables_ile_IPv6_kurallari\">nftables ile IPv6 kurallar\u0131<\/span><\/h3>\n<p>Modern da\u011f\u0131t\u0131mlar varsay\u0131lan olarak <code>nftables<\/code> kullanmaya ba\u015flad\u0131. IPv6 i\u00e7in ayr\u0131 <code>ip6<\/code> aile tablosu veya karma bir <code>inet<\/code> tablosu kullanabilirsiniz. Detayl\u0131 bir g\u00fcvenlik duvar\u0131 kurmak istiyorsan\u0131z, <a href=\"https:\/\/www.dchost.com\/blog\/nftables-ile-vps-guvenlik-duvari-rehberi-rate-limit-port-knocking-ve-ipv6-kurallari-nasil-tatli-tatli-kurulur\/\">nftables ile VPS g\u00fcvenlik duvar\u0131 rehberinde IPv6 kurallar\u0131n\u0131<\/a> ad\u0131m ad\u0131m anlatt\u0131k.<\/p>\n<p>Basit bir \u00f6rnek (inet tablosu ile hem IPv4 hem IPv6):<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">table inet filter {\n  chain input {\n    type filter hook input priority 0;\n\n    ct state established,related accept\n    iif lo accept\n\n    tcp dport { 22, 80, 443 } accept\n    icmp type echo-request accept\n    ip6 nexthdr icmpv6 accept\n\n    counter drop\n  }\n}\n<\/code><\/pre>\n<p>Bu yap\u0131land\u0131rma, hem IPv4 hem IPv6 i\u00e7in SSH, HTTP\/HTTPS ve temel ping trafi\u011fine izin verir, di\u011fer her \u015feyi d\u00fc\u015f\u00fcr\u00fcr.<\/p>\n<h2><span id=\"Adim_6_Web_Sunucusunu_IPv6da_Dinleyecek_Sekilde_Ayarlamak\">Ad\u0131m 6: Web Sunucusunu IPv6\u2019da Dinleyecek \u015eekilde Ayarlamak<\/span><\/h2>\n<p>Sunucunuz IPv6 ile internete \u00e7\u0131k\u0131yor olabilir; ancak web sitenizin ger\u00e7ekten IPv6 \u00fczerinden eri\u015filebilir olmas\u0131 i\u00e7in, web sunucusunun da IPv6 adresinde dinleme yapmas\u0131 gerekir.<\/p>\n<h3><span id=\"Nginxte_IPv6_dinlemesi\">Nginx\u2019te IPv6 dinlemesi<\/span><\/h3>\n<p>Varsay\u0131lan sunucu blo\u011funuzu a\u00e7\u0131n (Debian\/Ubuntu i\u00e7in genellikle <code>\/etc\/nginx\/sites-available\/default<\/code>):<\/p>\n<pre class=\"language-nginx line-numbers\"><code class=\"language-nginx\">server {\n    listen 80 default_server;\n    listen [::]:80 default_server;\n\n    server_name _;\n    root \/var\/www\/html;\n    ...\n}\n<\/code><\/pre>\n<p>Burada kritik sat\u0131r <code>listen [::]:80<\/code>. Benzer \u015fekilde HTTPS i\u00e7in:<\/p>\n<pre class=\"language-nginx line-numbers\"><code class=\"language-nginx\">server {\n    listen 443 ssl http2;\n    listen [::]:443 ssl http2;\n    server_name example.com;\n    ...\n}\n<\/code><\/pre>\n<p>HTTP\/2 ve TLS 1.3 gibi modern \u00f6zelliklerle birlikte IPv6\u2019y\u0131 kullanmak istiyorsan\u0131z, Nginx taraf\u0131nda TLS yap\u0131land\u0131rmas\u0131n\u0131 detayl\u0131ca anlatt\u0131\u011f\u0131m\u0131z <a href=\"https:\/\/www.dchost.com\/blog\/nginxte-tls-1-3-ocsp-stapling-ve-brotli-nasil-kurulur-hizli-ve-guvenli-httpsnin-sicacik-rehberi\/\">TLS 1.3 ve modern \u015fifrelemeyle h\u0131zl\u0131 ve g\u00fcvenli HTTPS rehberimize<\/a> de g\u00f6z atabilirsiniz.<\/p>\n<h3><span id=\"Apachede_IPv6_dinlemesi\">Apache\u2019de IPv6 dinlemesi<\/span><\/h3>\n<p>Apache\u2019de \u00f6nce <code>ports.conf<\/code> dosyas\u0131n\u0131 kontrol edin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo nano \/etc\/apache2\/ports.conf\n<\/code><\/pre>\n<p>A\u015fa\u011f\u0131daki sat\u0131rlar\u0131n oldu\u011fundan emin olun:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">Listen 80\nListen [::]:80\n<\/code><\/pre>\n<p>Ard\u0131ndan sanal host dosyan\u0131zda:<\/p>\n<pre class=\"language-apache line-numbers\"><code class=\"language-apache\">&lt;VirtualHost *:80&gt;\n    ServerName example.com\n    DocumentRoot \/var\/www\/html\n&lt;\/VirtualHost&gt;\n\n&lt;VirtualHost [::]:80&gt;\n    ServerName example.com\n    DocumentRoot \/var\/www\/html\n&lt;\/VirtualHost&gt;\n<\/code><\/pre>\n<p>Bir\u00e7ok da\u011f\u0131t\u0131mda <code>&lt;VirtualHost *:80&gt;<\/code> tan\u0131m\u0131 IPv6\u2019y\u0131 da kapsayacak \u015fekilde derlenmi\u015f olabilir; ancak \u00f6zellikle karma\u015f\u0131k senaryolarda <code>[::]:80<\/code> tan\u0131m\u0131n\u0131 a\u00e7\u0131k\u00e7a yazmak sorunlar\u0131 azalt\u0131r.<\/p>\n<h2><span id=\"Adim_7_DNSte_AAAA_Kayitlarini_Olusturmak\">Ad\u0131m 7: DNS\u2019te AAAA Kay\u0131tlar\u0131n\u0131 Olu\u015fturmak<\/span><\/h2>\n<p>Sunucunuz IPv6 ile haz\u0131r, web sunucunuz IPv6\u2019da dinliyor. Kullan\u0131c\u0131lar\u0131n IPv6 ile sitenize ula\u015fmas\u0131 i\u00e7in DNS taraf\u0131nda da do\u011fru kay\u0131tlar\u0131 girmeniz gerekiyor.<\/p>\n<h3><span id=\"A_ve_AAAA_kayitlarinin_farki\">A ve AAAA kay\u0131tlar\u0131n\u0131n fark\u0131<\/span><\/h3>\n<ul>\n<li><strong>A kayd\u0131:<\/strong> Alan ad\u0131n\u0131 bir IPv4 adresine y\u00f6nlendirir (\u00f6rnek: <code>93.184.216.34<\/code>).<\/li>\n<li><strong>AAAA kayd\u0131:<\/strong> Alan ad\u0131n\u0131 bir IPv6 adresine y\u00f6nlendirir (\u00f6rnek: <code>2001:db8:1234:5678::10<\/code>).<\/li>\n<\/ul>\n<p>DNS taraf\u0131ndaki temel kay\u0131t t\u00fcrlerini ve s\u0131k yap\u0131lan hatalar\u0131 detayland\u0131rd\u0131\u011f\u0131m\u0131z <a href=\"https:\/\/www.dchost.com\/blog\/dns-kayitlari-adan-zye-a-aaaa-cname-mx-txt-srv-caa-ve-sizi-yakan-o-kucuk-hatalar\/\">DNS kay\u0131tlar\u0131 A\u2019dan Z\u2019ye rehberimiz<\/a>, \u00f6zellikle karma\u015f\u0131k DNS senaryolar\u0131nda i\u015finizi kolayla\u015ft\u0131racakt\u0131r.<\/p>\n<h3><span id=\"Temel_bir_AAAA_kaydi_ornegi\">Temel bir AAAA kayd\u0131 \u00f6rne\u011fi<\/span><\/h3>\n<p>Alan ad\u0131: <code>example.com<\/code><br \/>IPv6 adresiniz: <code>2001:db8:1234:5678::10<\/code><\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">example.com.  300  IN  AAAA  2001:db8:1234:5678::10\n<\/code><\/pre>\n<p>Alt alan ad\u0131 i\u00e7in:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">www.example.com.  300  IN  AAAA  2001:db8:1234:5678::10\n<\/code><\/pre>\n<p>DNS panelinizde bu kay\u0131tlar\u0131 ekledikten sonra, istemci taraf\u0131nda \u015fu komutlarla test edebilirsiniz:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">dig AAAA example.com\n\n# veya\n\nhost -t AAAA example.com\n<\/code><\/pre>\n<p>IPv6 ile DNS taraf\u0131nda yapt\u0131\u011f\u0131n\u0131z k\u00fc\u00e7\u00fck bir AAAA kayd\u0131n\u0131n bile sistemi nas\u0131l de\u011fi\u015ftirdi\u011fini, hik\u00e2yele\u015ftirerek anlatt\u0131\u011f\u0131m\u0131z <a href=\"https:\/\/www.dchost.com\/blog\/kucuk-bir-aaaa-kaydi-buyuk-bir-aydinlanma\/\">\u201cK\u00fc\u00e7\u00fck Bir AAAA Kayd\u0131, B\u00fcy\u00fck Bir Ayd\u0131nlanma\u201d<\/a> yaz\u0131s\u0131 da okuma listenizde olsun.<\/p>\n<h2><span id=\"IPv6_ile_E-posta_Izleme_ve_Diger_Servisler\">IPv6 ile E-posta, \u0130zleme ve Di\u011fer Servisler<\/span><\/h2>\n<p>IPv6\u2019y\u0131 yaln\u0131zca web i\u00e7in kullanmak zorunda de\u011filsiniz. Posta sunucular\u0131, izleme sistemleri, API servisleri ve hatta veritaban\u0131 replikasyonu i\u00e7in de IPv6 kullanmak m\u00fcmk\u00fcn.<\/p>\n<h3><span id=\"E-posta_sunucusu_ve_IPv6\">E-posta sunucusu ve IPv6<\/span><\/h3>\n<p>E-posta taraf\u0131 IPv6\u2019da biraz daha hassas; PTR kay\u0131tlar\u0131, SPF\/DMARC ve RBL\u2019ler do\u011fru ayarl\u0131 olmal\u0131. Bu konuyu saha deneyimlerimizle detayland\u0131rd\u0131\u011f\u0131m\u0131z <a href=\"https:\/\/www.dchost.com\/blog\/ipv6-ile-e%e2%80%91posta-teslimi-nasil-rayina-oturur-ptr-helo-spf-ve-rbllerle-saha-rehberi\/\">IPv6 ile e-posta teslimi saha rehberinde<\/a> ad\u0131m ad\u0131m anlat\u0131yoruz. \u00d6zetle:<\/p>\n<ul>\n<li>IPv6 adresiniz i\u00e7in ters DNS (PTR) kayd\u0131 tan\u0131mlatmal\u0131s\u0131n\u0131z.<\/li>\n<li>MX kay\u0131tlar\u0131n\u0131z\u0131n g\u00f6sterdi\u011fi host\u2019lar AAAA kayd\u0131na da sahip olmal\u0131.<\/li>\n<li>SPF kay\u0131tlar\u0131n\u0131z\u0131 IPv6\u2019y\u0131 kapsayacak \u015fekilde g\u00fcncellemelisiniz.<\/li>\n<\/ul>\n<h3><span id=\"Monitoring_ve_log_toplama\">Monitoring ve log toplama<\/span><\/h3>\n<p>Prometheus, Grafana, Loki gibi g\u00f6zlemlenebilirlik ara\u00e7lar\u0131n\u0131 IPv6 \u00fczerinde \u00e7al\u0131\u015ft\u0131rmak teknik olarak hi\u00e7bir fark yaratmaz; sadece hedef adreslerinizde IPv6 yazars\u0131n\u0131z. VPS log y\u00f6netimini <a href=\"https:\/\/www.dchost.com\/blog\/vps-log-yonetimi-nasil-rayina-oturur-grafana-loki-promtail-ile-merkezi-loglama-tutma-sureleri-ve-alarm-kurallari\/\">Loki + Promtail ile nas\u0131l ray\u0131na oturtabilece\u011finizi<\/a> anlatt\u0131\u011f\u0131m\u0131z yaz\u0131, IPv4\/IPv6 fark etmeksizin genel mimariyi kurarken size rehberlik edecektir.<\/p>\n<h2><span id=\"IPv6-Only_VPS_Senaryolari_ve_NAT64DNS64\">IPv6-Only VPS Senaryolar\u0131 ve NAT64\/DNS64<\/span><\/h2>\n<p>IPv4 adreslerinin pahal\u0131la\u015ft\u0131\u011f\u0131 g\u00fcn\u00fcm\u00fczde, baz\u0131 projelerde tamamen <strong>IPv6-only VPS<\/strong> kullanmak da mant\u0131kl\u0131 h\u00e2le geliyor. Uygulaman\u0131z\u0131n \u00e7o\u011fu trafi\u011fi IPv6\u2019dan geliyorsa ve yaln\u0131zca birka\u00e7 d\u0131\u015f IPv4 servisine eri\u015fmeniz gerekiyorsa, NAT64\/DNS64 gibi \u00e7\u00f6z\u00fcmlerle IPv4 d\u00fcnyas\u0131na k\u00f6pr\u00fc kurabilirsiniz.<\/p>\n<p>Bu senaryoyu teknik detaylar\u0131yla ele ald\u0131\u011f\u0131m\u0131z <a href=\"https:\/\/www.dchost.com\/blog\/ipv6%e2%80%91only-vps-uzerinde-web-sitesi-yayinlamak-nat64-dns64-ile-ipv4e-nasil-kopru-kurulur\/\">IPv6-only VPS \u00fczerinde web sitesi yay\u0131nlama rehberinde<\/a>, NAT64\/DNS64 mimarisini ad\u0131m ad\u0131m kuruyoruz. DCHost taraf\u0131nda da projeleriniz i\u00e7in IPv6-only kurgular ve \u00f6n\u00fcne konumland\u0131r\u0131lan payla\u015f\u0131ml\u0131 IPv4 reverse proxy \u00e7\u00f6z\u00fcmleri konusunda size \u00f6zel senaryolar tasarlayabiliyoruz.<\/p>\n<h2><span id=\"Yaygin_Hatalar_ve_Sorun_Giderme_Ipuclari\">Yayg\u0131n Hatalar ve Sorun Giderme \u0130pu\u00e7lar\u0131<\/span><\/h2>\n<h3><span id=\"1_IPv6_adresi_var_ping_yok\">1. IPv6 adresi var, ping yok<\/span><\/h3>\n<p>Kontrol listesi:<\/p>\n<ul>\n<li><code>ip -6 route<\/code> \u00e7\u0131kt\u0131s\u0131nda varsay\u0131lan <code>default via &lt;gateway&gt;<\/code> sat\u0131r\u0131n\u0131 g\u00f6r\u00fcyor musunuz?<\/li>\n<li>Gateway\u2019iniz link-local ise, konfig\u00fcrasyonda do\u011fru aray\u00fczle birlikte tan\u0131mland\u0131\u011f\u0131ndan emin olun.<\/li>\n<li>G\u00fcvenlik duvar\u0131n\u0131z ICMPv6 trafi\u011fini (\u00f6zellikle <code>echo-request<\/code>, <code>echo-reply<\/code> ve Neighbor Discovery tiplerini) engellemiyor mu?<\/li>\n<\/ul>\n<h3><span id=\"2_IPv6_calisiyor_ama_site_disaridan_acilmiyor\">2. IPv6 \u00e7al\u0131\u015f\u0131yor ama site d\u0131\u015far\u0131dan a\u00e7\u0131lm\u0131yor<\/span><\/h3>\n<ul>\n<li>DNS\u2019te AAAA kayd\u0131n\u0131z do\u011fru adrese i\u015faret ediyor mu?<\/li>\n<li>Web sunucunuzun <code>listen [::]:80<\/code> \/ <code>[::]:443<\/code> sat\u0131rlar\u0131 mevcut mu?<\/li>\n<li>G\u00fcvenlik duvar\u0131 IPv6 80\/443 portlar\u0131na izin veriyor mu?<\/li>\n<\/ul>\n<p>Taray\u0131c\u0131da <code>https:\/\/[2001:db8:1234:5678::10]\/<\/code> adresini deneyerek, DNS haricindeki sorunlar\u0131 h\u0131zla eleyebilirsiniz.<\/p>\n<h3><span id=\"3_Sadece_bazi_kullanicilarda_sorun_var\">3. Sadece baz\u0131 kullan\u0131c\u0131larda sorun var<\/span><\/h3>\n<p>Bazen ISS taraf\u0131ndaki yanl\u0131\u015f IPv6 y\u00f6nlendirmeleri, bozuk MTU de\u011ferleri veya hatal\u0131 firewall kural\u0131, sadece belirli b\u00f6lgelerden gelen IPv6 trafi\u011fini etkileyebilir. Bu gibi durumlarda:<\/p>\n<ul>\n<li>Farkl\u0131 lokasyonlardan <code>traceroute6<\/code> \u00e7\u0131kt\u0131lar\u0131 toplay\u0131n.<\/li>\n<li>Ge\u00e7ici olarak yaln\u0131zca IPv4 veya yaln\u0131zca IPv6\u2019y\u0131 aktif ederek davran\u0131\u015f\u0131 k\u0131yaslay\u0131n.<\/li>\n<li>CDN veya WAF kullan\u0131yorsan\u0131z, onlar\u0131n IPv6 davran\u0131\u015f\u0131n\u0131 da inceleyin.<\/li>\n<\/ul>\n<h2><span id=\"Guvenlik_Perspektifinden_IPv6\">G\u00fcvenlik Perspektifinden IPv6<\/span><\/h2>\n<p>IPv6, adres alan\u0131n\u0131n b\u00fcy\u00fckl\u00fc\u011f\u00fc sayesinde \u201crastgele tarama\u201d sald\u0131r\u0131lar\u0131n\u0131 zorla\u015ft\u0131rsa da, <strong>g\u00fcvenlik duvar\u0131 ve hardening ihtiyac\u0131n\u0131 ortadan kald\u0131rmaz<\/strong>. Hatta baz\u0131 sistemlerde IPv4 i\u00e7in \u00e7ok s\u0131k\u0131 kurallar yaz\u0131l\u0131p, IPv6 tamamen bo\u015f b\u0131rak\u0131ld\u0131\u011f\u0131 i\u00e7in daha riskli bir tablo ortaya \u00e7\u0131kabiliyor.<\/p>\n<p>\u00d6zellikle VPS g\u00fcvenli\u011fi taraf\u0131nda port k\u0131s\u0131tlama, brute-force \u00f6nleme, mTLS, HTTP g\u00fcvenlik ba\u015fl\u0131klar\u0131 gibi ba\u015fl\u0131klara daha derinlemesine girmek isterseniz, <a href=\"https:\/\/www.dchost.com\/blog\/vps-sunucu-guvenligi-nasil-saglanir-kapiyi-acik-birakmadan-yasamanin-sirri\/\">VPS sunucu g\u00fcvenli\u011fini kap\u0131y\u0131 a\u00e7\u0131k b\u0131rakmadan sa\u011flama<\/a> rehberimiz ve <a href=\"https:\/\/www.dchost.com\/blog\/http-guvenlik-basliklari-rehberi-hsts-csp-ve-digerlerini-ne-zaman-nasil-uygulamalisin\/\">HTTP g\u00fcvenlik ba\u015fl\u0131klar\u0131 rehberimiz<\/a> iyi tamamlay\u0131c\u0131 kaynaklar olacakt\u0131r.<\/p>\n<h2><span id=\"Sonuc_DCHost_ile_IPv6ya_Gecisi_Bugun_Baslatin\">Sonu\u00e7: DCHost ile IPv6\u2019ya Ge\u00e7i\u015fi Bug\u00fcn Ba\u015flat\u0131n<\/span><\/h2>\n<p>Art\u0131k VPS sunucunuzda IPv6 kurulumunun ana hatlar\u0131n\u0131 biliyorsunuz: DCHost panelinden IPv6 bilgilerinizi al\u0131p, i\u015fletim sisteminde gerekli a\u011f dosyalar\u0131n\u0131 d\u00fczenleyebiliyor, firewall kurallar\u0131n\u0131z\u0131 IPv6\u2019y\u0131 kapsayacak \u015fekilde geni\u015fletebiliyor, web sunucunuzun IPv6 \u00fczerinde dinlemesini sa\u011flayabiliyor ve DNS\u2019te do\u011fru AAAA kay\u0131tlar\u0131n\u0131 olu\u015fturabiliyorsunuz. \u00dcst\u00fcne, e-posta altyap\u0131s\u0131, izleme sistemleri ve hatta IPv6-only VPS kurgular\u0131 gibi daha ileri senaryolara da g\u00f6z atm\u0131\u015f olduk.<\/p>\n<p>IPv6, \u201cbir g\u00fcn mutlaka bakmam laz\u0131m\u201d kategorisinden \u00e7\u0131k\u0131p, do\u011frudan i\u015f s\u00fcreklili\u011fi ve maliyet optimizasyonu konular\u0131n\u0131n i\u00e7ine girmi\u015f durumda. Yeni projelerinizi DCHost \u00fczerinde kurarken, en ba\u015fta IPv6\u2019y\u0131 planlaman\u0131za dahil etmeniz; mevcut VPS\u2019lerinizi de ad\u0131m ad\u0131m dual-stack h\u00e2line getirmeniz, yar\u0131n \u00e7\u0131kabilecek zorunlu g\u00f6\u00e7leri bug\u00fcnden yumu\u015fat\u0131r. Bu rehberdeki ad\u0131mlar\u0131 uygularken tak\u0131ld\u0131\u011f\u0131n\u0131z noktada, DCHost teknik ekibi olarak IPv6 adres tahsisinden g\u00fcvenlik duvar\u0131 kurallar\u0131na, DNS yap\u0131land\u0131rmas\u0131ndan IPv6-only mimarilere kadar yan\u0131n\u0131zday\u0131z.<\/p>\n<p>E\u011fer hen\u00fcz bir VPS\u2019iniz yoksa veya mevcut sunucunuzu daha modern, IPv6-dostu bir altyap\u0131ya ta\u015f\u0131mak istiyorsan\u0131z, DCHost VPS ve fiziksel sunucu \u00e7\u00f6z\u00fcmlerimizi inceleyebilir; projenize en uygun plan\u0131 birlikte tasarlayabiliriz. IPv6 d\u00fcnyas\u0131na ge\u00e7i\u015fi bug\u00fcn ba\u015flat\u0131n, a\u011f mimarinizi gelece\u011fe haz\u0131r h\u00e2le getirin.<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>\u0130&ccedil;indekiler1 IPv6\u2019y\u0131 VPS\u2019inize Ta\u015f\u0131mak Neden Art\u0131k Ertelenmemeli?2 IPv6\u2019n\u0131n Arka Plan\u0131: Neden \u015eimdi?3 VPS\u2019inizde IPv6\u2019ya Ba\u015flamadan \u00d6nce Bilmeniz Gereken Temeller3.1 IPv6 adres t\u00fcrleri (k\u0131saca)3.2 Prefix ve a\u011f maskesi4 Ad\u0131m 1: DCHost Panelinde IPv6 Bilgilerinizi Kontrol Edin5 Ad\u0131m 2: VPS \u00dczerinde IPv6 Deste\u011fini Do\u011frulay\u0131n5.1 IPv6 mod\u00fcl\u00fc y\u00fckl\u00fc m\u00fc?5.2 sysctl ile IPv6\u2019n\u0131n devrede oldu\u011fundan emin olun6 Ad\u0131m 3: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2273,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-2272","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts\/2272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/comments?post=2272"}],"version-history":[{"count":0,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts\/2272\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/media\/2273"}],"wp:attachment":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/media?parent=2272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/categories?post=2272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/tags?post=2272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}