{"id":2538,"date":"2025-11-28T19:48:37","date_gmt":"2025-11-28T16:48:37","guid":{"rendered":"https:\/\/www.dchost.com\/blog\/vps-sunucunuzda-ipv6-kurulum-ve-yapilandirma-rehberi-2\/"},"modified":"2025-11-28T19:48:37","modified_gmt":"2025-11-28T16:48:37","slug":"vps-sunucunuzda-ipv6-kurulum-ve-yapilandirma-rehberi-2","status":"publish","type":"post","link":"https:\/\/www.dchost.com\/blog\/vps-sunucunuzda-ipv6-kurulum-ve-yapilandirma-rehberi-2\/","title":{"rendered":"VPS Sunucunuzda IPv6 Kurulum ve Yap\u0131land\u0131rma Rehberi"},"content":{"rendered":"<div class=\"dchost-blog-content-wrapper\"><div id=\"toc_container\" class=\"toc_transparent no_bullets\"><p class=\"toc_title\">\u0130&ccedil;indekiler<\/p><ul class=\"toc_list\"><li><a href=\"#VPS_sunucunuzda_IPv6_kullanmaya_neden_hemen_baslamalisiniz\"><span class=\"toc_number toc_depth_1\">1<\/span> VPS sunucunuzda IPv6 kullanmaya neden hemen ba\u015flamal\u0131s\u0131n\u0131z<\/a><\/li><li><a href=\"#IPv6_temelleri_VPS_ozelinde_bilmeniz_gerekenler\"><span class=\"toc_number toc_depth_1\">2<\/span> IPv6 temelleri: VPS \u00f6zelinde bilmeniz gerekenler<\/a><ul><li><a href=\"#IPv4_ile_IPv6_arasindaki_temel_farklar\"><span class=\"toc_number toc_depth_2\">2.1<\/span> IPv4 ile IPv6 aras\u0131ndaki temel farklar<\/a><\/li><li><a href=\"#VPS_baglaminda_IPv6_nasil_tahsis_edilir\"><span class=\"toc_number toc_depth_2\">2.2<\/span> VPS ba\u011flam\u0131nda IPv6 nas\u0131l tahsis edilir<\/a><\/li><\/ul><\/li><li><a href=\"#Hazirlik_Sunucuda_IPv6_destegini_ve_ag_arabirimini_kontrol_etmek\"><span class=\"toc_number toc_depth_1\">3<\/span> Haz\u0131rl\u0131k: Sunucuda IPv6 deste\u011fini ve a\u011f arabirimini kontrol etmek<\/a><ul><li><a href=\"#Cekirdek_ve_sistemde_IPv6_modulunu_kontrol_etmek\"><span class=\"toc_number toc_depth_2\">3.1<\/span> \u00c7ekirdek ve sistemde IPv6 mod\u00fcl\u00fcn\u00fc kontrol etmek<\/a><\/li><li><a href=\"#Ag_arabirimini_ve_mevcut_adresleri_listelemek\"><span class=\"toc_number toc_depth_2\">3.2<\/span> A\u011f arabirimini ve mevcut adresleri listelemek<\/a><\/li><\/ul><\/li><li><a href=\"#Debian_ve_Ubuntu_sunucularda_IPv6_yapilandirmasi\"><span class=\"toc_number toc_depth_1\">4<\/span> Debian ve Ubuntu sunucularda IPv6 yap\u0131land\u0131rmas\u0131<\/a><ul><li><a href=\"#Netplan_kullanilan_sistemlerde_Ubuntu_1804_ve_sonrasi_Debian_yeni_surumler\"><span class=\"toc_number toc_depth_2\">4.1<\/span> Netplan kullan\u0131lan sistemlerde (Ubuntu 18.04 ve sonras\u0131, Debian yeni s\u00fcr\u00fcmler)<\/a><\/li><li><a href=\"#Eski_ifupdown_yapisinda_etcnetworkinterfaces_ile_IPv6\"><span class=\"toc_number toc_depth_2\">4.2<\/span> Eski ifupdown yap\u0131s\u0131nda \/etc\/network\/interfaces ile IPv6<\/a><\/li><\/ul><\/li><li><a href=\"#AlmaLinux_Rocky_Linux_ve_CentOS_turevlerinde_IPv6_yapilandirmasi\"><span class=\"toc_number toc_depth_1\">5<\/span> AlmaLinux, Rocky Linux ve CentOS t\u00fcrevlerinde IPv6 yap\u0131land\u0131rmas\u0131<\/a><ul><li><a href=\"#Mevcut_baglantiyi_nmcli_ile_listelemek\"><span class=\"toc_number toc_depth_2\">5.1<\/span> Mevcut ba\u011flant\u0131y\u0131 nmcli ile listelemek<\/a><\/li><li><a href=\"#ifcfg_dosyalari_ile_klasik_yapilandirma\"><span class=\"toc_number toc_depth_2\">5.2<\/span> ifcfg dosyalar\u0131 ile klasik yap\u0131land\u0131rma<\/a><\/li><\/ul><\/li><li><a href=\"#IPv6_ile_baglanti_testleri_ve_dogrulama_adimlari\"><span class=\"toc_number toc_depth_1\">6<\/span> IPv6 ile ba\u011flant\u0131 testleri ve do\u011frulama ad\u0131mlar\u0131<\/a><ul><li><a href=\"#Temel_ICMP_testleri_ping_ve_traceroute\"><span class=\"toc_number toc_depth_2\">6.1<\/span> Temel ICMP testleri: ping ve traceroute<\/a><\/li><li><a href=\"#DNS_ve_HTTP_uzerinden_IPv6_testi\"><span class=\"toc_number toc_depth_2\">6.2<\/span> DNS ve HTTP \u00fczerinden IPv6 testi<\/a><\/li><li><a href=\"#Tarayicidan_disaridan_test\"><span class=\"toc_number toc_depth_2\">6.3<\/span> Taray\u0131c\u0131dan d\u0131\u015far\u0131dan test<\/a><\/li><\/ul><\/li><li><a href=\"#Guvenlik_duvari_IPv6_trafigini_kontrol_altina_almak\"><span class=\"toc_number toc_depth_1\">7<\/span> G\u00fcvenlik duvar\u0131: IPv6 trafi\u011fini kontrol alt\u0131na almak<\/a><ul><li><a href=\"#UFW_kullanan_sistemlerde_IPv6_destegini_acmak\"><span class=\"toc_number toc_depth_2\">7.1<\/span> UFW kullanan sistemlerde IPv6 deste\u011fini a\u00e7mak<\/a><\/li><li><a href=\"#nftables_ile_tek_tabloda_IPv4_IPv6_yonetimi\"><span class=\"toc_number toc_depth_2\">7.2<\/span> nftables ile tek tabloda IPv4 + IPv6 y\u00f6netimi<\/a><\/li><\/ul><\/li><li><a href=\"#DNS_tarafi_AAAA_kaydi_ters_kayitlar_ve_testler\"><span class=\"toc_number toc_depth_1\">8<\/span> DNS taraf\u0131: AAAA kayd\u0131, ters kay\u0131tlar ve testler<\/a><ul><li><a href=\"#Alan_adiniza_AAAA_kaydi_eklemek\"><span class=\"toc_number toc_depth_2\">8.1<\/span> Alan ad\u0131n\u0131za AAAA kayd\u0131 eklemek<\/a><\/li><li><a href=\"#IPv6_icin_ters_DNS_rDNS_ve_e-posta_altyapisi\"><span class=\"toc_number toc_depth_2\">8.2<\/span> IPv6 i\u00e7in ters DNS (rDNS) ve e-posta altyap\u0131s\u0131<\/a><\/li><\/ul><\/li><li><a href=\"#Web_sunucusunda_IPv6_dinleme_ayarlari\"><span class=\"toc_number toc_depth_1\">9<\/span> Web sunucusunda IPv6 dinleme ayarlar\u0131<\/a><ul><li><a href=\"#Nginx_uzerinde_IPv6_dinleme\"><span class=\"toc_number toc_depth_2\">9.1<\/span> Nginx \u00fczerinde IPv6 dinleme<\/a><\/li><li><a href=\"#Apache_uzerinde_IPv6_dinleme\"><span class=\"toc_number toc_depth_2\">9.2<\/span> Apache \u00fczerinde IPv6 dinleme<\/a><\/li><\/ul><\/li><li><a href=\"#Gelismis_senaryo_IPv6-only_VPS_ve_NAT64DNS64\"><span class=\"toc_number toc_depth_1\">10<\/span> Geli\u015fmi\u015f senaryo: IPv6-only VPS ve NAT64\/DNS64<\/a><\/li><li><a href=\"#Tipik_sorunlar_ve_pratik_cozum_onerileri\"><span class=\"toc_number toc_depth_1\">11<\/span> Tipik sorunlar ve pratik \u00e7\u00f6z\u00fcm \u00f6nerileri<\/a><ul><li><a href=\"#Sunucuda_IPv6_var_disari_cikiyor_ama_site_IPv6_ile_acilmiyor\"><span class=\"toc_number toc_depth_2\">11.1<\/span> Sunucuda IPv6 var, d\u0131\u015far\u0131 \u00e7\u0131k\u0131yor; ama site IPv6 ile a\u00e7\u0131lm\u0131yor<\/a><\/li><li><a href=\"#Ping6_calisiyor_ama_bazi_IPv6_sitelerine_erisemiyorum\"><span class=\"toc_number toc_depth_2\">11.2<\/span> Ping6 \u00e7al\u0131\u015f\u0131yor ama baz\u0131 IPv6 sitelerine eri\u015femiyorum<\/a><\/li><li><a href=\"#IPv6_ile_guvenlik_kaygilari_NAT_yoksa_sunucum_daha_mi_savunmasiz\"><span class=\"toc_number toc_depth_2\">11.3<\/span> IPv6 ile g\u00fcvenlik kayg\u0131lar\u0131: NAT yoksa sunucum daha m\u0131 savunmas\u0131z<\/a><\/li><\/ul><\/li><li><a href=\"#Operasyonel_oneriler_IPv6yi_ek_yuk_degil_rahatlik_haline_getirmek\"><span class=\"toc_number toc_depth_1\">12<\/span> Operasyonel \u00f6neriler: IPv6\u2019y\u0131 ek y\u00fck de\u011fil, rahatl\u0131k haline getirmek<\/a><ul><li><a href=\"#Adres_planlamasi_ve_dokumantasyon\"><span class=\"toc_number toc_depth_2\">12.1<\/span> Adres planlamas\u0131 ve dok\u00fcmantasyon<\/a><\/li><li><a href=\"#Monitoring_ve_loglarda_IPv6_gorunurlugu\"><span class=\"toc_number toc_depth_2\">12.2<\/span> Monitoring ve loglarda IPv6 g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc<\/a><\/li><\/ul><\/li><li><a href=\"#Sonuc_IPv6yi_bugun_devreye_almak_yarinki_ag_mimarinizi_sadelestirir\"><span class=\"toc_number toc_depth_1\">13<\/span> Sonu\u00e7: IPv6\u2019y\u0131 bug\u00fcn devreye almak, yar\u0131nki a\u011f mimarinizi sadele\u015ftirir<\/a><\/li><\/ul><\/div>\n<h2><span id=\"VPS_sunucunuzda_IPv6_kullanmaya_neden_hemen_baslamalisiniz\">VPS sunucunuzda IPv6 kullanmaya neden hemen ba\u015flamal\u0131s\u0131n\u0131z<\/span><\/h2>\n<p>IPv4 adresleri fiilen t\u00fckendi, fiyatlar\u0131 s\u00fcrekli art\u0131yor ve bir\u00e7ok operat\u00f6r art\u0131k yeni nesil a\u011flar\u0131 yaln\u0131zca IPv6 \u00fczerinden tasarl\u0131yor. E\u011fer bug\u00fcn bir <a href=\"https:\/\/www.dchost.com\/tr\/vps\">VPS<\/a> \u00fczerinde proje hayata ge\u00e7iriyorsan\u0131z, a\u011f mimarinizi planlarken IPv6 destekli bir altyap\u0131y\u0131 i\u015fin ba\u015f\u0131nda devreye alman\u0131z uzun vadede hem maliyet hem de operasyonel rahatl\u0131k kazand\u0131r\u0131yor. \u00d6zellikle e-ticaret, SaaS, oyun sunucusu, API hizmetleri gibi \u00f6l\u00e7eklenmeye a\u00e7\u0131k projelerde bir s\u00fcre sonra IP adresi y\u00f6netimi ve a\u011f tasar\u0131m\u0131, performans kadar kritik hale geliyor.<\/p>\n<p>DCHost taraf\u0131nda g\u00f6rd\u00fc\u011f\u00fcm\u00fcz en yayg\u0131n senaryo \u015fu: Elde tek bir IPv4 adresi var, ama onlarca sistem, mikroservis, test ortam\u0131 ve staging sunucusu a\u00e7\u0131l\u0131yor. Her yeni ihtiya\u00e7ta NAT, reverse proxy ve karma\u015f\u0131k y\u00f6nlendirme kurallar\u0131 birikiyor. Oysa ayn\u0131 i\u015f y\u00fck\u00fc, do\u011fru kurgulanm\u0131\u015f bir IPv6 blok ile \u00e7ok daha sade, okunabilir ve s\u00fcrd\u00fcr\u00fclebilir hale gelebiliyor. Bu rehberde, VPS sunucunuzda IPv6 adresini nas\u0131l etkinle\u015ftirece\u011finizi, Linux taraf\u0131ndaki temel yap\u0131land\u0131rma dosyalar\u0131n\u0131, g\u00fcvenlik duvar\u0131 ve DNS ayarlar\u0131n\u0131, ad\u0131m ad\u0131m ve ger\u00e7ek d\u00fcnyada i\u015fe yarar \u00f6rneklerle anlataca\u011f\u0131z.<\/p>\n<p>E\u011fer IPv6 kavram\u0131na genel bir bak\u0131\u015f da g\u00f6rmek istiyorsan\u0131z, \u00f6nce IPv6 kaynaklar\u0131n\u0131n ve neden bu kadar \u00f6nemli oldu\u011funun anlat\u0131ld\u0131\u011f\u0131 <a href='https:\/\/www.dchost.com\/blog\/ipv6-beninseme-oranlari-artiyor-peki-bu-dalga-ne-zaman-sizin-aga-carpar\/'>IPv6 benimseme oranlar\u0131 ve etkileri<\/a> yaz\u0131m\u0131za da g\u00f6z atabilirsiniz.<\/p>\n<h2><span id=\"IPv6_temelleri_VPS_ozelinde_bilmeniz_gerekenler\">IPv6 temelleri: VPS \u00f6zelinde bilmeniz gerekenler<\/span><\/h2>\n<h3><span id=\"IPv4_ile_IPv6_arasindaki_temel_farklar\">IPv4 ile IPv6 aras\u0131ndaki temel farklar<\/span><\/h3>\n<p>\u0130\u015fin teorisine derin dalmadan, VPS y\u00f6neten biri olarak pratikte sizi ilgilendiren birka\u00e7 kritik fark\u0131 netle\u015ftirelim:<\/p>\n<ul>\n<li><strong>Adres uzunlu\u011fu:<\/strong> IPv4 32 bit, IPv6 ise 128 bittir. IPv4 adresi 1.2.3.4 gibi g\u00f6r\u00fcn\u00fcrken, IPv6 adresi 2001:db8:abcd:1::10 format\u0131ndad\u0131r.<\/li>\n<li><strong>Adres say\u0131s\u0131:<\/strong> IPv6, pratikte t\u00fckenmeyecek kadar b\u00fcy\u00fck bir adres uzay\u0131 sunar. Tek bir \/64 blokta, t\u00fcm global IPv4 uzay\u0131ndan \u00e7ok daha fazla adres bulunur.<\/li>\n<li><strong>NAT yerine u\u00e7tan uca eri\u015fim:<\/strong> IPv6 ile \u00e7o\u011fu senaryoda NAT gerekmez. Her sunucu, global olarak y\u00f6nlenebilir bir adrese sahip olur. Bu hem konfig\u00fcrasyonu sadele\u015ftirir hem de baz\u0131 protokollerin daha sa\u011fl\u0131kl\u0131 \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flar.<\/li>\n<li><strong>Yerle\u015fik g\u00fcvenlik ve ek \u00f6zellikler:<\/strong> IPSec, SLAAC (otomatik adres atama), daha geli\u015fmi\u015f multicast gibi \u00f6zellikler do\u011frudan protokol\u00fcn par\u00e7as\u0131d\u0131r.<\/li>\n<\/ul>\n<p>IPv6 mimarisi, uzun vadede a\u011f\u0131n\u0131z\u0131 sadele\u015ftirmenize yard\u0131mc\u0131 olur. IPv4 k\u0131tl\u0131\u011f\u0131 ve fiyatlar hakk\u0131nda daha ayr\u0131nt\u0131l\u0131 bir tablo g\u00f6rmek isterseniz, <a href='https:\/\/www.dchost.com\/blog\/ipv4-adres-fiyatlari-rekor-kiriyor-neden-ne-zaman-nasil-cozulur\/'>IPv4 adres fiyatlar\u0131n\u0131n neden rekor k\u0131rd\u0131\u011f\u0131n\u0131<\/a> anlatt\u0131\u011f\u0131m\u0131z yaz\u0131 da bu rehbere g\u00fczel bir arka plan sa\u011flayacakt\u0131r.<\/p>\n<h3><span id=\"VPS_baglaminda_IPv6_nasil_tahsis_edilir\">VPS ba\u011flam\u0131nda IPv6 nas\u0131l tahsis edilir<\/span><\/h3>\n<p>\u00c7o\u011fu ciddi altyap\u0131da oldu\u011fu gibi, DCHost VPS sunucular\u0131nda da IPv6 deste\u011fi a\u011f katman\u0131nda haz\u0131rd\u0131r. Genel olarak \u00fc\u00e7 senaryo g\u00f6r\u00fcrs\u00fcn\u00fcz:<\/p>\n<ul>\n<li><strong>Tek bir IPv6 adresi:<\/strong> VPS arabiriminize sadece 1 adet global IPv6 adresi atan\u0131r.<\/li>\n<li><strong>\/64 blok tahsisi:<\/strong> size 2001:db8:abcd:1234::\/64 gibi bir a\u011f blo\u011fu verilir, bu blok i\u00e7inden istedi\u011finiz kadar adresi VPS \u00fczerinde kullanabilirsiniz.<\/li>\n<li><strong>Routed subnet (y\u00f6nlendirilmi\u015f alt a\u011f):<\/strong> IPv6 blo\u011fu do\u011frudan VPS aray\u00fcz\u00fcne de\u011fil, VPS\u2019e y\u00f6nlendirilmi\u015f bir alt a\u011f olarak tan\u0131mlan\u0131r. Bu durumda ek y\u00f6nlendirme ve \/ ya alt aray\u00fczler kullan\u0131l\u0131r.<\/li>\n<\/ul>\n<p>VPS panelinizde veya DCHost m\u00fc\u015fteri panelinde g\u00f6rece\u011finiz bilgiler genelde \u015funlar olur:<\/p>\n<ul>\n<li>IPv6 adresiniz (veya adres aral\u0131\u011f\u0131n\u0131z)<\/li>\n<li>Prefix uzunlu\u011fu, \u00f6rne\u011fin \/64<\/li>\n<li>IPv6 a\u011f ge\u00e7idi (gateway)<\/li>\n<li>Varsa y\u00f6nlendirilmi\u015f subnet bilgisi<\/li>\n<\/ul>\n<p>Kuruluma ba\u015flamadan \u00f6nce bu bilgileri netle\u015ftirmek, yapaca\u011f\u0131n\u0131z t\u00fcm konfig\u00fcrasyonun temelini olu\u015fturur.<\/p>\n<h2><span id=\"Hazirlik_Sunucuda_IPv6_destegini_ve_ag_arabirimini_kontrol_etmek\">Haz\u0131rl\u0131k: Sunucuda IPv6 deste\u011fini ve a\u011f arabirimini kontrol etmek<\/span><\/h2>\n<h3><span id=\"Cekirdek_ve_sistemde_IPv6_modulunu_kontrol_etmek\">\u00c7ekirdek ve sistemde IPv6 mod\u00fcl\u00fcn\u00fc kontrol etmek<\/span><\/h3>\n<p>Modern Linux da\u011f\u0131t\u0131mlar\u0131n\u0131n neredeyse tamam\u0131nda IPv6 \u00e7ekirdek mod\u00fcl\u00fc haz\u0131r gelir. Yine de devre d\u0131\u015f\u0131 b\u0131rak\u0131lmam\u0131\u015f oldu\u011fundan emin olmak faydal\u0131d\u0131r:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">lsmod | grep ipv6\n<\/code><\/pre>\n<p>Herhangi bir \u00e7\u0131kt\u0131 g\u00f6rm\u00fcyorsan\u0131z, mod\u00fcl dinamik olarak y\u00fcklenmemi\u015f olabilir, ama bu \u00e7o\u011fu zaman bir sorun de\u011fildir. \u00d6nemli olan, sistemin IPv6 y\u0131\u011f\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131lmam\u0131\u015f olmas\u0131d\u0131r. A\u015fa\u011f\u0131daki sat\u0131rlar varsa IPv6 tamamen kapal\u0131 olabilir:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">grep ipv6 \/etc\/sysctl.conf \/etc\/sysctl.d\/* 2&gt;\/dev\/null\n<\/code><\/pre>\n<p>\u015euna benzer bir sat\u0131r g\u00f6r\u00fcrseniz:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">net.ipv6.conf.all.disable_ipv6 = 1\n<\/code><\/pre>\n<p>bunu 0 olarak de\u011fi\u015ftirip a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131rabilirsiniz:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sysctl -p\n<\/code><\/pre>\n<h3><span id=\"Ag_arabirimini_ve_mevcut_adresleri_listelemek\">A\u011f arabirimini ve mevcut adresleri listelemek<\/span><\/h3>\n<p>Yeni nesil komut ip ile arabirimlerinizi ve adreslerinizi g\u00f6rebilirsiniz:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ip -br a\n<\/code><\/pre>\n<p>Beklenen \u00e7\u0131kt\u0131 kabaca \u015f\u00f6yle g\u00f6r\u00fcn\u00fcr:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">eth0    UP   203.0.113.10\/24  2001:db8:abcd:1::10\/64\n<\/code><\/pre>\n<p>E\u011fer IPv6 adresi yoksa, bir sonraki b\u00f6l\u00fcmde i\u015fletim sisteminize g\u00f6re elle ekleyece\u011fiz.<\/p>\n<h2><span id=\"Debian_ve_Ubuntu_sunucularda_IPv6_yapilandirmasi\">Debian ve Ubuntu sunucularda IPv6 yap\u0131land\u0131rmas\u0131<\/span><\/h2>\n<p>DCHost m\u00fc\u015fterilerinin yo\u011fun olarak kulland\u0131\u011f\u0131 iki aile, Debian ve Ubuntu. Son y\u0131llarda her iki da\u011f\u0131t\u0131mda da <strong>netplan<\/strong> standart hale geldi, ancak eski s\u00fcr\u00fcmlerde ifupdown altyap\u0131s\u0131yla \/etc\/network\/interfaces dosyas\u0131n\u0131 da g\u00f6rebilirsiniz.<\/p>\n<h3><span id=\"Netplan_kullanilan_sistemlerde_Ubuntu_1804_ve_sonrasi_Debian_yeni_surumler\">Netplan kullan\u0131lan sistemlerde (Ubuntu 18.04 ve sonras\u0131, Debian yeni s\u00fcr\u00fcmler)<\/span><\/h3>\n<p>Tipik bir yap\u0131land\u0131rma dosyas\u0131 \/etc\/netplan\/01-netcfg.yaml \u015feklinde olur. Mevcut dosyay\u0131 yedekleyerek ba\u015flay\u0131n:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">cp \/etc\/netplan\/01-netcfg.yaml \/etc\/netplan\/01-netcfg.yaml.bak\n<\/code><\/pre>\n<p>Daha sonra bir metin d\u00fczenleyici ile a\u00e7\u0131n:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">nano \/etc\/netplan\/01-netcfg.yaml\n<\/code><\/pre>\n<p>\u00d6rnek bir IPv4 + IPv6 statik yap\u0131land\u0131rma \u015f\u00f6yle olabilir:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">network:\n  version: 2\n  renderer: networkd\n  ethernets:\n    eth0:\n      dhcp4: no\n      addresses:\n        - 203.0.113.10\/24\n        - 2001:db8:abcd:1::10\/64\n      gateway4: 203.0.113.1\n      gateway6: 2001:db8:abcd:1::1\n      nameservers:\n        addresses:\n          - 203.0.113.53\n          - 2001:4860:4860::8888\n<\/code><\/pre>\n<p>Buradaki IPv6 adresi, prefix uzunlu\u011fu ve gateway de\u011ferlerini mutlaka DCHost panelinizde size tahsis edilmi\u015f bilgilerle de\u011fi\u015ftirin. Ard\u0131ndan konfig\u00fcrasyonu uygulay\u0131n:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">netplan apply\n<\/code><\/pre>\n<p>Uyguland\u0131ktan sonra arabirimi tekrar kontrol edin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ip -6 addr show dev eth0\n<\/code><\/pre>\n<p>Adresiniz listeleniyorsa ilk ad\u0131m\u0131 tamamlad\u0131n\u0131z.<\/p>\n<h3><span id=\"Eski_ifupdown_yapisinda_etcnetworkinterfaces_ile_IPv6\">Eski ifupdown yap\u0131s\u0131nda \/etc\/network\/interfaces ile IPv6<\/span><\/h3>\n<p>Daha eski Debian veya netplan devre d\u0131\u015f\u0131 b\u0131rak\u0131lm\u0131\u015f sistemlerde yap\u0131land\u0131rma, \/etc\/network\/interfaces dosyas\u0131ndan y\u00f6netilir. Basit bir \u00f6rnek:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">auto eth0\niface eth0 inet static\n    address 203.0.113.10\n    netmask 255.255.255.0\n    gateway 203.0.113.1\n\niface eth0 inet6 static\n    address 2001:db8:abcd:1::10\n    netmask 64\n    gateway 2001:db8:abcd:1::1\n<\/code><\/pre>\n<p>De\u011fi\u015fiklikten sonra arabirimi yeniden ba\u015flatabilirsiniz:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ifdown eth0 &amp;&amp; ifup eth0\n<\/code><\/pre>\n<p>Bu komut uzaktan ba\u011flant\u0131y\u0131 k\u0131sa s\u00fcreli\u011fine kesece\u011finden, m\u00fcmk\u00fcnse seri konsol veya DCHost panelinizdeki VNC konsolunu a\u00e7\u0131k tutman\u0131z iyi olur. Alternatif olarak sunucuyu yeniden ba\u015flatmak da tercih edilebilir.<\/p>\n<h2><span id=\"AlmaLinux_Rocky_Linux_ve_CentOS_turevlerinde_IPv6_yapilandirmasi\">AlmaLinux, Rocky Linux ve CentOS t\u00fcrevlerinde IPv6 yap\u0131land\u0131rmas\u0131<\/span><\/h2>\n<p>RHEL tabanl\u0131 da\u011f\u0131t\u0131mlarda a\u011f yap\u0131land\u0131rmas\u0131 genelde NetworkManager taraf\u0131ndan y\u00f6netilir. Eski nesil ifcfg dosyalar\u0131 h\u00e2l\u00e2 kullan\u0131lsa da, modern ve tekrarlanabilir bir kurulum i\u00e7in <strong>nmcli<\/strong> komut sat\u0131r\u0131 arac\u0131 daha g\u00fcvenilir bir yoldur.<\/p>\n<h3><span id=\"Mevcut_baglantiyi_nmcli_ile_listelemek\">Mevcut ba\u011flant\u0131y\u0131 nmcli ile listelemek<\/span><\/h3>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">nmcli con show\n<\/code><\/pre>\n<p>\u00c7\u0131kt\u0131da genellikle eth0 veya ens3 gibi bir ba\u011flant\u0131 g\u00f6r\u00fcrs\u00fcn\u00fcz. \u00d6rne\u011fin ad\u0131 &#8216;ens3&#8217; olsun. IPv6 adresi eklemek i\u00e7in:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">nmcli con mod ens3 ipv6.method manual \n  ipv6.addresses 2001:db8:abcd:1::10\/64 \n  ipv6.gateway 2001:db8:abcd:1::1\n\nnmcli con up ens3\n<\/code><\/pre>\n<p>DNS sunucular\u0131n\u0131 da IPv6 ile tan\u0131mlamak isterseniz:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">nmcli con mod ens3 ipv6.dns '2001:4860:4860::8888,2001:4860:4860::8844'\n<\/code><\/pre>\n<p>Ard\u0131ndan:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">nmcli con up ens3\n<\/code><\/pre>\n<p>ile ba\u011flant\u0131y\u0131 tekrar etkinle\u015ftirebilirsiniz.<\/p>\n<h3><span id=\"ifcfg_dosyalari_ile_klasik_yapilandirma\">ifcfg dosyalar\u0131 ile klasik yap\u0131land\u0131rma<\/span><\/h3>\n<p>Eski nesil sistemlerde veya NetworkManager devre d\u0131\u015f\u0131 b\u0131rak\u0131lm\u0131\u015f sunucularda \/etc\/sysconfig\/network-scripts\/ifcfg-eth0 gibi dosyalar g\u00f6rebilirsiniz. \u00d6rne\u011fin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">DEVICE=eth0\nBOOTPROTO=none\nONBOOT=yes\nIPADDR=203.0.113.10\nPREFIX=24\nGATEWAY=203.0.113.1\n\nIPV6INIT=yes\nIPV6_AUTOCONF=no\nIPV6ADDR=2001:db8:abcd:1::10\/64\nIPV6_DEFAULTGW=2001:db8:abcd:1::1\n<\/code><\/pre>\n<p>Bu dosyay\u0131 kaydettikten sonra:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">systemctl restart network\n<\/code><\/pre>\n<p>veya NetworkManager kullan\u0131yorsan\u0131z:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">nmcli con reload &amp;&amp; nmcli con up eth0\n<\/code><\/pre>\n<p>komutlar\u0131yla de\u011fi\u015fiklikleri devreye alabilirsiniz.<\/p>\n<h2><span id=\"IPv6_ile_baglanti_testleri_ve_dogrulama_adimlari\">IPv6 ile ba\u011flant\u0131 testleri ve do\u011frulama ad\u0131mlar\u0131<\/span><\/h2>\n<h3><span id=\"Temel_ICMP_testleri_ping_ve_traceroute\">Temel ICMP testleri: ping ve traceroute<\/span><\/h3>\n<p>\u0130lk olarak a\u011f ge\u00e7idiniz ile konu\u015fabildi\u011finizden emin olun:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ping6 -c 4 2001:db8:abcd:1::1\n<\/code><\/pre>\n<p>Bu ba\u015far\u0131l\u0131ysa, global a\u011fdaki bir IPv6 adresine ping atmay\u0131 deneyin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ping6 -c 4 2606:4700:4700::1111\n<\/code><\/pre>\n<p>H\u00e2l\u00e2 sorun ya\u015f\u0131yorsan\u0131z, rota tablosunu kontrol edin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ip -6 route\n<\/code><\/pre>\n<p>\u015euna benzer bir sat\u0131r g\u00f6rmeniz gerekir:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">default via 2001:db8:abcd:1::1 dev eth0\n<\/code><\/pre>\n<h3><span id=\"DNS_ve_HTTP_uzerinden_IPv6_testi\">DNS ve HTTP \u00fczerinden IPv6 testi<\/span><\/h3>\n<p>Sunucudan d\u0131\u015far\u0131ya sadece HTTP \u00fczerinden eri\u015febiliyor musunuz, bunu test etmek i\u00e7in:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">curl -6 https:\/\/ipv6.google.com\n<\/code><\/pre>\n<p>Veya IPv6 ile AAAA kayd\u0131 \u00e7\u00f6zebildi\u011finizi do\u011frulamak i\u00e7in:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">dig AAAA www.dchost.com\n<\/code><\/pre>\n<p>\u00c7\u0131kt\u0131da en az bir IPv6 adresi g\u00f6r\u00fcn\u00fcyorsa DNS taraf\u0131 da sa\u011fl\u0131kl\u0131 \u00e7al\u0131\u015f\u0131yor demektir.<\/p>\n<h3><span id=\"Tarayicidan_disaridan_test\">Taray\u0131c\u0131dan d\u0131\u015far\u0131dan test<\/span><\/h3>\n<p>Sunucunuzda IPv6 yap\u0131land\u0131rmas\u0131n\u0131 yapt\u0131ktan sonra, istemci taraf\u0131nda da IPv6 ile eri\u015fimin sorunsuz oldu\u011funu g\u00f6rmek i\u00e7in test-ipv6.com gibi basit test sitelerini kullanabilirsiniz. Ancak as\u0131l \u00f6nemli olan, kendi alan ad\u0131n\u0131z\u0131 AAAA kayd\u0131 ekledikten sonra IPv6 \u00fczerinden a\u00e7\u0131l\u0131p a\u00e7\u0131lmad\u0131\u011f\u0131n\u0131 test etmektir. Bu k\u0131sm\u0131, DNS b\u00f6l\u00fcm\u00fcnde ad\u0131m ad\u0131m ele alaca\u011f\u0131z.<\/p>\n<h2><span id=\"Guvenlik_duvari_IPv6_trafigini_kontrol_altina_almak\">G\u00fcvenlik duvar\u0131: IPv6 trafi\u011fini kontrol alt\u0131na almak<\/span><\/h2>\n<p>IPv6 ile birlikte sunucunuz asl\u0131nda do\u011frudan global internete a\u00e7\u0131lm\u0131\u015f olur. Bu, NAT arkas\u0131nda kaybolan bir\u00e7ok farkl\u0131 portun art\u0131k tek tek g\u00f6r\u00fcn\u00fcr oldu\u011fu anlam\u0131na gelir. Bu y\u00fczden IPv6 yap\u0131land\u0131rmas\u0131 yaparken mutlaka g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131z\u0131 da g\u00fcncellemeniz gerekir.<\/p>\n<h3><span id=\"UFW_kullanan_sistemlerde_IPv6_destegini_acmak\">UFW kullanan sistemlerde IPv6 deste\u011fini a\u00e7mak<\/span><\/h3>\n<p>Ubuntu sunucularda s\u0131k g\u00f6rd\u00fc\u011f\u00fcm\u00fcz UFW i\u00e7in \u00f6nce yap\u0131land\u0131rma dosyas\u0131n\u0131 kontrol edin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">nano \/etc\/default\/ufw\n<\/code><\/pre>\n<p>\u015eu sat\u0131r\u0131n:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">IPV6=yes\n<\/code><\/pre>\n<p>oldu\u011fundan emin olun. De\u011filse yes yap\u0131p kaydedin. Ard\u0131ndan temel kurallar\u0131 hem IPv4 hem IPv6 i\u00e7in tan\u0131mlayabilirsiniz:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">ufw default deny incoming\nufw default allow outgoing\n\nufw allow 22\/tcp\nufw allow 80\/tcp\nufw allow 443\/tcp\n\nufw enable\n<\/code><\/pre>\n<p>Bu kurallar hem IPv4 hem IPv6 i\u00e7in ge\u00e7erli olacakt\u0131r.<\/p>\n<h3><span id=\"nftables_ile_tek_tabloda_IPv4_IPv6_yonetimi\">nftables ile tek tabloda IPv4 + IPv6 y\u00f6netimi<\/span><\/h3>\n<p>Yeni Linux da\u011f\u0131t\u0131mlar\u0131nda nftables, iptables yerine varsay\u0131lan hale geldi. Tek bir kural seti ile hem IPv4 hem IPv6 trafi\u011fini y\u00f6netebilmek b\u00fcy\u00fck konfor sa\u011fl\u0131yor. nftables ile detayl\u0131 bir g\u00fcvenlik duvar\u0131 kurmak istiyorsan\u0131z, \u00f6zellikle IPv6 kurallar\u0131n\u0131 da kapsayan <a href='https:\/\/www.dchost.com\/blog\/nftables-ile-vps-guvenlik-duvari-rehberi-rate-limit-port-knocking-ve-ipv6-kurallari-nasil-tatli-tatli-kurulur\/'>nftables ile VPS g\u00fcvenlik duvar\u0131 rehberine<\/a> mutlaka g\u00f6z at\u0131n.<\/p>\n<p>Basit bir \u00f6rnek kural seti \u015fu \u015fekilde olabilir:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">table inet filter {\n  chain input {\n    type filter hook input priority 0;\n    policy drop;\n\n    ct state established,related accept\n    iif lo accept\n\n    tcp dport { 22,80,443 } accept\n    ip6 nexthdr icmpv6 accept\n  }\n}\n<\/code><\/pre>\n<p>Burada inet tablosu kullan\u0131ld\u0131\u011f\u0131 i\u00e7in hem IPv4 hem IPv6 trafi\u011fi ayn\u0131 zincirden ge\u00e7er.<\/p>\n<h2><span id=\"DNS_tarafi_AAAA_kaydi_ters_kayitlar_ve_testler\">DNS taraf\u0131: AAAA kayd\u0131, ters kay\u0131tlar ve testler<\/span><\/h2>\n<h3><span id=\"Alan_adiniza_AAAA_kaydi_eklemek\">Alan ad\u0131n\u0131za AAAA kayd\u0131 eklemek<\/span><\/h3>\n<p>IPv6 ile sitenizi yay\u0131nlaman\u0131n en kritik ad\u0131m\u0131, DNS taraf\u0131na do\u011fru AAAA kay\u0131tlar\u0131n\u0131 eklemektir. Temel mant\u0131k basit:<\/p>\n<ul>\n<li>A kayd\u0131 IPv4 adresine i\u015faret eder.<\/li>\n<li>AAAA kayd\u0131 IPv6 adresine i\u015faret eder.<\/li>\n<\/ul>\n<p>\u00d6rne\u011fin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">example.com.   300   IN   A     203.0.113.10\nexample.com.   300   IN   AAAA  2001:db8:abcd:1::10\n<\/code><\/pre>\n<p>DNS y\u00f6netimini DCHost \u00fczerinden yap\u0131yorsan\u0131z, DNS panelinde ayn\u0131 host ad\u0131 i\u00e7in hem A hem AAAA kayd\u0131 olu\u015fturabilirsiniz. E\u011fer DNS stratejinizle ilgili daha kapsaml\u0131 bir plan yapmak istiyorsan\u0131z, DNS kay\u0131t tiplerini ve do\u011fru kullan\u0131m senaryolar\u0131n\u0131 anlatt\u0131\u011f\u0131m\u0131z <a href='https:\/\/www.dchost.com\/blog\/dns-kayitlari-adan-zye-a-aaaa-cname-mx-txt-srv-caa-ve-sizi-yakan-o-kucuk-hatalar\/'>DNS kay\u0131tlar\u0131 A\u2019dan Z\u2019ye rehberini<\/a> incelemenizi \u00f6neririz.<\/p>\n<h3><span id=\"IPv6_icin_ters_DNS_rDNS_ve_e-posta_altyapisi\">IPv6 i\u00e7in ters DNS (rDNS) ve e-posta altyap\u0131s\u0131<\/span><\/h3>\n<p>Sadece web sitesi de\u011fil, e-posta sunucusu da IPv6 \u00fczerinden servis verecekse, PTR (ters DNS) kayd\u0131 da b\u00fcy\u00fck \u00f6nem kazan\u0131r. Bir\u00e7ok al\u0131c\u0131 MTA, IPv6 \u00fczerinden gelen ba\u011flant\u0131larda ters kayd\u0131 titizlikle kontrol eder. E-posta taraf\u0131nda IPv6 ile nelerin de\u011fi\u015fti\u011fini, hangi tuzaklardan ka\u00e7\u0131nman\u0131z gerekti\u011fini ve PTR, HELO, SPF gibi ayarlar\u0131n pratikte nas\u0131l kuruldu\u011funu anlatt\u0131\u011f\u0131m\u0131z <a href='https:\/\/www.dchost.com\/blog\/ipv6-ile-e-posta-teslimi-nasil-rayina-oturur-ptr-helo-spf-ve-rbllerle-saha-rehberi\/'>IPv6 ile e-posta teslimi rehberi<\/a> bu konuda detayl\u0131 bir saha k\u0131lavuzu g\u00f6revi g\u00f6r\u00fcyor.<\/p>\n<p>\u00d6zetle:<\/p>\n<ul>\n<li>Her kritik IPv6 adresiniz i\u00e7in ters kay\u0131t tan\u0131mlay\u0131n.<\/li>\n<li>PTR ismi ile SMTP sunucunuzun HELO\/EHLO \u00e7\u0131kt\u0131s\u0131n\u0131n tutarl\u0131 oldu\u011fundan emin olun.<\/li>\n<li>SPF kay\u0131tlar\u0131n\u0131za IPv6 adres veya bloklar\u0131n\u0131z\u0131 da ekleyin.<\/li>\n<\/ul>\n<h2><span id=\"Web_sunucusunda_IPv6_dinleme_ayarlari\">Web sunucusunda IPv6 dinleme ayarlar\u0131<\/span><\/h2>\n<h3><span id=\"Nginx_uzerinde_IPv6_dinleme\">Nginx \u00fczerinde IPv6 dinleme<\/span><\/h3>\n<p>Bir\u00e7ok Nginx yap\u0131land\u0131rmas\u0131nda sadece IPv4 i\u00e7in listen 80; gibi bir sat\u0131r g\u00f6r\u00fcrs\u00fcn\u00fcz. IPv6 i\u00e7in ek olarak \u015funlar\u0131 tan\u0131mlamal\u0131s\u0131n\u0131z:<\/p>\n<pre class=\"language-nginx line-numbers\"><code class=\"language-nginx\">server {\n    listen 80;\n    listen [::]:80;\n\n    server_name example.com;\n    root \/var\/www\/html;\n}\n<\/code><\/pre>\n<p>Benzer \u015fekilde HTTPS i\u00e7in de:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">listen 443 ssl http2;\nlisten [::]:443 ssl http2;\n<\/code><\/pre>\n<p>sat\u0131rlar\u0131n\u0131 eklemeyi unutmay\u0131n. Ard\u0131ndan Nginx yap\u0131land\u0131rmas\u0131n\u0131 test edip yeniden y\u00fckleyin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">nginx -t\nsystemctl reload nginx\n<\/code><\/pre>\n<h3><span id=\"Apache_uzerinde_IPv6_dinleme\">Apache \u00fczerinde IPv6 dinleme<\/span><\/h3>\n<p>Apache taraf\u0131nda \u00f6ncelikle ports.conf dosyas\u0131nda IPv6 dinleme sat\u0131r\u0131n\u0131 kontrol edin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">Listen 80\nListen [::]:80\n<\/code><\/pre>\n<p>VirtualHost tan\u0131mlar\u0131nda da \u015funa benzer bir yap\u0131 kullan\u0131labilir:<\/p>\n<pre class=\"language-apache line-numbers\"><code class=\"language-apache\">&lt;VirtualHost *:80 [::]:80&gt;\n    ServerName example.com\n    DocumentRoot \/var\/www\/html\n&lt;\/VirtualHost&gt;\n<\/code><\/pre>\n<p>De\u011fi\u015fiklik sonras\u0131 Apache servisini yeniden y\u00fcklemeyi unutmay\u0131n:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">apachectl configtest\nsystemctl reload httpd   # veya apache2\n<\/code><\/pre>\n<h2><span id=\"Gelismis_senaryo_IPv6-only_VPS_ve_NAT64DNS64\">Geli\u015fmi\u015f senaryo: IPv6-only VPS ve NAT64\/DNS64<\/span><\/h2>\n<p>Baz\u0131 modern altyap\u0131larda, maliyet ve adres verimlili\u011fi nedeniyle VPS\u2019ler yaln\u0131zca IPv6 adresi ile sa\u011flanabiliyor ve IPv4 d\u00fcnyas\u0131na NAT64\/DNS64 gibi mekanizmalar \u00fczerinden k\u00f6pr\u00fc kuruluyor. E\u011fer siz de tamamen IPv6-only bir mimariyi d\u00fc\u015f\u00fcn\u00fcyorsan\u0131z, hem uygulama uyumlulu\u011fu hem de d\u0131\u015f d\u00fcnyaya eri\u015fim a\u00e7\u0131s\u0131ndan farkl\u0131 tasar\u0131m kararlar\u0131 alman\u0131z gerekir.<\/p>\n<p>Bu konuyu ad\u0131m ad\u0131m, \u00f6rnek konfig\u00fcrasyonlarla anlatt\u0131\u011f\u0131m\u0131z <a href='https:\/\/www.dchost.com\/blog\/ipv6-only-vps-uzerinde-web-sitesi-yayinlamak-nat64-dns64-ile-ipv4e-nasil-kopru-kurulur\/'>IPv6-only VPS \u00fczerinde web sitesi yay\u0131nlama rehberi<\/a>, IPv6 kurulum rehberimizin do\u011fal bir devam\u0131 niteli\u011findedir. Bu yaz\u0131da anlatt\u0131\u011f\u0131m\u0131z temel yap\u0131 ta\u015flar\u0131n\u0131 \u00f6nce klasik dual-stack (IPv4 + IPv6) modelinde kurup, ard\u0131ndan IPv6-only d\u00fcnyaya ge\u00e7mek \u00e7o\u011fu zaman en sorunsuz yol olur.<\/p>\n<h2><span id=\"Tipik_sorunlar_ve_pratik_cozum_onerileri\">Tipik sorunlar ve pratik \u00e7\u00f6z\u00fcm \u00f6nerileri<\/span><\/h2>\n<h3><span id=\"Sunucuda_IPv6_var_disari_cikiyor_ama_site_IPv6_ile_acilmiyor\">Sunucuda IPv6 var, d\u0131\u015far\u0131 \u00e7\u0131k\u0131yor; ama site IPv6 ile a\u00e7\u0131lm\u0131yor<\/span><\/h3>\n<p>Bu durumda genelde \u00fc\u00e7 ihtimal vard\u0131r:<\/p>\n<ul>\n<li><strong>AAAA kayd\u0131 eksik:<\/strong> Alan ad\u0131n\u0131zda sadece A kayd\u0131 vard\u0131r, AAAA kayd\u0131 yoktur.<\/li>\n<li><strong>Web sunucusu IPv6 \u00fczerinde dinlemiyor:<\/strong> Nginx veya Apache konfig\u00fcrasyonunuzda IPv6 listen sat\u0131rlar\u0131 eksiktir.<\/li>\n<li><strong>G\u00fcvenlik duvar\u0131 IPv6 trafi\u011fini engelliyor:<\/strong> UFW veya nftables kurallar\u0131n\u0131zda 80\/443 portlar\u0131 IPv6 i\u00e7in a\u00e7\u0131k de\u011fildir.<\/li>\n<\/ul>\n<p>Bu \u00fc\u00e7 noktay\u0131 kontrol ettikten sonra genelde sorun h\u0131zl\u0131ca \u00e7\u00f6z\u00fcl\u00fcr.<\/p>\n<h3><span id=\"Ping6_calisiyor_ama_bazi_IPv6_sitelerine_erisemiyorum\">Ping6 \u00e7al\u0131\u015f\u0131yor ama baz\u0131 IPv6 sitelerine eri\u015femiyorum<\/span><\/h3>\n<p>Burada akla ilk gelen sorunlar:<\/p>\n<ul>\n<li>IPv6 i\u00e7in DNS sunucular\u0131n\u0131z d\u00fczg\u00fcn tan\u0131mlanmam\u0131\u015f olabilir.<\/li>\n<li>Varsay\u0131lan IPv6 rotan\u0131z eksik veya yanl\u0131\u015f olabilir.<\/li>\n<li>Upstream tarafta (veri merkezi \u00e7\u0131k\u0131\u015f\u0131nda) ge\u00e7ici bir y\u00f6nlendirme problemi olabilir.<\/li>\n<\/ul>\n<p>\u00d6nce ip -6 route ve resolv.conf i\u00e7eri\u011fini kontrol edin. Ard\u0131ndan sadece IPv6 kullanarak curl -6 ile do\u011frudan IP adresine istek at\u0131p DNS kaynakl\u0131 m\u0131, y\u00f6nlendirme kaynakl\u0131 m\u0131 oldu\u011funu ay\u0131rabilirsiniz.<\/p>\n<h3><span id=\"IPv6_ile_guvenlik_kaygilari_NAT_yoksa_sunucum_daha_mi_savunmasiz\">IPv6 ile g\u00fcvenlik kayg\u0131lar\u0131: NAT yoksa sunucum daha m\u0131 savunmas\u0131z<\/span><\/h3>\n<p>IPv6, NAT olmadan u\u00e7tan uca \u00e7al\u0131\u015ft\u0131\u011f\u0131 i\u00e7in bir\u00e7ok ki\u015fi ilk bak\u0131\u015fta kendini daha savunmas\u0131z hissedebiliyor. Ger\u00e7ekte ise g\u00fcvenlik, NAT\u2019ten \u00e7ok daha fazla g\u00fcvenlik duvar\u0131 ve do\u011fru servis s\u0131n\u0131rland\u0131rmas\u0131 ile ilgilidir. Do\u011fru kurgulanm\u0131\u015f bir nftables veya UFW yap\u0131land\u0131rmas\u0131, IPv6\u2019da da en az IPv4 kadar sa\u011flam bir d\u0131\u015f kabuk sa\u011flar. G\u00fcvenlik mimarinizde IPv6\u2019y\u0131 hesaba katmak, g\u00fcncel siber tehditlere kar\u015f\u0131 koyman\u0131n da do\u011fal bir par\u00e7as\u0131. Bu ba\u011flam\u0131 daha geni\u015f a\u00e7\u0131dan g\u00f6rmek isterseniz, <a href='https:\/\/www.dchost.com\/blog\/siber-guvenlik-tehditlerinde-artis-sunucu-ve-hosting-tarafinda-ne-yapmalisiniz\/'>siber g\u00fcvenlik tehditlerinde art\u0131\u015f ve sunucu taraf\u0131 \u00f6nlemler<\/a> yaz\u0131m\u0131z\u0131 da okuman\u0131z\u0131 \u00f6neririz.<\/p>\n<h2><span id=\"Operasyonel_oneriler_IPv6yi_ek_yuk_degil_rahatlik_haline_getirmek\">Operasyonel \u00f6neriler: IPv6\u2019y\u0131 ek y\u00fck de\u011fil, rahatl\u0131k haline getirmek<\/span><\/h2>\n<h3><span id=\"Adres_planlamasi_ve_dokumantasyon\">Adres planlamas\u0131 ve dok\u00fcmantasyon<\/span><\/h3>\n<p>IPv6 d\u00fcnyas\u0131nda \u00e7ok b\u00fcy\u00fck bloklara sahip olmak, adresleri rastgele da\u011f\u0131tabilece\u011finiz anlam\u0131na gelmiyor. \u00d6zellikle birden fazla VPS, staging ve prod ortamlar\u0131, farkl\u0131 veri merkezleri i\u015fin i\u00e7ine girdi\u011finde, basit ama tutarl\u0131 bir adres plan\u0131 i\u015finizi ciddi \u015fekilde kolayla\u015ft\u0131r\u0131r. \u00d6rne\u011fin:<\/p>\n<ul>\n<li>2001:db8:abcd:10::\/64 blo\u011funu prod web sunucular\u0131na<\/li>\n<li>2001:db8:abcd:20::\/64 blo\u011funu veritabanlar\u0131na<\/li>\n<li>2001:db8:abcd:30::\/64 blo\u011funu staging ortam\u0131na<\/li>\n<\/ul>\n<p>ay\u0131rmak, log analizi ve sorun giderme s\u0131ras\u0131nda h\u0131zl\u0131ca hangi sunucunun ne i\u015f yapt\u0131\u011f\u0131n\u0131 anlaman\u0131z\u0131 sa\u011flar.<\/p>\n<h3><span id=\"Monitoring_ve_loglarda_IPv6_gorunurlugu\">Monitoring ve loglarda IPv6 g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc<\/span><\/h3>\n<p>IPv6\u2019y\u0131 devreye ald\u0131ktan sonra, izleme ve loglama sistemlerinizin de IPv6 adresleriyle uyumlu oldu\u011fundan emin olun. \u00d6zellikle firewall loglar\u0131, web sunucusu eri\u015fim loglar\u0131 ve IDS\/IPS sistemlerinde IPv6 format\u0131ndaki adreslerin do\u011fru parse edildi\u011fini, dashboard ve alarm kurallar\u0131n\u0131n bu adresleri tan\u0131yabildi\u011fini test etmek gerekir. DCHost olarak VPS izleme, merkezi loglama ve uyar\u0131 mekanizmalar\u0131n\u0131 ele ald\u0131\u011f\u0131m\u0131z <a href='https:\/\/www.dchost.com\/blog\/vps-izleme-ve-uyari-nasil-kurulur-prometheus-grafana-ve-node-exporter-ile-sessiz-alarmlari-konusturmak\/'>VPS izleme ve uyar\u0131 rehberinde<\/a> bu konular\u0131 daha geni\u015f \u00e7er\u00e7evede i\u015fliyoruz.<\/p>\n<h2><span id=\"Sonuc_IPv6yi_bugun_devreye_almak_yarinki_ag_mimarinizi_sadelestirir\">Sonu\u00e7: IPv6\u2019y\u0131 bug\u00fcn devreye almak, yar\u0131nki a\u011f mimarinizi sadele\u015ftirir<\/span><\/h2>\n<p>Bug\u00fcn elinizde \u00e7al\u0131\u015fan bir VPS, \u00fcst\u00fcnde de sorunsuz d\u00f6nen bir proje varsa, IPv6\u2019y\u0131 \u00e7o\u011fu zaman acil bir ihtiya\u00e7 gibi g\u00f6rmeyebilirsiniz. Ama IPv4 adres maliyetlerinin ve karma\u015f\u0131kl\u0131\u011f\u0131n\u0131n nereye gitti\u011fini y\u0131llard\u0131r yak\u0131ndan izliyoruz: her y\u0131l biraz daha pahal\u0131, her y\u0131l biraz daha k\u0131s\u0131tl\u0131 ve her y\u0131l biraz daha \u00e7ok NAT, proxy ve ara katman gerektiriyor. IPv6\u2019y\u0131 erken benimseyen ekipler ise tam tersini ya\u015f\u0131yor; basitle\u015fen a\u011f politikalar\u0131, daha \u00f6ng\u00f6r\u00fclebilir ba\u011flant\u0131 senaryolar\u0131 ve b\u00fcy\u00fcd\u00fck\u00e7e rahatlayan bir adres alan\u0131.<\/p>\n<p>Bu rehberde, DCHost \u00fczerindeki tipik bir VPS senaryosunu temel alarak IPv6 adresini nas\u0131l tan\u0131mlayaca\u011f\u0131n\u0131z\u0131, Debian, Ubuntu, AlmaLinux gibi yayg\u0131n da\u011f\u0131t\u0131mlarda a\u011f yap\u0131land\u0131rmas\u0131n\u0131 nas\u0131l yapaca\u011f\u0131n\u0131z\u0131, g\u00fcvenlik duvar\u0131 ve DNS taraf\u0131nda hangi ayarlar\u0131 ihmal etmemeniz gerekti\u011fini ad\u0131m ad\u0131m anlatt\u0131k. \u015eimdi atabilece\u011finiz en pratik ad\u0131m, mevcut VPS\u2019inize IPv6 adresi tan\u0131mlat\u0131p burada anlatt\u0131\u011f\u0131m\u0131z kontrolleri s\u0131ras\u0131yla uygulamak. Yeni bir proje planl\u0131yorsan\u0131z, do\u011frudan IPv4 + IPv6 dual-stack tasarlayarak gelecekteki ge\u00e7i\u015f derdini bug\u00fcnden ortadan kald\u0131rabilirsiniz.<\/p>\n<p>IPv6 destekli VPS, <a href=\"https:\/\/www.dchost.com\/tr\/fiziksel-sunucu\">dedicated sunucu<\/a> veya colocation altyap\u0131s\u0131na ihtiyac\u0131n\u0131z varsa, DCHost ekibiyle ileti\u015fime ge\u00e7erek projenize uygun, \u00f6l\u00e7eklenebilir ve s\u00fcrd\u00fcr\u00fclebilir bir IP adres plan\u0131 kurgulamak i\u00e7in birlikte yol haritas\u0131 \u00e7\u0131karabiliriz.<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>\u0130&ccedil;indekiler1 VPS sunucunuzda IPv6 kullanmaya neden hemen ba\u015flamal\u0131s\u0131n\u0131z2 IPv6 temelleri: VPS \u00f6zelinde bilmeniz gerekenler2.1 IPv4 ile IPv6 aras\u0131ndaki temel farklar2.2 VPS ba\u011flam\u0131nda IPv6 nas\u0131l tahsis edilir3 Haz\u0131rl\u0131k: Sunucuda IPv6 deste\u011fini ve a\u011f arabirimini kontrol etmek3.1 \u00c7ekirdek ve sistemde IPv6 mod\u00fcl\u00fcn\u00fc kontrol etmek3.2 A\u011f arabirimini ve mevcut adresleri listelemek4 Debian ve Ubuntu sunucularda IPv6 yap\u0131land\u0131rmas\u01314.1 Netplan [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2539,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-2538","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts\/2538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/comments?post=2538"}],"version-history":[{"count":0,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts\/2538\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/media\/2539"}],"wp:attachment":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/media?parent=2538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/categories?post=2538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/tags?post=2538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}