{"id":509,"date":"2026-09-06T17:58:34","date_gmt":"2026-09-06T17:58:34","guid":{"rendered":"https:\/\/www.vps.tc\/blog\/?p=509"},"modified":"2026-09-13T12:40:33","modified_gmt":"2026-09-13T12:40:33","slug":"proxy-nedir-proxy-sunucu-ne-ise-yarar","status":"publish","type":"post","link":"https:\/\/www.vps.tc\/blog\/tr\/proxy-nedir-proxy-sunucu-ne-ise-yarar\/","title":{"rendered":"Proxy Nedir? Proxy Sunucu Ne \u0130\u015fe Yarar?"},"content":{"rendered":"<div class=\"aiw-toc\" style=\"border:1px solid #dbe3ea;border-radius:8px;padding:16px 20px;margin:0 0 28px\"><strong>\u0130\u00e7indekiler<\/strong><\/p>\n<ol style=\"margin:10px 0 0;padding-left:22px\">\n<li><a href=\"#proxy-nedir-proxy-sunucu-ne-ise-yarar\">Proxy nedir, proxy sunucu ne i\u015fe yarar?<\/a><\/li>\n<li><a href=\"#proxy-sunucu-nasil-calisir\">Proxy sunucu nas\u0131l \u00e7al\u0131\u015f\u0131r?<\/a><\/li>\n<li><a href=\"#proxy-turleri-nelerdir\">Proxy t\u00fcrleri nelerdir?<\/a><\/li>\n<li><a href=\"#proxy-hangi-amaclarla-kullanilir\">Proxy hangi ama\u00e7larla kullan\u0131l\u0131r?<\/a><\/li>\n<li><a href=\"#proxy-ile-vpn-arasindaki-fark-nedir\">Proxy ile VPN aras\u0131ndaki fark nedir?<\/a><\/li>\n<li><a href=\"#linuxta-proxy-nasil-test-edilir\">Linux&#039;ta proxy nas\u0131l test edilir?<\/a><\/li>\n<li><a href=\"#reverse-proxy-icin-basit-nginx-ornegi\">Reverse proxy i\u00e7in basit Nginx \u00f6rne\u011fi<\/a><\/li>\n<li><a href=\"#ucretsiz-ve-acik-proxy-kullanmak-guvenli-mi\">\u00dccretsiz ve a\u00e7\u0131k proxy kullanmak g\u00fcvenli mi?<\/a><\/li>\n<li><a href=\"#proxy-secerken-nelere-bakilmali\">Proxy se\u00e7erken nelere bak\u0131lmal\u0131?<\/a><\/li>\n<li><a href=\"#proxy-kullanirken-sik-yapilan-hatalar\">Proxy kullan\u0131rken s\u0131k yap\u0131lan hatalar<\/a><\/li>\n<li><a href=\"#sik-sorulan-sorular\">S\u0131k Sorulan Sorular<\/a><\/li>\n<\/ol>\n<\/div>\n<h2 id=\"proxy-nedir-proxy-sunucu-ne-ise-yarar\">Proxy nedir, proxy sunucu ne i\u015fe yarar?<\/h2>\n<p>Proxy, bilgisayar\u0131n\u0131z ile internet \u00fczerindeki hedef sunucu aras\u0131nda duran ve istekleri sizin ad\u0131n\u0131za ileten arac\u0131 sunucudur. Hedef site ba\u011flant\u0131y\u0131 do\u011frudan cihaz\u0131n\u0131zdan de\u011fil, proxy&#8217;nin IP adresinden g\u00f6r\u00fcr. Bu yap\u0131 eri\u015fim kontrol\u00fc, \u00f6nbellekleme, kay\u0131t tutma, trafik filtreleme ve baz\u0131 durumlarda gizlilik i\u00e7in kullan\u0131labilir. Proxy tek ba\u015f\u0131na anonimlik veya g\u00fcvenlik garantisi vermez.<\/p>\n<p>\u0130lk bak\u0131\u015fta proxy&#8217;yi yaln\u0131zca &#8220;IP adresini de\u011fi\u015ftiren servis&#8221; sanmak kolay. Ben de i\u015fe yeni ba\u015flad\u0131\u011f\u0131m y\u0131llarda konuyu b\u00f6yle d\u00fc\u015f\u00fcn\u00fcyordum. Bir VPS \u00fczerindeki uygulaman\u0131n d\u0131\u015f API&#8217;ye neden eri\u015femedi\u011fini ara\u015ft\u0131r\u0131rken sorunun uygulamada de\u011fil, \u00e7\u0131k\u0131\u015f trafi\u011fini zorunlu proxy \u00fczerinden ge\u00e7iren a\u011f kural\u0131nda oldu\u011funu g\u00f6rd\u00fcm. Proxy&#8217;nin ne yapt\u0131\u011f\u0131n\u0131 anlamadan yaln\u0131zca adresi de\u011fi\u015ftirmek, ar\u0131zay\u0131 ba\u015fka bir katmana ta\u015f\u0131maktan ibaret.<\/p>\n<h2 id=\"proxy-sunucu-nasil-calisir\">Proxy sunucu nas\u0131l \u00e7al\u0131\u015f\u0131r?<\/h2>\n<p>Normal bir web iste\u011finde taray\u0131c\u0131n\u0131z hedef alan ad\u0131n\u0131 \u00e7\u00f6zer, hedef sunucuyla ba\u011flant\u0131 kurar ve HTTP iste\u011fini do\u011frudan g\u00f6nderir. Proxy kullan\u0131ld\u0131\u011f\u0131nda ak\u0131\u015f de\u011fi\u015fir:<\/p>\n<ol>\n<li>\u0130stemci proxy sunucusuna ba\u011flan\u0131r.<\/li>\n<li>Proxy, istenen hedefe kendi ba\u011flant\u0131s\u0131n\u0131 a\u00e7ar.<\/li>\n<li>Hedef sunucudan gelen yan\u0131t\u0131 istemciye iletir.<\/li>\n<\/ol>\n<p>\u00d6rne\u011fin taray\u0131c\u0131n\u0131z <code>example.com<\/code> adresine do\u011frudan ba\u011flanmak yerine <code>proxy.example.net:8080<\/code> adresine ba\u011flan\u0131yorsa, HTTP proxy iste\u011fin hedefini g\u00f6r\u00fcr ve sizin i\u00e7in ba\u011flant\u0131y\u0131 kurar. Hedef sunucu \u00e7o\u011fu durumda istemcinin genel IP adresi yerine proxy&#8217;nin IP adresini g\u00f6r\u00fcr.<\/p>\n<p>Buradaki &#8220;\u00e7o\u011fu durumda&#8221; ifadesi \u00f6nemli. Proxy, HTTP ba\u015fl\u0131klar\u0131na <code>X-Forwarded-For<\/code>, <code>Forwarded<\/code> veya benzeri alanlar ekleyebilir. Proxy y\u00f6neticisi bu ba\u015fl\u0131klarla istemcinin ger\u00e7ek IP adresini hedefe bildirebilir. Proxy sa\u011flay\u0131c\u0131s\u0131 ba\u011flant\u0131 kay\u0131tlar\u0131n\u0131 da tutuyor olabilir. Bir IP&#8217;nin g\u00f6r\u00fcnmemesi, kimli\u011fin b\u00fct\u00fcn katmanlarda gizlendi\u011fi anlam\u0131na gelmez.<\/p>\n<h3>\u0130stek hangi katmanda y\u00f6nlendirilir?<\/h3>\n<p>HTTP proxy&#8217;ler uygulama katman\u0131nda \u00e7al\u0131\u015f\u0131r ve HTTP ile HTTPS isteklerini anlayabilir. HTTPS i\u00e7in istemci \u00e7o\u011funlukla proxy&#8217;ye <code>CONNECT<\/code> iste\u011fi g\u00f6nderir; proxy de hedef sunucuya bir TCP t\u00fcneli a\u00e7ar. TLS \u015fifrelemesi istemci ile hedef aras\u0131nda devam ediyorsa proxy i\u00e7eri\u011fi okuyamaz, yaln\u0131zca ba\u011flant\u0131n\u0131n kurulmas\u0131na arac\u0131l\u0131k eder.<\/p>\n<p>TLS sonland\u0131ran kurumsal bir proxy ise \u015fifreli trafi\u011fi a\u00e7\u0131p inceleyebilir. Bu yap\u0131da istemcilere kurumun sertifika otoritesi y\u00fcklenir. Sertifika do\u011frulamas\u0131 do\u011fru kurulmazsa taray\u0131c\u0131 uyar\u0131lar\u0131 g\u00f6r\u00fcl\u00fcr. Daha k\u00f6t\u00fcs\u00fc, kullan\u0131c\u0131lar bu uyar\u0131lar\u0131 al\u0131\u015fkanl\u0131kla ge\u00e7meye ba\u015flayabilir.<\/p>\n<h2 id=\"proxy-turleri-nelerdir\">Proxy t\u00fcrleri nelerdir?<\/h2>\n<p>&#8220;Proxy&#8221; tek bir teknoloji ad\u0131 de\u011fildir. Kullan\u0131m bi\u00e7imine ve trafi\u011fin hangi y\u00f6nde akt\u0131\u011f\u0131na g\u00f6re farkl\u0131 t\u00fcrlerden s\u00f6z ederiz.<\/p>\n<h3>Forward proxy<\/h3>\n<p>Forward proxy, istemcilerin d\u0131\u015f d\u00fcnyaya \u00e7\u0131k\u0131\u015f\u0131n\u0131 temsil eder. \u015eirket a\u011flar\u0131nda \u00e7al\u0131\u015fanlar\u0131n internet eri\u015fimini filtrelemek, izin verilen alan adlar\u0131n\u0131 s\u0131n\u0131rlamak, bant geni\u015fli\u011fi kullan\u0131m\u0131n\u0131 izlemek veya s\u0131k istenen dosyalar\u0131 \u00f6nbelle\u011fe almak i\u00e7in kullan\u0131l\u0131r. \u0130stemciler proxy ayar\u0131n\u0131 bilir ve isteklerini buraya g\u00f6nderir.<\/p>\n<h3>Reverse proxy<\/h3>\n<p>Reverse proxy, sunucular\u0131n \u00f6n\u00fcnde durur. Ziyaret\u00e7i reverse proxy&#8217;ye ba\u011flan\u0131r; proxy iste\u011fi arka u\u00e7taki uygulamaya iletir. Nginx, HAProxy, Traefik ve Caddy bu ama\u00e7la s\u0131k kullan\u0131l\u0131r.<\/p>\n<p>Bir VPS \u00fczerinde web uygulaman\u0131z\u0131n \u00f6n\u00fcne Nginx koydu\u011funuzda TLS sonland\u0131rma, alan ad\u0131na g\u00f6re y\u00f6nlendirme, statik dosya sunma ve temel h\u0131z s\u0131n\u0131rlama i\u015flerini uygulama sunucusundan ay\u0131rabilirsiniz. Bu yap\u0131, <strong><a href=\"https:\/\/www.vps.tc\/blog\/tr\/vps-nedir-ne-ise-yarar-baslangic-seviyesi-detayli-rehber\/\">VPS Nedir, Ne \u0130\u015fe Yarar? Ba\u015flang\u0131\u00e7 Seviyesi Detayl\u0131 Rehber<\/a><\/strong> i\u00e7inde anlat\u0131lan kaynak planlamas\u0131yla do\u011frudan ili\u015fkilidir; reverse proxy i\u00e7in RAM, ba\u011flant\u0131 say\u0131s\u0131 ve a\u011f kapasitesini hesaba katmak gerekir.<\/p>\n<h3>HTTP ve HTTPS proxy<\/h3>\n<p>HTTP proxy, HTTP isteklerini yorumlayabilir. HTTPS isteklerinde ise \u00e7o\u011fu zaman <code>CONNECT<\/code> y\u00f6ntemiyle \u015fifreli t\u00fcnel a\u00e7ar. Proxy&#8217;nin HTTPS adresini desteklemesi, proxy ile hedef aras\u0131ndaki t\u00fcm veriyi okuyabildi\u011fi anlam\u0131na gelmez.<\/p>\n<h3>SOCKS4 ve SOCKS5 proxy<\/h3>\n<p>SOCKS, belirli bir uygulama protokol\u00fcne ba\u011fl\u0131 kalmadan TCP ba\u011flant\u0131lar\u0131n\u0131, SOCKS5 ile birlikte UDP trafi\u011fini de y\u00f6nlendirebilir. SSH t\u00fcneli kurarken kullan\u0131lan <code>ssh -D<\/code> se\u00e7ene\u011fi, yerel makinede SOCKS5 benzeri bir dinleme noktas\u0131 olu\u015fturur:<\/p>\n<pre><code>ssh -N -D 127.0.0.1:1080 kullanici@sunucu.example.com<\/code><\/pre>\n<p>Bu komut uzak sunucuda bir web proxy servisi kurmaz; sizin bilgisayar\u0131n\u0131zda SOCKS trafi\u011fini SSH t\u00fcnelinden ge\u00e7irecek yerel bir port a\u00e7ar. <code>-N<\/code> uzak tarafta komut \u00e7al\u0131\u015ft\u0131rmaz, <code>-D<\/code> ise dinamik port y\u00f6nlendirmesini etkinle\u015ftirir.<\/p>\n<p>Ard\u0131ndan SOCKS5 destekleyen bir ara\u00e7la ba\u011flant\u0131y\u0131 test edebilirsiniz:<\/p>\n<pre><code>curl --proxy socks5h:\/\/127.0.0.1:1080 https:\/\/ifconfig.me<\/code><\/pre>\n<p>Buradaki <code>socks5h<\/code> kullan\u0131m\u0131nda DNS \u00e7\u00f6z\u00fcmlemesi de proxy \u00fczerinden yap\u0131l\u0131r. Yaln\u0131zca <code>socks5<\/code> kullan\u0131l\u0131rsa baz\u0131 ara\u00e7larda DNS sorgusu yerel makineden \u00e7\u0131kabilir. Bu k\u00fc\u00e7\u00fck ayr\u0131nt\u0131, &#8220;IP de\u011fi\u015fti ama DNS iste\u011fim neden yerelden g\u00f6r\u00fcn\u00fcyor?&#8221; sorusunun s\u0131k nedenlerinden biridir.<\/p>\n<h3>\u015eeffaf proxy<\/h3>\n<p>\u015eeffaf proxy, istemcinin ayr\u0131ca proxy ayar\u0131 yapmas\u0131n\u0131 gerektirmeden trafi\u011fi yakalar. Kurumsal a\u011flarda, internet servis sa\u011flay\u0131c\u0131lar\u0131n\u0131n altyap\u0131s\u0131nda veya g\u00fcvenlik cihazlar\u0131nda g\u00f6r\u00fclebilir. Kullan\u0131c\u0131 HTTP iste\u011finin proxy&#8217;den ge\u00e7ti\u011fini fark etmeyebilir. HTTPS trafi\u011finde \u015feffaf y\u00f6nlendirme yaln\u0131zca t\u00fcnelleme yap\u0131yorsa i\u00e7eri\u011fi okuyamaz; TLS incelemesi i\u00e7in ayr\u0131ca sertifika ve politika yap\u0131land\u0131rmas\u0131 gerekir.<\/p>\n<h2 id=\"proxy-hangi-amaclarla-kullanilir\">Proxy hangi ama\u00e7larla kullan\u0131l\u0131r?<\/h2>\n<ul>\n<li><strong>Eri\u015fim kontrol\u00fc:<\/strong> Belirli alan adlar\u0131n\u0131, URL yollar\u0131n\u0131 veya i\u00e7erik kategorilerini engellemek.<\/li>\n<li><strong>Reverse proxy ve y\u00fck da\u011f\u0131t\u0131m\u0131:<\/strong> \u0130stekleri birden fazla uygulama sunucusuna y\u00f6nlendirmek.<\/li>\n<li><strong>\u00d6nbellekleme:<\/strong> De\u011fi\u015fmeyen statik i\u00e7erikleri tekrar tekrar arka u\u00e7tan almamak.<\/li>\n<li><strong>IP politikalar\u0131:<\/strong> Hedef servisin yaln\u0131zca izin verilen \u00e7\u0131k\u0131\u015f IP&#8217;lerinden gelen ba\u011flant\u0131lar\u0131 kabul etmesini sa\u011flamak.<\/li>\n<li><strong>G\u00f6zlem ve kay\u0131t:<\/strong> Hangi istemcinin hangi hedefe ne zaman ba\u011fland\u0131\u011f\u0131n\u0131 denetlemek.<\/li>\n<li><strong>G\u00fcvenlik katman\u0131:<\/strong> Uygulama sunucusunu do\u011frudan internete a\u00e7mak yerine \u00f6n tarafta filtreleme yapmak.<\/li>\n<li><strong>\u0130\u00e7 servisleri yay\u0131nlama:<\/strong> Yerel a\u011fdaki uygulamalar\u0131 alan ad\u0131 ve TLS ile d\u0131\u015far\u0131 sunmak.<\/li>\n<\/ul>\n<p>Proxy&#8217;nin kullan\u0131m amac\u0131, g\u00fcvenlik de\u011ferlendirmesini de\u011fi\u015ftirir. Bir reverse proxy web uygulamas\u0131n\u0131 do\u011frudan internete a\u00e7maktan daha d\u00fczenli bir mimari sa\u011flayabilir; yine de uygulamadaki kimlik do\u011frulama a\u00e7\u0131\u011f\u0131n\u0131 kapatmaz. Bir forward proxy de zararl\u0131 i\u00e7eri\u011fi kendili\u011finden g\u00fcvenli h\u00e2le getirmez.<\/p>\n<h2 id=\"proxy-ile-vpn-arasindaki-fark-nedir\">Proxy ile VPN aras\u0131ndaki fark nedir?<\/h2>\n<p>Proxy \u00e7o\u011funlukla belirli bir uygulaman\u0131n veya protokol\u00fcn trafi\u011fini y\u00f6nlendirir. VPN ise i\u015fletim sistemi seviyesinde bir t\u00fcnel kurarak daha geni\u015f bir trafik k\u00fcmesini ta\u015f\u0131yabilir. Ayr\u0131nt\u0131 kullan\u0131lan yaz\u0131l\u0131ma g\u00f6re de\u011fi\u015fir. SOCKS proxy&#8217;yi desteklemeyen bir uygulama proxy&#8217;den yararlanamaz; sistem seviyesinde \u00e7al\u0131\u015fan VPN istemcisi ise genellikle uygulama se\u00e7mez.<\/p>\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>Proxy<\/th>\n<th>VPN<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Kapsam<\/td>\n<td>Tek uygulama veya belirli protokol<\/td>\n<td>Genellikle sistemdeki t\u00fcm se\u00e7ili trafik<\/td>\n<\/tr>\n<tr>\n<td>\u015eifreleme<\/td>\n<td>Proxy t\u00fcr\u00fcne ve kullan\u0131lan protokole ba\u011fl\u0131<\/td>\n<td>T\u00fcnel protokol\u00fcne g\u00f6re tasarlan\u0131r<\/td>\n<\/tr>\n<tr>\n<td>Kurulum<\/td>\n<td>Taray\u0131c\u0131 ya da uygulama ayar\u0131 yeterli olabilir<\/td>\n<td>\u0130\u015fletim sistemi veya ayr\u0131 istemci yap\u0131land\u0131r\u0131l\u0131r<\/td>\n<\/tr>\n<tr>\n<td>G\u00f6r\u00fcn\u00fcr IP<\/td>\n<td>Proxy&#8217;nin \u00e7\u0131k\u0131\u015f IP&#8217;si<\/td>\n<td>VPN sunucusunun \u00e7\u0131k\u0131\u015f IP&#8217;si<\/td>\n<\/tr>\n<tr>\n<td>G\u00fcven noktas\u0131<\/td>\n<td>Proxy i\u015fletmecisi ve hedef servis<\/td>\n<td>VPN i\u015fletmecisi ve hedef servis<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>VPN \u015fifreli oldu\u011fu i\u00e7in otomatik olarak anonim de\u011fildir. VPN sa\u011flay\u0131c\u0131s\u0131 ba\u011flant\u0131 metadatas\u0131n\u0131 g\u00f6rebilir; proxy i\u015fletmecisi de kendi \u00fczerinden ge\u00e7en trafi\u011fi kaydedebilir. G\u00fcven modelini anlamadan yaln\u0131zca &#8220;hangisi daha g\u00fcvenli?&#8221; diye sormak eksik kal\u0131r.<\/p>\n<h2 id=\"linuxta-proxy-nasil-test-edilir\">Linux&#8217;ta proxy nas\u0131l test edilir?<\/h2>\n<p>\u00d6nce ba\u011flant\u0131n\u0131n proxy \u00fczerinden ge\u00e7ip ge\u00e7medi\u011fini do\u011frulamak gerekir. Ben bu t\u00fcr kontrollerde taray\u0131c\u0131 ayar\u0131na g\u00fcvenmek yerine terminalden k\u00fc\u00e7\u00fck bir test yapar\u0131m. Ortam de\u011fi\u015fkenleriyle \u00e7al\u0131\u015fan ara\u00e7lar i\u00e7in \u00f6rnek:<\/p>\n<pre><code>export HTTP_PROXY=http:\/\/proxy.example.net:8080<br>export HTTPS_PROXY=http:\/\/proxy.example.net:8080<br>curl -I https:\/\/example.com<\/code><\/pre>\n<p>Buradaki <code>-I<\/code> yaln\u0131zca HTTP ba\u015fl\u0131klar\u0131n\u0131 ister; g\u00f6vdeyi indirmedi\u011fi i\u00e7in h\u0131zl\u0131 bir kontrol sa\u011flar. Proxy kimlik do\u011frulamas\u0131 gerekiyorsa kullan\u0131c\u0131 ad\u0131 ve parolay\u0131 komut sat\u0131r\u0131na yazmak yerine g\u00fcvenli bir yap\u0131land\u0131rma dosyas\u0131 veya gizli de\u011fi\u015fken kullan\u0131n. Shell ge\u00e7mi\u015finde parola b\u0131rakmak, test s\u0131ras\u0131nda fark edilmeyen klasik hatalardan biridir.<\/p>\n<p>Proxy olmadan ve proxy ile g\u00f6r\u00fcnen \u00e7\u0131k\u0131\u015f adresini kar\u015f\u0131la\u015ft\u0131rmak i\u00e7in:<\/p>\n<pre><code>curl https:\/\/ifconfig.me<br>curl --proxy http:\/\/proxy.example.net:8080 https:\/\/ifconfig.me<\/code><\/pre>\n<p>\u0130kinci komutun \u00e7\u0131kt\u0131s\u0131 proxy&#8217;nin \u00e7\u0131k\u0131\u015f IP&#8217;sini g\u00f6stermelidir. Ayn\u0131 sonucu g\u00f6rmek proxy&#8217;nin \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 d\u00fc\u015f\u00fcnd\u00fcr\u00fcr; fakat hedef servis proxy trafi\u011fini engelliyor olabilir. Bu nedenle tek bir web sitesinin cevab\u0131yla karar vermek yerine proxy loglar\u0131n\u0131 ve <code>curl -v<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 da kontrol ederim.<\/p>\n<pre><code>curl -v --proxy http:\/\/proxy.example.net:8080 https:\/\/example.com<\/code><\/pre>\n<p><code>-v<\/code> ayr\u0131nt\u0131l\u0131 ba\u011flant\u0131 ak\u0131\u015f\u0131n\u0131 g\u00f6sterir. HTTPS iste\u011finde proxy&#8217;ye g\u00f6nderilen <code>CONNECT example.com:443<\/code> sat\u0131r\u0131n\u0131 g\u00f6rebilirsiniz. \u00c7\u0131kt\u0131da parolalar\u0131 veya eri\u015fim belirte\u00e7lerini payla\u015fmay\u0131n. Ben terminal \u00e7\u0131kt\u0131s\u0131n\u0131 destek talebine yap\u0131\u015ft\u0131rmadan \u00f6nce bu alanlar\u0131 birka\u00e7 kez kontrol ederim.<\/p>\n<h2 id=\"reverse-proxy-icin-basit-nginx-ornegi\">Reverse proxy i\u00e7in basit Nginx \u00f6rne\u011fi<\/h2>\n<p>Bir uygulaman\u0131n yaln\u0131zca <code>127.0.0.1:3000<\/code> \u00fczerinde dinledi\u011fini varsayal\u0131m. Nginx d\u0131\u015far\u0131dan gelen ba\u011flant\u0131lar\u0131 kar\u015f\u0131lay\u0131p iste\u011fi uygulamaya iletebilir:<\/p>\n<pre><code>server {<br>    listen 80;<br>    server_name app.example.com;<br><br>    location \/ {<br>        proxy_pass http:\/\/127.0.0.1:3000;<br>        proxy_http_version 1.1;<br>        proxy_set_header Host $host;<br>        proxy_set_header X-Real-IP $remote_addr;<br>        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;<br>        proxy_set_header X-Forwarded-Proto $scheme;<br>    }<br>}<\/code><\/pre>\n<p><code>Host<\/code> ve <code>X-Forwarded-For<\/code> ba\u015fl\u0131klar\u0131 uygulaman\u0131n ger\u00e7ek alan ad\u0131n\u0131 ve istemci zincirini anlamas\u0131na yard\u0131mc\u0131 olabilir. Uygulaman\u0131n bu ba\u015fl\u0131klara ko\u015fulsuz g\u00fcvenmesi do\u011fru de\u011fildir; yaln\u0131zca g\u00fcvendi\u011finiz reverse proxy&#8217;nin ekledi\u011fi de\u011ferleri kabul edecek \u015fekilde yap\u0131land\u0131r\u0131lmal\u0131d\u0131r.<\/p>\n<p>Yap\u0131land\u0131rmay\u0131 etkinle\u015ftirmeden \u00f6nce s\u00f6zdizimini kontrol ederim:<\/p>\n<pre><code>sudo nginx -t<br>sudo systemctl reload nginx<\/code><\/pre>\n<p><code>reload<\/code> mevcut ba\u011flant\u0131lar\u0131 m\u00fcmk\u00fcn oldu\u011funca kesmeden yap\u0131land\u0131rmay\u0131 yeniden y\u00fckler. Benim ilk y\u0131llar\u0131mda al\u0131\u015fkanl\u0131k &#8220;dosyay\u0131 de\u011fi\u015ftir, servisi restart et&#8221; \u015feklindeydi; gereksiz restart, k\u00fc\u00e7\u00fck bir yap\u0131land\u0131rma de\u011fi\u015fikli\u011fini k\u0131sa bir kesintiye \u00e7evirebilir. \u00d6nce test, sonra reload daha sakin bir y\u00f6ntemdir.<\/p>\n<p>Bu reverse proxy&#8217;yi HTTPS ile yay\u0131nlayacaksan\u0131z alan ad\u0131 DNS kayd\u0131, sertifika ve uygulaman\u0131n do\u011fru proxy ba\u015fl\u0131klar\u0131n\u0131 \u00fcretmesi birlikte kontrol edilmelidir. Alan ad\u0131 taraf\u0131nda DNS davran\u0131\u015f\u0131 i\u00e7in <strong><a href=\"https:\/\/www.vps.tc\/blog\/tr\/internet-protokolleri-tcp-ipden-http-3e-derinlemesine-bakis\/\">\u0130nternet Protokolleri: TCP\/IP&#8217;den HTTP\/3&#8217;e Derinlemesine Bak\u0131\u015f<\/a><\/strong> ba\u015fl\u0131\u011f\u0131 alt\u0131nda anlat\u0131lan \u00e7\u00f6z\u00fcmleme ve ba\u011flant\u0131 katmanlar\u0131n\u0131 bilmek i\u015finizi kolayla\u015ft\u0131r\u0131r.<\/p>\n<h2 id=\"ucretsiz-ve-acik-proxy-kullanmak-guvenli-mi\">\u00dccretsiz ve a\u00e7\u0131k proxy kullanmak g\u00fcvenli mi?<\/h2>\n<p>&#8220;\u00dccretsiz&#8221; kelimesi burada bir g\u00fcvenlik \u00f6zelli\u011fi de\u011fildir. A\u00e7\u0131k bir proxy&#8217;nin kimin taraf\u0131ndan i\u015fletildi\u011fi, trafi\u011fi kaydedip kaydetmedi\u011fi, reklam veya zararl\u0131 kod enjekte edip etmedi\u011fi belirsiz olabilir. HTTP \u00fczerinden kullan\u0131c\u0131 ad\u0131, parola, oturum \u00e7erezi veya API anahtar\u0131 g\u00f6ndermek \u00f6zellikle risklidir.<\/p>\n<p>HTTPS, proxy ile hedef aras\u0131ndaki her \u015feyi otomatik olarak g\u00f6r\u00fcnmez yapmaz. Proxy ba\u011flant\u0131 zaman\u0131n\u0131, hedef alan ad\u0131n\u0131, veri miktar\u0131n\u0131 ve istemci IP&#8217;sini g\u00f6rebilir. TLS ba\u011flant\u0131s\u0131 sonland\u0131r\u0131l\u0131yorsa i\u00e7erik de incelenebilir. Sertifika uyar\u0131s\u0131n\u0131 g\u00f6rmezden gelmek, proxy kullan\u0131m\u0131n\u0131n sa\u011flad\u0131\u011f\u0131 varsay\u0131lan faydalar\u0131 bo\u015fa \u00e7\u0131karabilir.<\/p>\n<ul>\n<li>Kimlik bilgilerini a\u00e7\u0131k HTTP \u00fczerinden g\u00f6ndermeyin.<\/li>\n<li>Proxy sa\u011flay\u0131c\u0131s\u0131n\u0131n kay\u0131t ve gizlilik politikas\u0131n\u0131 okuyun.<\/li>\n<li>\u00dcretim API anahtarlar\u0131n\u0131 rastgele proxy \u00fczerinden ge\u00e7irmeyin.<\/li>\n<li>Proxy sunucusuna g\u00fcncel i\u015fletim sistemi, firewall ve eri\u015fim denetimi uygulay\u0131n.<\/li>\n<li>Kimlik do\u011frulamas\u0131z a\u00e7\u0131k proxy \u00e7al\u0131\u015ft\u0131rmay\u0131n.<\/li>\n<li>Kurumsal kullan\u0131mda log saklama s\u00fcresini ve eri\u015fim yetkilerini yaz\u0131l\u0131 belirleyin.<\/li>\n<\/ul>\n<p>Proxy sunucusu internete a\u00e7\u0131k bir VPS \u00fczerindeyse bu sunucu, k\u00f6t\u00fc niyetli ki\u015filerin \u00fccretsiz \u00e7\u0131k\u0131\u015f noktas\u0131 h\u00e2line gelebilir. Firewall ile yaln\u0131zca izin verilen istemci a\u011flar\u0131na eri\u015fim verin, g\u00fc\u00e7l\u00fc kimlik do\u011frulama kullan\u0131n ve ba\u011flant\u0131 say\u0131s\u0131n\u0131 s\u0131n\u0131rlay\u0131n. A\u011f trafi\u011fi sald\u0131r\u0131lar\u0131 i\u00e7in ayr\u0131ca <strong><a href=\"https:\/\/www.vps.tc\/blog\/tr\/ddos-saldirisi-nedir-vps-koruma-rehberi\/\">DDoS Sald\u0131r\u0131s\u0131 Nedir? VPS Koruma Rehberi<\/a><\/strong> i\u00e7indeki temel \u00f6nlemleri incelemek gerekir; proxy, DDoS korumas\u0131n\u0131n yerine ge\u00e7mez.<\/p>\n<h2 id=\"proxy-secerken-nelere-bakilmali\">Proxy se\u00e7erken nelere bak\u0131lmal\u0131?<\/h2>\n<p>\u0130htiya\u00e7 \u00f6nce gelmeli. Taray\u0131c\u0131da tek bir uygulaman\u0131n iste\u011fini y\u00f6nlendirmekle, y\u00fczlerce kullan\u0131c\u0131n\u0131n \u00e7\u0131k\u0131\u015f trafi\u011fini ta\u015f\u0131mak ayn\u0131 \u015fey de\u011fildir.<\/p>\n<table>\n<thead>\n<tr>\n<th>\u0130htiya\u00e7<\/th>\n<th>Daha uygun yakla\u015f\u0131m<\/th>\n<th>Kontrol edilmesi gerekenler<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Web uygulamas\u0131n\u0131 yay\u0131nlamak<\/td>\n<td>Reverse proxy<\/td>\n<td>TLS, rate limit, backend sa\u011fl\u0131\u011f\u0131<\/td>\n<\/tr>\n<tr>\n<td>Sunucu g\u00fcncellemelerini merkezi ge\u00e7irmek<\/td>\n<td>Forward HTTP proxy<\/td>\n<td>Yetki, log, hedef k\u0131s\u0131tlar\u0131<\/td>\n<\/tr>\n<tr>\n<td>SSH \u00fczerinden ge\u00e7ici t\u00fcnel<\/td>\n<td>SOCKS5 ve SSH<\/td>\n<td>SSH anahtarlar\u0131, bind adresi<\/td>\n<\/tr>\n<tr>\n<td>Kurumsal i\u00e7erik denetimi<\/td>\n<td>Y\u00f6netilen proxy<\/td>\n<td>Gizlilik, sertifika politikas\u0131, kay\u0131tlar<\/td>\n<\/tr>\n<tr>\n<td>T\u00fcm cihaz trafi\u011fini t\u00fcnellemek<\/td>\n<td>VPN<\/td>\n<td>VPN protokol\u00fc, rota ve DNS ayarlar\u0131<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Performans i\u00e7in yaln\u0131zca ping s\u00fcresine bakmay\u0131n. Proxy&#8217;nin hedefe eri\u015fim s\u00fcresi, ba\u011flant\u0131 ba\u015f\u0131na gecikme, e\u015fzamanl\u0131 ba\u011flant\u0131 limiti, bant geni\u015fli\u011fi ve disk kullan\u0131m\u0131 da \u00f6nemlidir. B\u00fcy\u00fck dosyalar\u0131 proxy \u00fczerinden ge\u00e7irirken VPS bant geni\u015fli\u011fi hesab\u0131n\u0131 ihmal etmek faturaya veya kota a\u015f\u0131m\u0131na d\u00f6n\u00fc\u015febilir; <strong><a href=\"https:\/\/www.vps.tc\/blog\/tr\/vps-bant-genisligi-ihtiyacinizi-hesaplayin\/\">VPS Bant Geni\u015fli\u011fi Nedir? \u0130htiyac\u0131n\u0131z\u0131 Hesaplay\u0131n<\/a><\/strong> bu noktada yararl\u0131 bir referanst\u0131r.<\/p>\n<h2 id=\"proxy-kullanirken-sik-yapilan-hatalar\">Proxy kullan\u0131rken s\u0131k yap\u0131lan hatalar<\/h2>\n<ul>\n<li><strong>Proxy&#8217;yi anonimlik sanmak:<\/strong> IP adresi de\u011fi\u015fse de hesap, \u00e7erez, taray\u0131c\u0131 parmak izi ve kay\u0131tlar kimli\u011fi ili\u015fkilendirebilir.<\/li>\n<li><strong>Her \u015feyi tek proxy&#8217;den ge\u00e7irmek:<\/strong> Kritik bir \u00e7\u0131k\u0131\u015f noktas\u0131ndaki ar\u0131za b\u00fct\u00fcn uygulamalar\u0131 etkiler.<\/li>\n<li><strong>DNS s\u0131z\u0131nt\u0131s\u0131n\u0131 kontrol etmemek:<\/strong> SOCKS5 kullan\u0131m\u0131nda \u00e7\u00f6z\u00fcmlemenin nerede yap\u0131ld\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n.<\/li>\n<li><strong>Loglar\u0131 s\u0131n\u0131rs\u0131z saklamak:<\/strong> Gereksiz ki\u015fisel veri biriktirmek g\u00fcvenlik y\u00fck\u00fcn\u00fc art\u0131r\u0131r.<\/li>\n<li><strong>Reverse proxy arkas\u0131ndaki ger\u00e7ek IP&#8217;yi yanl\u0131\u015f okumak:<\/strong> Uygulama ve web sunucusu log formatlar\u0131 ba\u015fl\u0131klar\u0131 do\u011fru ele almal\u0131d\u0131r.<\/li>\n<li><strong>Test etmeden \u00fcretime almak:<\/strong> \u00d6nce k\u00fc\u00e7\u00fck bir istemci grubuyla durum kodlar\u0131, timeout ve b\u00fcy\u00fck yan\u0131tlar denenmelidir.<\/li>\n<\/ul>\n<p>\u0130lk hosting vardiyalar\u0131mda bir VPS&#8217;in d\u0131\u015f API&#8217;ye eri\u015femedi\u011fi \u015fik\u00e2yeti geldi. Uygulama logunda yaln\u0131zca genel bir ba\u011flant\u0131 hatas\u0131 vard\u0131. Ben de \u00f6nce uygulamay\u0131 yeniden ba\u015flatmay\u0131 d\u00fc\u015f\u00fcnd\u00fcm (evet, o refleks bende de vard\u0131). Ard\u0131ndan <code>env<\/code> \u00e7\u0131kt\u0131s\u0131nda tan\u0131ml\u0131 proxy de\u011fi\u015fkenlerini ve a\u011f ge\u00e7idinin ba\u011flant\u0131 kay\u0131tlar\u0131n\u0131 kontrol ettim; zorunlu proxy kapal\u0131 oldu\u011fu i\u00e7in istekler do\u011frudan \u00e7\u0131kmaya \u00e7al\u0131\u015f\u0131yordu. Kural\u0131 d\u00fczelttikten sonra uygulamaya dokunmadan sorun \u00e7\u00f6z\u00fcld\u00fc. Log okumadan restart etmek, \u00e7o\u011fu zaman te\u015fhis yerine g\u00fcr\u00fclt\u00fc \u00fcretir.<\/p>\n<p>Proxy kavram\u0131n\u0131n taray\u0131c\u0131 \u00fczerinden \u00e7al\u0131\u015fan pratik bir \u00f6rne\u011fini merak ediyorsan\u0131z, <a href=\"https:\/\/www.vps.tc\/blog\/tr\/ktunnel-proxy-nedir-nasil-kullanilir-guvenli-mi\/\">Ktunnel Proxy Nedir? Nas\u0131l Kullan\u0131l\u0131r ve G\u00fcvenli mi?<\/a> rehberime de g\u00f6z atabilirsiniz; kullan\u0131m ad\u0131mlar\u0131n\u0131 ve g\u00fcvenlik a\u00e7\u0131s\u0131ndan dikkat edilmesi gerekenleri anla\u015f\u0131l\u0131r bi\u00e7imde ele ald\u0131m.<\/p>\n<h2 id=\"sik-sorulan-sorular\">S\u0131k Sorulan Sorular<\/h2>\n<h3>Proxy kullanmak IP adresini gizler mi?<\/h3>\n<p>Hedef sunucu genellikle proxy&#8217;nin \u00e7\u0131k\u0131\u015f IP adresini g\u00f6r\u00fcr, ancak proxy i\u015fletmecisi istemci IP&#8217;nizi bilebilir. HTTP ba\u015fl\u0131klar\u0131, hesap bilgileri ve ba\u011flant\u0131 kay\u0131tlar\u0131 da kimli\u011finizin ili\u015fkilendirilmesine yol a\u00e7abilir.<\/p>\n<h3>Proxy ile VPN ayn\u0131 \u015fey mi?<\/h3>\n<p>Hay\u0131r. Proxy \u00e7o\u011funlukla belirli bir uygulaman\u0131n trafi\u011fini y\u00f6nlendirirken VPN i\u015fletim sistemi seviyesinde t\u00fcnel kurabilir. Kullan\u0131lan protokol ve yap\u0131land\u0131rmaya g\u00f6re kapsam de\u011fi\u015fse de gizlilik seviyesi sa\u011flay\u0131c\u0131n\u0131n uygulamas\u0131na ba\u011fl\u0131d\u0131r.<\/p>\n<h3>SOCKS5 proxy HTTPS trafi\u011fini \u015fifreler mi?<\/h3>\n<p>SOCKS5, trafi\u011fi y\u00f6nlendiren bir protokold\u00fcr; kendi ba\u015f\u0131na u\u00e7tan uca \u015fifreleme sa\u011flamaz. HTTPS kullan\u0131yorsan\u0131z TLS \u015fifrelemesi istemci ile hedef aras\u0131nda \u00e7al\u0131\u015f\u0131r, SOCKS5 ise ba\u011flant\u0131n\u0131n ta\u015f\u0131nmas\u0131na arac\u0131l\u0131k eder.<\/p>\n<h3>Reverse proxy neden kullan\u0131l\u0131r?<\/h3>\n<p>Reverse proxy, istemci ba\u011flant\u0131lar\u0131n\u0131 uygulama sunucusuna iletir ve TLS sonland\u0131rma, alan ad\u0131na g\u00f6re y\u00f6nlendirme, \u00f6nbellekleme veya h\u0131z s\u0131n\u0131rlama gibi i\u015fleri \u00f6ne alabilir. Uygulaman\u0131n g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tek ba\u015f\u0131na \u00e7\u00f6zmez; do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f bir \u00f6n katman olarak d\u00fc\u015f\u00fcn\u00fclmelidir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Proxy&#8217;nin ne oldu\u011funu, forward ve reverse proxy farklar\u0131n\u0131, SOCKS5 kullan\u0131m\u0131n\u0131, VPN&#8217;den ayr\u0131m\u0131n\u0131 ve Linux \u00fczerinde nas\u0131l test edilece\u011fini anlat\u0131yorum.<\/p>\n","protected":false},"author":2,"featured_media":507,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[279],"tags":[],"class_list":["post-509","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nedir"],"lang":"tr","translations":{"tr":509,"en":510},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/comments?post=509"}],"version-history":[{"count":3,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/509\/revisions"}],"predecessor-version":[{"id":660,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/509\/revisions\/660"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/media\/507"}],"wp:attachment":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/media?parent=509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/categories?post=509"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/tags?post=509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}