{"id":577,"date":"2026-09-09T16:34:09","date_gmt":"2026-09-09T16:34:09","guid":{"rendered":"https:\/\/www.vps.tc\/blog\/?p=577"},"modified":"2026-09-09T09:30:04","modified_gmt":"2026-09-09T09:30:04","slug":"dns-probe-finished-nxdomain-hatasi-nasil-cozulur","status":"publish","type":"post","link":"https:\/\/www.vps.tc\/blog\/tr\/dns-probe-finished-nxdomain-hatasi-nasil-cozulur\/","title":{"rendered":"DNS_PROBE_FINISHED_NXDOMAIN Hatas\u0131 Nas\u0131l \u00c7\u00f6z\u00fcl\u00fcr?"},"content":{"rendered":"<div class=\"aiw-toc\" style=\"border:1px solid #dbe3ea;border-radius:8px;padding:16px 20px;margin:0 0 28px\"><strong>\u0130\u00e7indekiler<\/strong><\/p>\n<ol style=\"margin:10px 0 0;padding-left:22px\">\n<li><a href=\"#dns_probe_finished_nxdomain-hatasi-ne-anlama-gelir\">DNS_PROBE_FINISHED_NXDOMAIN hatas\u0131 ne anlama gelir?<\/a><\/li>\n<li><a href=\"#dns_probe_finished_nxdomain-neden-olusur\">DNS_PROBE_FINISHED_NXDOMAIN neden olu\u015fur?<\/a><\/li>\n<li><a href=\"#hatanin-alan-adindan-mi-bilgisayardan-mi-kaynaklandigi-nasil-anlasilir\">Hatan\u0131n alan ad\u0131ndan m\u0131, bilgisayardan m\u0131 kaynakland\u0131\u011f\u0131 nas\u0131l anla\u015f\u0131l\u0131r?<\/a><\/li>\n<li><a href=\"#dns-kayitlarini-ve-nameserver-ayarlarini-nasil-kontrol-ederim\">DNS kay\u0131tlar\u0131n\u0131 ve nameserver ayarlar\u0131n\u0131 nas\u0131l kontrol ederim?<\/a><\/li>\n<li><a href=\"#dns-onbellegi-ve-ttl-hatayi-nasil-etkiler\">DNS \u00f6nbelle\u011fi ve TTL hatay\u0131 nas\u0131l etkiler?<\/a><\/li>\n<li><a href=\"#alan-adi-dogru-oldugu-halde-tarayici-hatayi-gosteriyorsa-ne-yapmali\">Alan ad\u0131 do\u011fru oldu\u011fu h\u00e2lde taray\u0131c\u0131 hatay\u0131 g\u00f6steriyorsa ne yapmal\u0131?<\/a><\/li>\n<li><a href=\"#dnssec-veya-hosts-dosyasi-soruna-neden-olabilir-mi\">DNSSEC veya hosts dosyas\u0131 soruna neden olabilir mi?<\/a><\/li>\n<li><a href=\"#dns_probe_finished_nxdomain-icin-hizli-kontrol-listesi\">DNS_PROBE_FINISHED_NXDOMAIN i\u00e7in h\u0131zl\u0131 kontrol listesi<\/a><\/li>\n<li><a href=\"#sik-sorulan-sorular\">S\u0131k Sorulan Sorular<\/a><\/li>\n<li><a href=\"#kaynaklar\">Kaynaklar<\/a><\/li>\n<\/ol>\n<\/div>\n<h2 id=\"dns_probe_finished_nxdomain-hatasi-ne-anlama-gelir\">DNS_PROBE_FINISHED_NXDOMAIN hatas\u0131 ne anlama gelir?<\/h2>\n<p><strong>DNS_PROBE_FINISHED_NXDOMAIN<\/strong>, taray\u0131c\u0131n\u0131n yazd\u0131\u011f\u0131n\u0131z alan ad\u0131 i\u00e7in DNS \u00fczerinden ge\u00e7erli bir IP adresi bulamad\u0131\u011f\u0131n\u0131 g\u00f6sterir. Alan ad\u0131 yanl\u0131\u015f yaz\u0131lm\u0131\u015f, DNS kayd\u0131 eksik veya hatal\u0131, alan ad\u0131 s\u00fcresi dolmu\u015f ya da kulland\u0131\u011f\u0131n\u0131z DNS \u00e7\u00f6z\u00fcmleyici g\u00fcncel bilgiyi alamam\u0131\u015f olabilir. \u00c7\u00f6z\u00fcm, \u00f6nce hatan\u0131n hangi DNS katman\u0131nda olu\u015ftu\u011funu ay\u0131rmakt\u0131r.<\/p>\n<p>Bu hata, web sunucusunun mutlaka kapal\u0131 oldu\u011fu anlam\u0131na gelmez. Taray\u0131c\u0131 daha sunucuya HTTP iste\u011fi g\u00f6ndermeden \u00f6nce alan ad\u0131n\u0131 IP adresine \u00e7evirmeye \u00e7al\u0131\u015f\u0131r. Bu \u00e7eviri ba\u015far\u0131s\u0131z olursa Apache, nginx, PHP veya uygulaman\u0131z\u0131n loglar\u0131nda hi\u00e7bir kay\u0131t g\u00f6remeyebilirsiniz. Sorun daha kap\u0131da, DNS taraf\u0131ndad\u0131r.<\/p>\n<h2 id=\"dns_probe_finished_nxdomain-neden-olusur\">DNS_PROBE_FINISHED_NXDOMAIN neden olu\u015fur?<\/h2>\n<p>DNS, alan ad\u0131n\u0131 bir IP adresiyle e\u015fle\u015ftirir. \u00d6rne\u011fin <code>example.com<\/code> i\u00e7in bir <code>A<\/code> kayd\u0131 varsa IPv4 adresi, <code>AAAA<\/code> kayd\u0131 varsa IPv6 adresi d\u00f6nd\u00fcr\u00fclebilir. DNS sunucular\u0131 herhangi bir kay\u0131t bulamad\u0131\u011f\u0131nda ya da alan ad\u0131n\u0131n yetkili sunucular\u0131na ula\u015famad\u0131\u011f\u0131nda istemciye <code>NXDOMAIN<\/code> yan\u0131t\u0131 verebilir.<\/p>\n<p>ICANN&#8217;in alan ad\u0131 sistemiyle ilgili a\u00e7\u0131klamalar\u0131nda da g\u00f6r\u00fcld\u00fc\u011f\u00fc gibi kay\u0131t kurulu\u015fu, alan ad\u0131 kay\u0131tlar\u0131 ve DNS bar\u0131nd\u0131rmas\u0131 birbirinden ayr\u0131 katmanlard\u0131r. Alan ad\u0131n\u0131 bir firmadan al\u0131p DNS hizmetini ba\u015fka bir firmada kullanabilirsiniz. Bu esneklik, yanl\u0131\u015f nameserver tan\u0131mland\u0131\u011f\u0131nda i\u015fleri biraz daha ilgin\u00e7 h\u00e2le getirir.<\/p>\n<ul>\n<li><strong>Yanl\u0131\u015f yaz\u0131m:<\/strong> Alan ad\u0131nda bir harf eksik, fazla veya yanl\u0131\u015f uzant\u0131 olabilir.<\/li>\n<li><strong>Eksik DNS kayd\u0131:<\/strong> \u00d6zellikle yeni a\u00e7\u0131lan bir alt alan ad\u0131 i\u00e7in <code>A<\/code> veya <code>CNAME<\/code> kayd\u0131 olu\u015fturulmam\u0131\u015f olabilir.<\/li>\n<li><strong>Yanl\u0131\u015f nameserver:<\/strong> Alan ad\u0131, DNS kay\u0131tlar\u0131n\u0131n bulundu\u011fu sunucular yerine ba\u015fka nameserver adreslerine delegasyon yap\u0131yor olabilir.<\/li>\n<li><strong>S\u00fcresi dolmu\u015f alan ad\u0131:<\/strong> Kay\u0131t yenilenmedi\u011finde alan ad\u0131 pasif duruma ge\u00e7ebilir veya DNS yan\u0131t\u0131 de\u011fi\u015febilir.<\/li>\n<li><strong>Yerel \u00f6nbellek:<\/strong> Bilgisayar, modem veya DNS \u00e7\u00f6z\u00fcmleyici daha \u00f6nce ald\u0131\u011f\u0131 olumsuz yan\u0131t\u0131 bir s\u00fcre saklayabilir.<\/li>\n<li><strong>DNSSEC uyu\u015fmazl\u0131\u011f\u0131:<\/strong> DNSSEC imzas\u0131 ile alan ad\u0131 delegasyonu uyumlu de\u011filse DNS yan\u0131t\u0131 do\u011frulanamayabilir. Bu durum her taray\u0131c\u0131da ayn\u0131 hata metniyle g\u00f6r\u00fcnmez.<\/li>\n<\/ul>\n<h2 id=\"hatanin-alan-adindan-mi-bilgisayardan-mi-kaynaklandigi-nasil-anlasilir\">Hatan\u0131n alan ad\u0131ndan m\u0131, bilgisayardan m\u0131 kaynakland\u0131\u011f\u0131 nas\u0131l anla\u015f\u0131l\u0131r?<\/h2>\n<p>\u0130lk kontrol\u00fc taray\u0131c\u0131da de\u011fil, terminalde yap\u0131yorum. \u00c7\u00fcnk\u00fc taray\u0131c\u0131 kendi \u00f6nbelle\u011fini, i\u015fletim sistemi \u00e7\u00f6z\u00fcmleyicisini ve bazen g\u00fcvenli DNS ayarlar\u0131n\u0131 ayn\u0131 anda devreye sokabilir. Terminal \u00e7\u0131kt\u0131s\u0131, hangi sunucunun ne cevap verdi\u011fini daha a\u00e7\u0131k g\u00f6sterir.<\/p>\n<pre><code>dig +short A example.com\ndig +short AAAA example.com\ndig +short NS example.com<\/code><\/pre>\n<p><code>dig +short<\/code> yaln\u0131zca k\u0131sa cevab\u0131 g\u00f6sterir. \u0130lk iki komut IP adresi d\u00f6nd\u00fcrm\u00fcyorsa web sitesinin sunucusuna hen\u00fcz ula\u015fmam\u0131\u015f\u0131zd\u0131r. <code>NS<\/code> sorgusu ise alan ad\u0131n\u0131n hangi yetkili DNS sunucular\u0131na emanet edildi\u011fini g\u00f6sterir. Kendi alan ad\u0131n\u0131zda <code>example.com<\/code> yerine ger\u00e7ek alan ad\u0131n\u0131 kullan\u0131n.<\/p>\n<p>Daha ayr\u0131nt\u0131l\u0131 cevap i\u00e7in:<\/p>\n<pre><code>dig example.com A\ndig example.com NS\ndig example.com +trace<\/code><\/pre>\n<p><code>+trace<\/code>, sorgunun k\u00f6k DNS sunucular\u0131ndan ba\u015flayarak hangi delegasyonlardan ge\u00e7ti\u011fini g\u00f6sterir. \u00c7\u0131kt\u0131n\u0131n sonunda alan ad\u0131n\u0131z\u0131n yetkili sunucular\u0131ndan cevap gelmiyorsa sorun \u00e7o\u011funlukla DNS y\u00f6netim panelindeki kay\u0131tta veya nameserver delegasyonundad\u0131r.<\/p>\n<p>Farkl\u0131 \u00e7\u00f6z\u00fcmleyicileri kar\u015f\u0131la\u015ft\u0131rmak da i\u015fe yarar:<\/p>\n<pre><code>dig @1.1.1.1 example.com A\ndig @8.8.8.8 example.com A\ndig @9.9.9.9 example.com A<\/code><\/pre>\n<p>Bu sat\u0131rlardan biri IP d\u00f6nd\u00fcr\u00fcyor, di\u011feri <code>NXDOMAIN<\/code> veriyorsa yerel DNS sa\u011flay\u0131c\u0131s\u0131 veya \u00f6nbellekleme katman\u0131 incelenmelidir. Hepsi <code>NXDOMAIN<\/code> d\u00f6nd\u00fcr\u00fcyorsa kayd\u0131n ger\u00e7ekten bulunmad\u0131\u011f\u0131n\u0131 varsayarak yetkili DNS sunucusuna bakar\u0131m. Tek bir komuta g\u00fcvenmek yerine bu kar\u015f\u0131la\u015ft\u0131rmay\u0131 yapmak, gereksiz modem yeniden ba\u015flatmalar\u0131n\u0131 azalt\u0131yor.<\/p>\n<h3>Windows, macOS ve Linux&#8217;ta temel kontrol<\/h3>\n<p>Windows&#8217;ta DNS \u00f6nbelle\u011fini g\u00f6r\u00fcnt\u00fclemek ve temizlemek i\u00e7in:<\/p>\n<pre><code>ipconfig \/displaydns\nipconfig \/flushdns\nnslookup example.com<\/code><\/pre>\n<p><code>ipconfig \/flushdns<\/code> bilgisayar\u0131n yerel DNS \u00f6nbelle\u011fini temizler. Bu komut, alan ad\u0131n\u0131n DNS panelindeki kayd\u0131n\u0131 de\u011fi\u015ftirmez; yaln\u0131zca bilgisayar\u0131n daha \u00f6nce saklad\u0131\u011f\u0131 cevaplar\u0131 siler.<\/p>\n<p>Linux&#8217;ta kullan\u0131lan \u00e7\u00f6z\u00fcmleme servisine g\u00f6re \u00f6nbellek temizleme komutu de\u011fi\u015fir. <code>systemd-resolved<\/code> aktifse:<\/p>\n<pre><code>resolvectl status\nresolvectl query example.com\nsudo resolvectl flush-caches<\/code><\/pre>\n<p>Ben \u00f6nce <code>resolvectl status<\/code> \u00e7\u0131kt\u0131s\u0131na bakar\u0131m. \u00c7\u00fcnk\u00fc sistemin ger\u00e7ekten hangi DNS sunucular\u0131n\u0131 kulland\u0131\u011f\u0131n\u0131 bilmeden rastgele bir \u00f6nbellek temizleme komutu \u00e7al\u0131\u015ft\u0131rmak pek anlaml\u0131 de\u011fildir. Debian sunucular\u0131mda bazen <code>systemd-resolved<\/code> hi\u00e7 aktif olmaz; bu durumda komutun etkisiz kalmas\u0131 normaldir.<\/p>\n<p>macOS&#8217;ta sorguyu \u015fu \u015fekilde test edebilirsiniz:<\/p>\n<pre><code>scutil --dns\ndig example.com A<\/code><\/pre>\n<p><code>scutil --dns<\/code>, sistemde tan\u0131ml\u0131 DNS \u00e7\u00f6z\u00fcmleyicilerini g\u00f6sterir. Buradaki adresler beklemedi\u011finiz bir VPN, g\u00fcvenlik yaz\u0131l\u0131m\u0131 veya yerel a\u011f cihaz\u0131n\u0131 i\u015faret ediyorsa test s\u0131ras\u0131nda farkl\u0131 bir a\u011f ba\u011flant\u0131s\u0131 kullanmak faydal\u0131 olabilir.<\/p>\n<h2 id=\"dns-kayitlarini-ve-nameserver-ayarlarini-nasil-kontrol-ederim\">DNS kay\u0131tlar\u0131n\u0131 ve nameserver ayarlar\u0131n\u0131 nas\u0131l kontrol ederim?<\/h2>\n<p>DNS_PROBE_FINISHED_NXDOMAIN hatas\u0131n\u0131 d\u00fczeltirken s\u0131k kar\u015f\u0131la\u015ft\u0131\u011f\u0131m durum, kayd\u0131n bir panelde olu\u015fturulup alan ad\u0131n\u0131n ba\u015fka nameserver&#8217;lar\u0131 kullanmas\u0131d\u0131r. Kullan\u0131c\u0131 DNS kayd\u0131n\u0131 do\u011fru eklemi\u015ftir; fakat sorgular o paneldeki DNS sunucular\u0131na hi\u00e7 gitmiyordur.<\/p>\n<p>\u00d6nce alan ad\u0131n\u0131n yetkili nameserver&#8217;lar\u0131n\u0131 sorgulay\u0131n:<\/p>\n<pre><code>dig +short NS example.com<\/code><\/pre>\n<p>\u00c7\u0131kan sunucular, DNS kay\u0131tlar\u0131n\u0131 d\u00fczenledi\u011finiz hizmetle ayn\u0131 m\u0131? Panelinizde kay\u0131tlar g\u00f6r\u00fcnmesine ra\u011fmen sorgu farkl\u0131 bir sa\u011flay\u0131c\u0131n\u0131n nameserver adreslerini g\u00f6steriyorsa iki panelden birinde yap\u0131lan de\u011fi\u015fiklik internete yans\u0131maz.<\/p>\n<h3>A, AAAA ve CNAME kay\u0131tlar\u0131n\u0131 kontrol edin<\/h3>\n<table>\n<thead>\n<tr>\n<th>Kay\u0131t<\/th>\n<th>Ne i\u00e7in kullan\u0131l\u0131r?<\/th>\n<th>Yayg\u0131n hata<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><code>A<\/code><\/td>\n<td>Alan ad\u0131n\u0131 IPv4 adresine y\u00f6nlendirir.<\/td>\n<td>Eski veya yanl\u0131\u015f IPv4 adresi yazmak.<\/td>\n<\/tr>\n<tr>\n<td><code>AAAA<\/code><\/td>\n<td>Alan ad\u0131n\u0131 IPv6 adresine y\u00f6nlendirir.<\/td>\n<td>\u00c7al\u0131\u015fmayan bir IPv6 adresini eklemek.<\/td>\n<\/tr>\n<tr>\n<td><code>CNAME<\/code><\/td>\n<td>Bir ad\u0131 ba\u015fka bir alan ad\u0131na y\u00f6nlendirir.<\/td>\n<td>DNS k\u00f6k alan\u0131nda veya yanl\u0131\u015f hedefle kullanmak.<\/td>\n<\/tr>\n<tr>\n<td><code>NS<\/code><\/td>\n<td>Alan ad\u0131 i\u00e7in yetkili DNS sunucular\u0131n\u0131 belirtir.<\/td>\n<td>Kay\u0131t sa\u011flay\u0131c\u0131s\u0131ndaki delegasyonla panel ayar\u0131n\u0131n uyu\u015fmamas\u0131.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Bir alt alan ad\u0131 i\u00e7in \u00f6rnek sorgular \u015f\u00f6yle olabilir:<\/p>\n<pre><code>dig +short A app.example.com\ndig +short CNAME app.example.com\ndig +short NS example.com<\/code><\/pre>\n<p>Bir ad i\u00e7in hem beklenmedik bir <code>CNAME<\/code> hem de yanl\u0131\u015f bir <code>A<\/code> kayd\u0131 varsa panelin izin verdi\u011fi yap\u0131land\u0131rma kurallar\u0131n\u0131 kontrol edin. DNS kay\u0131tlar\u0131n\u0131n ayn\u0131 ada birden fazla bi\u00e7imde eklenmesi, sa\u011flay\u0131c\u0131ya g\u00f6re reddedilebilir veya tahmin edilmesi zor sonu\u00e7lar \u00fcretebilir.<\/p>\n<p>Alt alan adlar\u0131yla \u00e7al\u0131\u015f\u0131rken <strong><a href=\"https:\/\/www.vps.tc\/blog\/tr\/subdomain-nedir-alt-alan-adi-kullanim-rehberi\/\">Alt Alan Ad\u0131 (Subdomain) Nedir? Kullan\u0131m Rehberi<\/a><\/strong> yaz\u0131s\u0131ndaki temel ayr\u0131m da i\u015finize yarar: <code>www.example.com<\/code> ve <code>app.example.com<\/code> ayn\u0131 kay\u0131t olmak zorunda de\u011fildir. Birinin \u00e7al\u0131\u015fmas\u0131 di\u011ferinin do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6stermez.<\/p>\n<h3>Alan ad\u0131n\u0131n kay\u0131t ve delegasyon durumunu inceleyin<\/h3>\n<p>Alan ad\u0131n\u0131n s\u00fcresi dolmu\u015fsa veya kay\u0131t kurulu\u015funda bekleyen bir do\u011frulama varsa DNS panelindeki kay\u0131tlar\u0131 d\u00fczeltmek tek ba\u015f\u0131na yeterli olmayabilir. Kay\u0131t kurulu\u015funun alan ad\u0131 durumunu, nameserver listesini ve yenileme bildirimlerini kontrol edin.<\/p>\n<p>Alan ad\u0131 yeni ta\u015f\u0131nd\u0131ysa delegasyonun g\u00fcncellenmesi zaman alabilir. Burada &#8220;DNS propagasyonu 24 saat s\u00fcrer&#8221; c\u00fcmlesini otomatik cevap gibi kullanmamaya \u00e7al\u0131\u015f\u0131yorum. De\u011fi\u015fimin ne kadar s\u00fcrece\u011fi TTL de\u011ferine, ilgili resolver&#8217;\u0131n \u00f6nbelle\u011fine ve delegasyonun ger\u00e7ekten de\u011fi\u015ftirilip de\u011fi\u015ftirilmedi\u011fine ba\u011fl\u0131d\u0131r. Yanl\u0131\u015f nameserver kullan\u0131yorsan\u0131z 24 saat beklemek yaln\u0131zca yanl\u0131\u015f ayar\u0131 daha uzun s\u00fcre korur.<\/p>\n<h2 id=\"dns-onbellegi-ve-ttl-hatayi-nasil-etkiler\">DNS \u00f6nbelle\u011fi ve TTL hatay\u0131 nas\u0131l etkiler?<\/h2>\n<p>DNS yan\u0131tlar\u0131n\u0131n \u00f6nbellekte tutulma s\u00fcresi, kayd\u0131n TTL de\u011ferine ba\u011fl\u0131d\u0131r. Bir kayd\u0131 de\u011fi\u015ftirdi\u011finizde herkesin ayn\u0131 anda yeni cevab\u0131 g\u00f6rmesi beklenmez. Daha \u00f6nce al\u0131nm\u0131\u015f olumlu yan\u0131tlar kadar olumsuz yan\u0131tlar da belirli ko\u015fullarda \u00f6nbelle\u011fe al\u0131nabilir.<\/p>\n<p>RFC 2308, negatif DNS cevaplar\u0131n\u0131n \u00f6nbelle\u011fe al\u0131nmas\u0131yla ilgili davran\u0131\u015flar\u0131 a\u00e7\u0131klar. RFC 8020 ise bir alan ad\u0131n\u0131n var olmad\u0131\u011f\u0131na dair <code>NXDOMAIN<\/code> cevab\u0131n\u0131n alt adlar\u0131 a\u00e7\u0131s\u0131ndan nas\u0131l de\u011ferlendirilece\u011fini tan\u0131mlar. Pratikte bunun kar\u015f\u0131l\u0131\u011f\u0131 \u015fudur: Kay\u0131t az \u00f6nce eklendiyse kendi bilgisayar\u0131n\u0131zda h\u00e2l\u00e2 eski bir &#8220;yok&#8221; cevab\u0131 g\u00f6rebilirsiniz.<\/p>\n<p>TTL&#8217;i g\u00f6rmek i\u00e7in:<\/p>\n<pre><code>dig example.com A<\/code><\/pre>\n<p>\u00c7\u0131kt\u0131da <code>ANSWER SECTION<\/code> alt\u0131nda g\u00f6r\u00fcnen say\u0131, cevab\u0131n kalan \u00f6nbellek s\u00fcresidir. Bu de\u011fer saniye cinsindendir. TTL&#8217;in d\u00fc\u015f\u00fck olmas\u0131 de\u011fi\u015fikliklerin an\u0131nda g\u00f6r\u00fclece\u011fini garanti etmez; farkl\u0131 \u00e7\u00f6z\u00fcmleyicilerin daha \u00f6nce ald\u0131\u011f\u0131 cevaplar ve negatif \u00f6nbellek s\u00fcreleri ayr\u0131ca devreye girebilir.<\/p>\n<h2 id=\"alan-adi-dogru-oldugu-halde-tarayici-hatayi-gosteriyorsa-ne-yapmali\">Alan ad\u0131 do\u011fru oldu\u011fu h\u00e2lde taray\u0131c\u0131 hatay\u0131 g\u00f6steriyorsa ne yapmal\u0131?<\/h2>\n<p>Alan ad\u0131 ba\u015fka bir a\u011fda a\u00e7\u0131l\u0131yorsa sorun b\u00fcy\u00fck ihtimalle yerel a\u011f, modem, VPN veya DNS \u00e7\u00f6z\u00fcmleyicisindedir. \u015eu s\u0131rayla ilerliyorum:<\/p>\n<ol>\n<li>Alan ad\u0131n\u0131 farkl\u0131 bir cihazda ve m\u00fcmk\u00fcnse mobil internet \u00fczerinden deneyin.<\/li>\n<li>Gizli DNS, VPN veya kurumsal g\u00fcvenlik yaz\u0131l\u0131m\u0131 kullan\u0131yorsan\u0131z ge\u00e7ici olarak ay\u0131r\u0131n.<\/li>\n<li>Yerel DNS \u00f6nbelle\u011fini temizleyin.<\/li>\n<li>Modemin DNS y\u00f6nlendirmesini kontrol edin veya k\u0131sa s\u00fcreli\u011fine g\u00fcvenilir farkl\u0131 bir \u00e7\u00f6z\u00fcmleyiciyle test yap\u0131n.<\/li>\n<li><code>dig<\/code>, <code>nslookup<\/code> veya <code>resolvectl<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 kar\u015f\u0131la\u015ft\u0131r\u0131n.<\/li>\n<\/ol>\n<p>Taray\u0131c\u0131daki &#8220;g\u00fcvenli DNS kullan&#8221; se\u00e7ene\u011fi de sorgunun gitti\u011fi yeri de\u011fi\u015ftirebilir. Bu ayar\u0131 kapatmak kal\u0131c\u0131 \u00e7\u00f6z\u00fcm de\u011fildir; yaln\u0131zca yerel DNS ile taray\u0131c\u0131n\u0131n kendi DNS-over-HTTPS \u00e7\u00f6z\u00fcmleyicisi aras\u0131ndaki fark\u0131 ay\u0131rmak i\u00e7in kullan\u0131labilir.<\/p>\n<p>Bir VPS \u00fczerinde DNS de\u011fi\u015fikli\u011fi yapt\u0131ysan\u0131z, sunucunun kendisinden de sorgu al\u0131n. Sunucunun d\u0131\u015far\u0131dan eri\u015filebilir olmas\u0131, sunucunun do\u011fru DNS \u00e7\u00f6z\u00fcmleyicisini kulland\u0131\u011f\u0131 anlam\u0131na gelmez:<\/p>\n<pre><code>cat \/etc\/resolv.conf\ngetent ahosts example.com\ncurl -I https:\/\/example.com<\/code><\/pre>\n<p><code>getent ahosts<\/code>, sistemin uygulamalar i\u00e7in kulland\u0131\u011f\u0131 \u00e7\u00f6z\u00fcmleme yolunu test eder. <code>curl -I<\/code> ise DNS \u00e7\u00f6z\u00fcld\u00fckten sonra HTTP katman\u0131na ge\u00e7er. \u0130lk komut ba\u015far\u0131s\u0131zsa nginx ayar\u0131na bakman\u0131n hen\u00fcz zaman\u0131 de\u011fildir. DNS d\u00fczeldikten sonra <code>curl<\/code> ile gelen HTTP durum kodunu, y\u00f6nlendirmeleri ve sertifika ad\u0131n\u0131 ayr\u0131ca inceleyebilirsiniz.<\/p>\n<p>Web sunucunuz <code>502 Bad Gateway<\/code> d\u00f6nd\u00fcr\u00fcyorsa bu, DNS_PROBE_FINISHED_NXDOMAIN ile ayn\u0131 katman de\u011fildir. DNS \u00e7\u00f6z\u00fcl\u00fcp istek proxy sunucusuna ula\u015ft\u0131ktan sonra upstream eri\u015fimi ba\u015far\u0131s\u0131z oluyorsa <strong><a href=\"https:\/\/www.vps.tc\/blog\/tr\/502-bad-gateway-hatasi-nedir-nasil-cozulur\/\">502 Bad Gateway Hatas\u0131 Nedir ve Nas\u0131l \u00c7\u00f6z\u00fcl\u00fcr?<\/a><\/strong> ba\u015fl\u0131\u011f\u0131ndaki kontrol ad\u0131mlar\u0131 daha uygun olur.<\/p>\n<h2 id=\"dnssec-veya-hosts-dosyasi-soruna-neden-olabilir-mi\">DNSSEC veya hosts dosyas\u0131 soruna neden olabilir mi?<\/h2>\n<p>DNSSEC etkin bir alan ad\u0131nda DS kayd\u0131 ile DNS b\u00f6lgesindeki DNSKEY ve imzalar\u0131n uyumlu olmas\u0131 gerekir. Nameserver de\u011fi\u015ftirirken eski DS kayd\u0131 b\u0131rak\u0131l\u0131rsa baz\u0131 do\u011frulay\u0131c\u0131 \u00e7\u00f6z\u00fcmleyiciler alan ad\u0131n\u0131 g\u00fcvenilir bi\u00e7imde do\u011frulayamaz. Taray\u0131c\u0131 bunu her zaman do\u011frudan DNSSEC hatas\u0131 diye g\u00f6stermeyebilir.<\/p>\n<p>DNSSEC&#8217;ten \u015f\u00fcpheleniyorsan\u0131z kay\u0131t kurulu\u015fundaki DS kayd\u0131n\u0131 ve DNS sa\u011flay\u0131c\u0131s\u0131n\u0131n DNSSEC durumunu kar\u015f\u0131la\u015ft\u0131r\u0131n. DNSSEC&#8217;i rastgele kapatmak yerine \u00f6nce hangi anahtar\u0131n imzalama yapt\u0131\u011f\u0131n\u0131, nameserver de\u011fi\u015fiminin tamamlan\u0131p tamamlanmad\u0131\u011f\u0131n\u0131 kontrol edin. Bu noktada <code>dig +dnssec example.com<\/code> \u00e7\u0131kt\u0131s\u0131 ve DNS sa\u011flay\u0131c\u0131s\u0131n\u0131n do\u011frulama ara\u00e7lar\u0131 yard\u0131mc\u0131 olur.<\/p>\n<p>Yerel <code>hosts<\/code> dosyas\u0131 da DNS sorgusunu atlayabilir. Linux ve macOS&#8217;ta <code>\/etc\/hosts<\/code>, Windows&#8217;ta <code>C:\textbackslash Windows\textbackslash System32\textbackslash drivers\textbackslash etc\textbackslash hosts<\/code> dosyas\u0131n\u0131 kontrol edin. Burada alan ad\u0131n\u0131 yanl\u0131\u015f bir adrese y\u00f6nlendiren sat\u0131r varsa taray\u0131c\u0131 DNS panelindeki g\u00fcncel kayd\u0131 g\u00f6rmez.<\/p>\n<p>Ben bir keresinde test amac\u0131yla ekledi\u011fim hosts sat\u0131r\u0131n\u0131 haftalarca kald\u0131rmam\u0131\u015ft\u0131m. Yeni IP&#8217;ye ta\u015f\u0131nan servis herkeste a\u00e7\u0131l\u0131rken bende eski makineye gidiyordu; hata mesaj\u0131 NXDOMAIN de\u011fildi ama ayn\u0131 kontrol al\u0131\u015fkanl\u0131\u011f\u0131 sorunu hemen ay\u0131rd\u0131. Test kay\u0131tlar\u0131n\u0131 i\u015f bitince silmek, DNS incelemesinin k\u00fc\u00e7\u00fck ama i\u015fe yarayan bir par\u00e7as\u0131.<\/p>\n<h2 id=\"dns_probe_finished_nxdomain-icin-hizli-kontrol-listesi\">DNS_PROBE_FINISHED_NXDOMAIN i\u00e7in h\u0131zl\u0131 kontrol listesi<\/h2>\n<ul>\n<li>Alan ad\u0131n\u0131 ve uzant\u0131s\u0131n\u0131 harf harf kontrol edin.<\/li>\n<li><code>dig +short NS alanadiniz.tld<\/code> ile yetkili nameserver&#8217;lar\u0131 bulun.<\/li>\n<li>Yetkili sunucudan do\u011frudan cevap al\u0131n: <code>dig @nameserver alanadiniz.tld A<\/code>.<\/li>\n<li>K\u00f6k alan ad\u0131 ile sorunlu alt alan ad\u0131n\u0131 ayr\u0131 ayr\u0131 sorgulay\u0131n.<\/li>\n<li><code>A<\/code>, <code>AAAA<\/code> ve <code>CNAME<\/code> kay\u0131tlar\u0131n\u0131 uygulaman\u0131z\u0131n bekledi\u011fi hedeflerle kar\u015f\u0131la\u015ft\u0131r\u0131n.<\/li>\n<li>Kay\u0131t kurulu\u015funda alan ad\u0131n\u0131n s\u00fcresi, kilidi ve delegasyon durumunu inceleyin.<\/li>\n<li>Farkl\u0131 DNS \u00e7\u00f6z\u00fcmleyicilerinden gelen cevaplar\u0131 kar\u015f\u0131la\u015ft\u0131r\u0131n.<\/li>\n<li>Yerel cihazda DNS \u00f6nbelle\u011fini ve hosts dosyas\u0131n\u0131 kontrol edin.<\/li>\n<li>DNSSEC kullan\u0131yorsan\u0131z DS ve DNSKEY uyumunu do\u011frulay\u0131n.<\/li>\n<li>DNS d\u00fczeldikten sonra web sunucusu, TLS ve uygulama katman\u0131na ge\u00e7in.<\/li>\n<\/ul>\n<p>DNS incelemesinde benim i\u00e7in en yararl\u0131 al\u0131\u015fkanl\u0131k, taray\u0131c\u0131daki hata metnine tak\u0131l\u0131 kalmamak oldu. \u00d6nce <code>dig<\/code> ile yetkili cevab\u0131, sonra istemcinin hangi \u00e7\u00f6z\u00fcmleyiciyi kulland\u0131\u011f\u0131n\u0131 kontrol ediyorum. Bu iki \u00e7\u0131kt\u0131 ayn\u0131 \u015feyi s\u00f6ylemiyorsa sorun genellikle hen\u00fcz nginx&#8217;e veya uygulamaya ula\u015fmam\u0131\u015ft\u0131r.<\/p>\n<h2 id=\"sik-sorulan-sorular\">S\u0131k Sorulan Sorular<\/h2>\n<h3>DNS_PROBE_FINISHED_NXDOMAIN vir\u00fcs veya modem ar\u0131zas\u0131 m\u0131d\u0131r?<\/h3>\n<p>Genellikle do\u011frudan vir\u00fcs anlam\u0131na gelmez; alan ad\u0131n\u0131n \u00e7\u00f6z\u00fcmlenemedi\u011fini g\u00f6sterir. Farkl\u0131 cihazlarda ve farkl\u0131 a\u011flarda kar\u015f\u0131la\u015ft\u0131rma yaparak sorunun bilgisayarda, yerel a\u011fda veya alan ad\u0131n\u0131n DNS yap\u0131land\u0131rmas\u0131nda oldu\u011funu ay\u0131rabilirsiniz.<\/p>\n<h3>DNS_PROBE_FINISHED_NXDOMAIN ne kadar s\u00fcrede d\u00fczelir?<\/h3>\n<p>Do\u011fru DNS kayd\u0131 eklendikten sonra s\u00fcre TTL, negatif \u00f6nbellek ve nameserver delegasyonuna ba\u011fl\u0131d\u0131r. Yanl\u0131\u015f nameserver veya s\u00fcresi dolmu\u015f alan ad\u0131 gibi temel bir hata d\u00fczeltilmeden beklemek sorunu \u00e7\u00f6zmez.<\/p>\n<h3>DNS \u00f6nbelle\u011fini temizlemek hatay\u0131 kesin olarak \u00e7\u00f6zer mi?<\/h3>\n<p>Yaln\u0131zca bilgisayar\u0131n\u0131zdaki eski DNS cevab\u0131 soruna neden oluyorsa \u00e7\u00f6zebilir. Yetkili DNS sunucusunda kay\u0131t yoksa, nameserver yanl\u0131\u015fsa veya alan ad\u0131 ask\u0131ya al\u0131nm\u0131\u015fsa \u00f6nbellek temizlemek kal\u0131c\u0131 bir de\u011fi\u015fiklik yapmaz.<\/p>\n<h3>DNS_PROBE_FINISHED_NXDOMAIN ile 502 hatas\u0131 aras\u0131ndaki fark nedir?<\/h3>\n<p>NXDOMAIN, alan ad\u0131n\u0131n DNS seviyesinde \u00e7\u00f6z\u00fclemedi\u011fini ve iste\u011fin web sunucusuna ula\u015famayabilece\u011fini belirtir. 502 ise DNS \u00e7\u00f6z\u00fcmlemesinden sonra bir proxy veya gateway&#8217;in upstream sunucudan ge\u00e7erli yan\u0131t alamamas\u0131yla ilgilidir.<\/p>\n<h2 id=\"kaynaklar\">Kaynaklar<\/h2>\n<ul class=\"aiw-sources\">\n<li><a href=\"https:\/\/icann.org\/\" target=\"_blank\" rel=\"noopener\">ICANN &#8211; Domain Name System<\/a> \u2014 icann.org<\/li>\n<li><a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc2308\" target=\"_blank\" rel=\"noopener\">RFC 2308 &#8211; Negative Caching of DNS Queries<\/a> \u2014 rfc-editor.org<\/li>\n<li><a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc8020\" target=\"_blank\" rel=\"noopener\">RFC 8020 &#8211; NXDOMAIN Cut<\/a> \u2014 rfc-editor.org<\/li>\n<li><a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc4033\" target=\"_blank\" rel=\"noopener\">RFC 4033 &#8211; DNS Security Introduction and Requirements<\/a> \u2014 rfc-editor.org<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>DNS_PROBE_FINISHED_NXDOMAIN hatas\u0131n\u0131n anlam\u0131n\u0131, DNS kay\u0131tlar\u0131 ve nameserver ayarlar\u0131n\u0131n nas\u0131l kontrol edilece\u011fini komut \u00f6rnekleriyle anlat\u0131yorum.<\/p>\n","protected":false},"author":2,"featured_media":575,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[723],"tags":[],"class_list":["post-577","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nasil-yapilir"],"lang":"tr","translations":{"tr":577,"en":578},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/comments?post=577"}],"version-history":[{"count":1,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/577\/revisions"}],"predecessor-version":[{"id":579,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/posts\/577\/revisions\/579"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/media\/575"}],"wp:attachment":[{"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/media?parent=577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/categories?post=577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vps.tc\/blog\/wp-json\/wp\/v2\/tags?post=577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}