{"id":16536,"date":"2026-09-13T21:52:35","date_gmt":"2026-09-13T18:52:35","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16536"},"modified":"2026-09-13T21:52:35","modified_gmt":"2026-09-13T18:52:35","slug":"keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/","title":{"rendered":"&#8220;Keyless SSL&#8221; Nedir ve Cloudflare Bunu Nas\u0131l Sa\u011fl\u0131yor?"},"content":{"rendered":"<p>Web g\u00fcvenli\u011fi, dijital varl\u0131klar\u0131n korunmas\u0131nda en kritik halkalardan biridir. Bu g\u00fcvenli\u011fin temel ta\u015f\u0131 olan SSL\/TLS sertifikalar\u0131, kullan\u0131c\u0131 ile sunucu aras\u0131ndaki veri ak\u0131\u015f\u0131n\u0131 \u015fifreleyerek gizlili\u011fi sa\u011flar. Ancak geleneksel SSL\/TLS yap\u0131land\u0131rmalar\u0131, \u00f6zel anahtar\u0131n (private key) \u00fc\u00e7\u00fcnc\u00fc taraf hizmet sa\u011flay\u0131c\u0131lar\u0131n\u0131n sunucular\u0131nda bar\u0131nd\u0131r\u0131lmas\u0131n\u0131 gerektirir. Bu durum, \u00f6zellikle finans, sa\u011fl\u0131k ve kamu gibi s\u0131k\u0131 g\u00fcvenlik ve uyumluluk standartlar\u0131na tabi sekt\u00f6rler i\u00e7in ciddi bir endi\u015fe kayna\u011f\u0131d\u0131r. Cloudflare taraf\u0131ndan geli\u015ftirilen Keyless SSL teknolojisi, bu soruna yenilik\u00e7i bir \u00e7\u00f6z\u00fcm sunarak \u00f6zel anahtar\u0131n kurum d\u0131\u015f\u0131na hi\u00e7 \u00e7\u0131kmadan SSL\/TLS sonland\u0131rma i\u015flemlerinin yap\u0131labilmesine olanak tan\u0131r. Bu makalede, Keyless SSL&#8217;in ne oldu\u011funu, nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve geleneksel y\u00f6ntemlere g\u00f6re ne gibi \u00fcst\u00fcnl\u00fckler sa\u011flad\u0131\u011f\u0131n\u0131 detayl\u0131 bir \u015fekilde inceleyece\u011fiz.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6aa85d56cd5a0\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6aa85d56cd5a0\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Geleneksel-SSLTLS-Yapilandirmasinin-Temelleri\" >Geleneksel SSL\/TLS Yap\u0131land\u0131rmas\u0131n\u0131n Temelleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#SSLTLS-Nedir-ve-Web-Guvenligindeki-Rolu\" >SSL\/TLS Nedir ve Web G\u00fcvenli\u011findeki Rol\u00fc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Public-Key-Acik-Anahtar-ve-Private-Key-Ozel-Anahtar-Kavramlari\" >Public Key (A\u00e7\u0131k Anahtar) ve Private Key (\u00d6zel Anahtar) Kavramlar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Geleneksel-SSLTLS-Handshake-El-Sikisma-Sureci-Nasil-Calisir\" >Geleneksel SSL\/TLS Handshake (El S\u0131k\u0131\u015fma) S\u00fcreci Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Ozel-Anahtarin-Private-Key-Guvenliginin-Kritik-Onemi\" >\u00d6zel Anahtar\u0131n (Private Key) G\u00fcvenli\u011finin Kritik \u00d6nemi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Ozel-Anahtarin-Ucuncu-Taraf-Sunucularda-Barindirilmasinin-Riskleri\" >\u00d6zel Anahtar\u0131n \u00dc\u00e7\u00fcnc\u00fc Taraf Sunucularda Bar\u0131nd\u0131r\u0131lmas\u0131n\u0131n Riskleri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Keyless-SSL-Kavramina-Giris\" >Keyless SSL Kavram\u0131na Giri\u015f<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Keyless-SSL-Nedir\" >Keyless SSL Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Keyless-SSLin-Ortaya-Cikis-Nedenleri-ve-Cozdugu-Guvenlik-Sorunlari\" >Keyless SSL&#8217;in Ortaya \u00c7\u0131k\u0131\u015f Nedenleri ve \u00c7\u00f6zd\u00fc\u011f\u00fc G\u00fcvenlik Sorunlar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#%E2%80%9CAnahtarsiz%E2%80%9D-Keyless-Ifadesi-Gercekten-Ne-Anlama-Geliyor\" >&#8220;Anahtars\u0131z&#8221; (Keyless) \u0130fadesi Ger\u00e7ekten Ne Anlama Geliyor?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Geleneksel-SSL-ile-Keyless-SSL-Arasindaki-Temel-Farklar\" >Geleneksel SSL ile Keyless SSL Aras\u0131ndaki Temel Farklar<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Cloudflarein-Keyless-SSL-Mimarisi-ve-Calisma-Prensibi\" >Cloudflare&#8217;in Keyless SSL Mimarisi ve \u00c7al\u0131\u015fma Prensibi<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Mimarinin-Bilesenleri-Cloudflare-Edge-Sunuculari-ve-Musteri-Key-Serveri\" >Mimarinin Bile\u015fenleri: Cloudflare Edge Sunucular\u0131 ve M\u00fc\u015fteri Key Server&#8217;\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Adim-Adim-Keyless-SSL-Handshake-Sureci\" >Ad\u0131m Ad\u0131m Keyless SSL Handshake S\u00fcreci<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Cloudflare-ve-Key-Server-Arasindaki-Iletisimin-Guvenligi-Nasil-Saglanir\" >Cloudflare ve Key Server Aras\u0131ndaki \u0130leti\u015fimin G\u00fcvenli\u011fi Nas\u0131l Sa\u011flan\u0131r?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Keyless-SSL-Kullanmanin-Avantajlari-ve-Uygulama-Alanlari\" >Keyless SSL Kullanman\u0131n Avantajlar\u0131 ve Uygulama Alanlar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Gelismis-Guvenlik-Ozel-Anahtar-Kontrolunun-Tamamen-Musteride-Kalmasi\" >Geli\u015fmi\u015f G\u00fcvenlik: \u00d6zel Anahtar Kontrol\u00fcn\u00fcn Tamamen M\u00fc\u015fteride Kalmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Yasal-ve-Kurumsal-Uyumluluk-Gereksinimlerinin-Karsilanmasi-PCI-DSS-HIPAA-vb\" >Yasal ve Kurumsal Uyumluluk Gereksinimlerinin Kar\u015f\u0131lanmas\u0131 (PCI DSS, HIPAA vb.)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Karmasik-Altyapilarda-ve-Donanim-Guvenlik-Modullerinde-HSM-Esneklik\" >Karma\u015f\u0131k Altyap\u0131larda ve Donan\u0131m G\u00fcvenlik Mod\u00fcllerinde (HSM) Esneklik<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Performans-ve-Guvenlik-Dengesi\" >Performans ve G\u00fcvenlik Dengesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Kimler-Icin-Ideal-Bir-Cozumdur\" >Kimler \u0130\u00e7in \u0130deal Bir \u00c7\u00f6z\u00fcmd\u00fcr?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Cloudflare-Uzerinde-Keyless-SSL-Kurulumu-ve-Dikkat-Edilmesi-Gerekenler\" >Cloudflare \u00dczerinde Keyless SSL Kurulumu ve Dikkat Edilmesi Gerekenler<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Kurulum-Icin-Gerekli-On-Kosullar\" >Kurulum \u0130\u00e7in Gerekli \u00d6n Ko\u015fullar<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Key-Serverin-Hazirlanmasi-ve-Yapilandirilmasi-gokeyless-kullanimi\" >Key Server&#8217;\u0131n Haz\u0131rlanmas\u0131 ve Yap\u0131land\u0131r\u0131lmas\u0131 (gokeyless kullan\u0131m\u0131)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Cloudflare-Arayuzunden-Keyless-SSLin-Aktiflestirilmesi\" >Cloudflare Aray\u00fcz\u00fcnden Keyless SSL&#8217;in Aktifle\u015ftirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Potansiyel-Zorluklar-ve-Performans-Etkileri-Gecikme-vb\" >Potansiyel Zorluklar ve Performans Etkileri (Gecikme vb.)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Cloudflare-Cozumleri-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >Cloudflare \u00c7\u00f6z\u00fcmleri \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Uzman-Teknik-Destek-ve-Danismanlik\" >Uzman Teknik Destek ve Dan\u0131\u015fmanl\u0131k<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Yerel-Fiyatlandirma-ve-Faturalandirma-Avantajlari\" >Yerel Fiyatland\u0131rma ve Faturaland\u0131rma Avantajlar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Hizli-Kurulum-ve-Entegrasyon-Surecleri\" >H\u0131zl\u0131 Kurulum ve Entegrasyon S\u00fcre\u00e7leri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/keyless-ssl-nedir-ve-cloudflare-bunu-nasil-sagliyor\/#Guvenlik-ve-Performans-Optimizasyonu-Hizmetleri\" >G\u00fcvenlik ve Performans Optimizasyonu Hizmetleri<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Geleneksel-SSLTLS-Yapilandirmasinin-Temelleri\"><\/span>Geleneksel SSL\/TLS Yap\u0131land\u0131rmas\u0131n\u0131n Temelleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Keyless SSL&#8217;in getirdi\u011fi yenilikleri tam olarak anlamak i\u00e7in \u00f6ncelikle geleneksel SSL\/TLS altyap\u0131s\u0131n\u0131n nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 bilmek gerekir. Bu sistem, on y\u0131llard\u0131r internetin g\u00fcvenlik temelini olu\u015fturan kriptografik prensiplere dayan\u0131r ve her g\u00fcn milyarlarca g\u00fcvenli ba\u011flant\u0131n\u0131n kurulmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"SSLTLS-Nedir-ve-Web-Guvenligindeki-Rolu\"><\/span>SSL\/TLS Nedir ve Web G\u00fcvenli\u011findeki Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSL (Secure Sockets Layer) ve onun daha modern ve g\u00fcvenli versiyonu olan TLS (Transport Layer Security), bir web sunucusu ile istemci (genellikle bir web taray\u0131c\u0131s\u0131) aras\u0131nda \u015fifrelenmi\u015f bir ba\u011flant\u0131 kuran standart g\u00fcvenlik protokolleridir. Bu protokollerin temel amac\u0131, iki nokta aras\u0131ndaki veri ileti\u015fimini \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar\u0131n okumas\u0131n\u0131 veya de\u011fi\u015ftirmesini engelleyerek veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc, kimlik do\u011frulamay\u0131 ve gizlili\u011fi sa\u011flamakt\u0131r. Bir web sitesi <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL sertifikas\u0131<\/a> kulland\u0131\u011f\u0131nda, taray\u0131c\u0131 adres \u00e7ubu\u011funda bir kilit simgesi belirir ve adres &#8220;https&#8221; ile ba\u015flar. Bu, kullan\u0131c\u0131lar\u0131n ki\u015fisel bilgileri, kredi kart\u0131 numaralar\u0131 veya parolalar\u0131 gibi hassas verileri g\u00fcvenle payla\u015fabilece\u011fi anlam\u0131na gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Public-Key-Acik-Anahtar-ve-Private-Key-Ozel-Anahtar-Kavramlari\"><\/span>Public Key (A\u00e7\u0131k Anahtar) ve Private Key (\u00d6zel Anahtar) Kavramlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Asimetrik \u015fifrelemenin temelini olu\u015fturan bu iki anahtar, SSL\/TLS&#8217;in kalbinde yer al\u0131r. Matematiksel olarak birbirine ba\u011fl\u0131 olan bu anahtar \u00e7ifti \u015fu \u015fekilde \u00e7al\u0131\u015f\u0131r:<\/p>\n<ul>\n<li><strong>Public Key (A\u00e7\u0131k Anahtar):<\/strong> Ad\u0131ndan da anla\u015f\u0131laca\u011f\u0131 gibi, herkesle payla\u015f\u0131labilen anahtard\u0131r. Veriyi \u015fifrelemek i\u00e7in kullan\u0131l\u0131r. A\u00e7\u0131k anahtar ile \u015fifrelenen bir veri, yaln\u0131zca ve yaln\u0131zca o anahtar\u0131n kar\u015f\u0131l\u0131\u011f\u0131 olan \u00f6zel anahtar ile \u00e7\u00f6z\u00fclebilir.<\/li>\n<li><strong>Private Key (\u00d6zel Anahtar):<\/strong> Bu anahtar kesinlikle gizli tutulmal\u0131 ve sadece sertifika sahibinin kontrol\u00fcndeki g\u00fcvenli bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> \u00fczerinde saklanmal\u0131d\u0131r. Temel g\u00f6revi, a\u00e7\u0131k anahtar ile \u015fifrelenmi\u015f verilerin \u015fifresini \u00e7\u00f6zmektir. Ayn\u0131 zamanda sunucunun kimli\u011fini dijital olarak imzalamak i\u00e7in de kullan\u0131l\u0131r.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Geleneksel-SSLTLS-Handshake-El-Sikisma-Sureci-Nasil-Calisir\"><\/span>Geleneksel SSL\/TLS Handshake (El S\u0131k\u0131\u015fma) S\u00fcreci Nas\u0131l \u00c7al\u0131\u015f\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir kullan\u0131c\u0131 SSL korumal\u0131 bir web sitesine ba\u011fland\u0131\u011f\u0131nda, taray\u0131c\u0131 ve sunucu aras\u0131nda &#8220;handshake&#8221; olarak bilinen bir dizi ad\u0131m ger\u00e7ekle\u015fir. Bu s\u00fcre\u00e7, g\u00fcvenli bir oturumun parametrelerini belirler:<\/p>\n<ol>\n<li><strong>Client Hello:<\/strong> Taray\u0131c\u0131, sunucuya bir ba\u011flant\u0131 talebi g\u00f6nderir. Bu talep, taray\u0131c\u0131n\u0131n destekledi\u011fi \u015fifreleme algoritmalar\u0131 ve SSL\/TLS s\u00fcr\u00fcm\u00fc gibi bilgileri i\u00e7erir.<\/li>\n<li><strong>Server Hello:<\/strong> Sunucu, taray\u0131c\u0131n\u0131n listesinden se\u00e7ti\u011fi bir \u015fifreleme algoritmas\u0131n\u0131 ve SSL sertifikas\u0131n\u0131 geri g\u00f6nderir. Bu sertifika, sunucunun a\u00e7\u0131k anahtar\u0131n\u0131 (public key) ve kimli\u011fini i\u00e7erir.<\/li>\n<li><strong>Authentication:<\/strong> Taray\u0131c\u0131, sunucudan gelen sertifikan\u0131n g\u00fcvenilir bir Sertifika Otoritesi (CA) taraf\u0131ndan imzalan\u0131p imzalanmad\u0131\u011f\u0131n\u0131 kontrol ederek sunucunun kimli\u011fini do\u011frular.<\/li>\n<li><strong>Premaster Secret:<\/strong> Taray\u0131c\u0131, rastgele bir &#8220;premaster secret&#8221; (anahtar \u00f6ncesi s\u0131r) olu\u015fturur, bunu sunucunun a\u00e7\u0131k anahtar\u0131 ile \u015fifreler ve sunucuya g\u00f6nderir.<\/li>\n<li><strong>Decryption:<\/strong> Sunucu, bu \u015fifrelenmi\u015f &#8220;premaster secret&#8221; mesaj\u0131n\u0131 kendi \u00f6zel anahtar\u0131 (private key) ile \u00e7\u00f6zer.<\/li>\n<li><strong>Session Keys Created:<\/strong> Art\u0131k hem taray\u0131c\u0131 hem de sunucu &#8220;premaster secret&#8221; bilgisine sahiptir. Bu bilgiyi kullanarak her ikisi de simetrik oturum anahtarlar\u0131 (session keys) olu\u015fturur. Bu andan itibaren t\u00fcm veri al\u0131\u015fveri\u015fi, bu \u00e7ok daha h\u0131zl\u0131 olan simetrik anahtarlarla \u015fifrelenir.<\/li>\n<\/ol>\n<h3><span class=\"ez-toc-section\" id=\"Ozel-Anahtarin-Private-Key-Guvenliginin-Kritik-Onemi\"><\/span>\u00d6zel Anahtar\u0131n (Private Key) G\u00fcvenli\u011finin Kritik \u00d6nemi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yukar\u0131daki s\u00fcre\u00e7ten de anla\u015f\u0131laca\u011f\u0131 gibi, \u00f6zel anahtar t\u00fcm g\u00fcvenlik zincirinin en kritik halkas\u0131d\u0131r. E\u011fer bu anahtar bir sald\u0131rgan taraf\u0131ndan ele ge\u00e7irilirse, sunucuya g\u00f6nderilen t\u00fcm \u015fifreli trafi\u011fi \u00e7\u00f6zebilir, sunucu gibi davranarak kimlik av\u0131 sald\u0131r\u0131lar\u0131 yapabilir ve ileti\u015fimin gizlili\u011fini tamamen ortadan kald\u0131rabilir. Bu nedenle \u00f6zel anahtar\u0131n korunmas\u0131, web g\u00fcvenli\u011finin en temel \u00f6nceli\u011fidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ozel-Anahtarin-Ucuncu-Taraf-Sunucularda-Barindirilmasinin-Riskleri\"><\/span>\u00d6zel Anahtar\u0131n \u00dc\u00e7\u00fcnc\u00fc Taraf Sunucularda Bar\u0131nd\u0131r\u0131lmas\u0131n\u0131n Riskleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Cloudflare gibi bir CDN (Content Delivery Network) veya WAF (Web Application Firewall) hizmeti kullan\u0131ld\u0131\u011f\u0131nda, geleneksel modelde SSL\/TLS sonland\u0131rma i\u015flemi bu hizmet sa\u011flay\u0131c\u0131n\u0131n edge sunucular\u0131nda yap\u0131l\u0131r. Bu, performans ve g\u00fcvenlik taramas\u0131 i\u00e7in gereklidir. Ancak bu durum, SSL sertifikan\u0131z\u0131n \u00f6zel anahtar\u0131n\u0131n da Cloudflare sunucular\u0131na y\u00fcklenmesini zorunlu k\u0131lar. Her ne kadar Cloudflare gibi \u015firketler bu anahtarlar\u0131 korumak i\u00e7in en \u00fcst d\u00fczey g\u00fcvenlik \u00f6nlemlerini alsalar da baz\u0131 kurulu\u015flar i\u00e7in bu durum kabul edilemez bir risk olu\u015fturur:<\/p>\n<ul>\n<li><strong>Uyumluluk \u0130hlalleri:<\/strong> PCI DSS (\u00d6deme Kart\u0131 Sekt\u00f6r\u00fc Veri G\u00fcvenli\u011fi Standard\u0131) veya HIPAA (Sa\u011fl\u0131k Sigortas\u0131 Ta\u015f\u0131nabilirlik ve Sorumluluk Yasas\u0131) gibi standartlar, \u00f6zel anahtarlar\u0131n kurum d\u0131\u015f\u0131ndaki \u00fc\u00e7\u00fcnc\u00fc taraflarla payla\u015f\u0131lmas\u0131n\u0131 kesinlikle yasaklar.<\/li>\n<li><strong>G\u00fcvenlik Politikalar\u0131:<\/strong> Bir\u00e7ok b\u00fcy\u00fck finans kurumu, devlet dairesi ve teknoloji \u015firketi, en de\u011ferli dijital varl\u0131klar\u0131 olan \u00f6zel anahtarlar\u0131n kontrol\u00fcn\u00fc ba\u015fka bir \u015firkete devretmeyi kendi i\u00e7 g\u00fcvenlik politikalar\u0131 gere\u011fi reddeder.<\/li>\n<li><strong>Risk Y\u00fczeyi:<\/strong> \u00d6zel anahtar\u0131 ba\u015fka bir yere koymak, potansiyel sald\u0131r\u0131 y\u00fczeyini geni\u015fletir. Anahtar\u0131n bulundu\u011fu her ek konum, yeni bir potansiyel zafiyet noktas\u0131 demektir.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Keyless-SSL-Kavramina-Giris\"><\/span>Keyless SSL Kavram\u0131na Giri\u015f<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Geleneksel SSL\/TLS modelinin getirdi\u011fi \u00f6zel anahtar payla\u015f\u0131m\u0131 zorunlulu\u011fu, \u00f6zellikle y\u00fcksek g\u00fcvenlik beklentileri olan kurulu\u015flar i\u00e7in b\u00fcy\u00fck bir engel te\u015fkil ediyordu. Bu kurulu\u015flar, Cloudflare gibi hizmetlerin performans ve g\u00fcvenlik avantajlar\u0131ndan faydalanmak istiyor, ancak en kritik varl\u0131klar\u0131 olan \u00f6zel anahtarlar\u0131n\u0131 kendi kontrolleri d\u0131\u015f\u0131na \u00e7\u0131karmak istemiyorlard\u0131. \u0130\u015fte Keyless SSL, tam olarak bu ikilemi \u00e7\u00f6zmek i\u00e7in geli\u015ftirilmi\u015f bir teknolojidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Keyless-SSL-Nedir\"><\/span>Keyless SSL Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL, bir web sitesinin SSL\/TLS \u00f6zel anahtar\u0131n\u0131 (private key) bir \u00fc\u00e7\u00fcnc\u00fc taraf hizmet sa\u011flay\u0131c\u0131s\u0131na (\u00f6rne\u011fin Cloudflare) y\u00fcklemeden o hizmet sa\u011flay\u0131c\u0131n\u0131n g\u00fcvenlik ve performans \u00f6zelliklerinden yararlanmas\u0131n\u0131 sa\u011flayan bir protokold\u00fcr. Bu y\u00f6ntemde, SSL &#8220;handshake&#8221; s\u00fcrecinin \u00f6zel anahtar gerektiren kriptografik k\u0131sm\u0131, hizmet sa\u011flay\u0131c\u0131n\u0131n edge sunucusu yerine, m\u00fc\u015fterinin kendi kontrol\u00fcndeki g\u00fcvenli bir anahtar sunucusunda (key server) ger\u00e7ekle\u015ftirilir. B\u00f6ylece \u00f6zel anahtar, fiziksel veya mant\u0131ksal olarak asla kurum a\u011f\u0131n\u0131n d\u0131\u015f\u0131na \u00e7\u0131kmaz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Keyless-SSLin-Ortaya-Cikis-Nedenleri-ve-Cozdugu-Guvenlik-Sorunlari\"><\/span>Keyless SSL&#8217;in Ortaya \u00c7\u0131k\u0131\u015f Nedenleri ve \u00c7\u00f6zd\u00fc\u011f\u00fc G\u00fcvenlik Sorunlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL&#8217;in temel motivasyonu, g\u00fcvenlik ve uyumluluk aras\u0131ndaki dengeyi sa\u011flamakt\u0131r. Ortaya \u00e7\u0131k\u0131\u015f nedenleri ve \u00e7\u00f6zd\u00fc\u011f\u00fc temel sorunlar \u015funlard\u0131r:<\/p>\n<ul>\n<li><strong>\u00d6zel Anahtar Kontrol\u00fc:<\/strong> En temel sorun, \u00f6zel anahtar\u0131n kontrol\u00fcn\u00fc \u00fc\u00e7\u00fcnc\u00fc bir tarafa devretme zorunlulu\u011fuydu. Keyless SSL, bu kontrol\u00fcn %100 m\u00fc\u015fteride kalmas\u0131n\u0131 sa\u011flar.<\/li>\n<li><strong>Yasal ve Sekt\u00f6rel Uyumluluk:<\/strong> Bankalar, sa\u011fl\u0131k kurulu\u015flar\u0131 ve e-ticaret siteleri gibi reg\u00fclasyonlara tabi sekt\u00f6rlerin PCI DSS, HIPAA gibi standartlara uyumlu kalmas\u0131n\u0131 sa\u011flar.<\/li>\n<li><strong>Donan\u0131m G\u00fcvenlik Mod\u00fcl\u00fc (HSM) Entegrasyonu:<\/strong> Bir\u00e7ok b\u00fcy\u00fck kurulu\u015f, \u00f6zel anahtarlar\u0131n\u0131 FIPS 140-2 Seviye 3 veya 4 sertifikal\u0131 Donan\u0131m G\u00fcvenlik Mod\u00fcllerinde (HSM) saklar. Geleneksel y\u00f6ntemlerle bu anahtarlar\u0131 bir CDN sa\u011flay\u0131c\u0131s\u0131na ta\u015f\u0131mak imkans\u0131zd\u0131r. Keyless SSL, HSM&#8217;lerde saklanan anahtarlar\u0131n g\u00fcvenli bir \u015fekilde kullan\u0131labilmesine olanak tan\u0131r.<\/li>\n<li><strong>Risk Y\u00f6netimi:<\/strong> \u00d6zel anahtar\u0131n kurum d\u0131\u015f\u0131na \u00e7\u0131kmas\u0131n\u0131 engelleyerek, anahtar\u0131n s\u0131zd\u0131r\u0131lmas\u0131 veya \u00e7al\u0131nmas\u0131 riskini en aza indirir.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"%E2%80%9CAnahtarsiz%E2%80%9D-Keyless-Ifadesi-Gercekten-Ne-Anlama-Geliyor\"><\/span>&#8220;Anahtars\u0131z&#8221; (Keyless) \u0130fadesi Ger\u00e7ekten Ne Anlama Geliyor?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>&#8220;Anahtars\u0131z&#8221; terimi, ilk bak\u0131\u015fta yan\u0131lt\u0131c\u0131 olabilir. Bu teknoloji, SSL\/TLS s\u00fcrecinde hi\u00e7 anahtar kullan\u0131lmad\u0131\u011f\u0131 anlam\u0131na gelmez. Aksine, \u00f6zel anahtar hala s\u00fcrecin merkezindedir. Buradaki &#8220;anahtars\u0131z&#8221; ifadesi, hizmet sa\u011flay\u0131c\u0131n\u0131n (Cloudflare) perspektifinden kullan\u0131l\u0131r. Yani, Cloudflare&#8217;in edge sunucular\u0131, i\u015flemi ger\u00e7ekle\u015ftirirken m\u00fc\u015fterinin \u00f6zel anahtar\u0131na sahip &#8220;de\u011fildir&#8221; veya anahtara &#8220;eri\u015fimi yoktur&#8221;. Anahtar, m\u00fc\u015fterinin kendi sunucusunda kal\u0131r ve Cloudflare, sadece \u015fifre \u00e7\u00f6zme i\u015flemini uzaktan tetikler. Dolay\u0131s\u0131yla, &#8220;Cloudflare i\u00e7in Anahtars\u0131z SSL&#8221; daha do\u011fru bir tan\u0131m olabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Geleneksel-SSL-ile-Keyless-SSL-Arasindaki-Temel-Farklar\"><\/span>Geleneksel SSL ile Keyless SSL Aras\u0131ndaki Temel Farklar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130ki yakla\u015f\u0131m aras\u0131ndaki temel farklar\u0131 daha net g\u00f6rebilmek i\u00e7in bir kar\u015f\u0131la\u015ft\u0131rma yapmak faydal\u0131 olacakt\u0131r. Bu farklar, \u00f6zellikle anahtar y\u00f6netimi ve g\u00fcvenlik mimarisi noktalar\u0131nda belirginle\u015fir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>Geleneksel SSL\/TLS<\/th>\n<th>Keyless SSL<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u00d6zel Anahtar\u0131n Konumu<\/strong><\/td>\n<td>Hizmet sa\u011flay\u0131c\u0131n\u0131n (\u00f6rn: Cloudflare) edge sunucusunda bar\u0131nd\u0131r\u0131l\u0131r.<\/td>\n<td>M\u00fc\u015fterinin kendi kontrol\u00fcndeki anahtar sunucusunda (key server) veya HSM&#8217;de kal\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><strong>G\u00fcvenlik Kontrol\u00fc<\/strong><\/td>\n<td>Kontrol, hizmet sa\u011flay\u0131c\u0131 ile payla\u015f\u0131l\u0131r. M\u00fc\u015fteri, sa\u011flay\u0131c\u0131n\u0131n g\u00fcvenlik \u00f6nlemlerine g\u00fcvenir.<\/td>\n<td>\u00d6zel anahtar \u00fczerindeki kontrol tamamen m\u00fc\u015fteridedir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Uyumluluk<\/strong><\/td>\n<td>PCI DSS, HIPAA gibi s\u0131k\u0131 reg\u00fclasyonlara sahip kurulu\u015flar i\u00e7in uyumsuz olabilir.<\/td>\n<td>S\u0131k\u0131 yasal ve kurumsal uyumluluk gereksinimlerini kar\u015f\u0131lar.<\/td>\n<\/tr>\n<tr>\n<td><strong>Handshake \u0130\u015flemi<\/strong><\/td>\n<td>T\u00fcm handshake s\u00fcreci hizmet sa\u011flay\u0131c\u0131n\u0131n sunucusunda tamamlan\u0131r.<\/td>\n<td>Handshake&#8217;in \u00f6zel anahtar gerektiren k\u0131sm\u0131, m\u00fc\u015fterinin anahtar sunucusuna delege edilir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Mimari Karma\u015f\u0131kl\u0131\u011f\u0131<\/strong><\/td>\n<td>Daha basit. Sadece sertifika ve anahtar\u0131n y\u00fcklenmesi yeterlidir.<\/td>\n<td>Daha karma\u015f\u0131k. M\u00fc\u015fterinin bir anahtar sunucusu kurup y\u00f6netmesi gerekir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Cloudflarein-Keyless-SSL-Mimarisi-ve-Calisma-Prensibi\"><\/span>Cloudflare&#8217;in Keyless SSL Mimarisi ve \u00c7al\u0131\u015fma Prensibi<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Cloudflare, Keyless SSL teknolojisini sunan ilk b\u00fcy\u00fck sa\u011flay\u0131c\u0131lardan biridir ve bu alanda olduk\u00e7a olgun bir mimariye sahiptir. Sistem, Cloudflare&#8217;in k\u00fcresel a\u011f\u0131 ile m\u00fc\u015fterinin \u00f6zel altyap\u0131s\u0131 aras\u0131nda g\u00fcvenli ve verimli bir i\u015f birli\u011fi \u00fczerine kuruludur. Bu mimari, \u00f6zel anahtar\u0131n g\u00fcvenli\u011fini sa\u011flarken Cloudflare&#8217;in di\u011fer t\u00fcm avantajlar\u0131ndan yararlanmaya devam etmenizi sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Mimarinin-Bilesenleri-Cloudflare-Edge-Sunuculari-ve-Musteri-Key-Serveri\"><\/span>Mimarinin Bile\u015fenleri: Cloudflare Edge Sunucular\u0131 ve M\u00fc\u015fteri Key Server&#8217;\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Cloudflare&#8217;in Keyless SSL mimarisi iki ana bile\u015fenden olu\u015fur:<\/p>\n<ol>\n<li><strong>Cloudflare Edge Sunucular\u0131:<\/strong> Cloudflare&#8217;in d\u00fcnya geneline yay\u0131lm\u0131\u015f Veri Merkezlerinde bulunan bu sunucular, son kullan\u0131c\u0131lara en yak\u0131n noktalard\u0131r. Gelen trafik ilk olarak bu sunucular taraf\u0131ndan kar\u015f\u0131lan\u0131r. DDos korumas\u0131, WAF, \u00f6nbellekleme gibi i\u015flemler burada yap\u0131l\u0131r. Keyless SSL senaryosunda, SSL handshake s\u00fcrecini ba\u015flat\u0131r ve y\u00f6netirler, ancak \u00f6zel anahtar gerektiren ad\u0131m\u0131 ger\u00e7ekle\u015ftiremezler.<\/li>\n<li><strong>M\u00fc\u015fteri Key Server&#8217;\u0131 (Anahtar Sunucusu):<\/strong> Bu, m\u00fc\u015fterinin kendi veri merkezinde veya bulut ortam\u0131nda bulunan, \u00f6zel olarak yap\u0131land\u0131r\u0131lm\u0131\u015f bir sunucudur. Tek ve en \u00f6nemli g\u00f6revi, SSL \u00f6zel anahtar\u0131n\u0131 g\u00fcvenli bir \u015fekilde saklamak ve Cloudflare edge sunucular\u0131ndan gelen \u015fifre \u00e7\u00f6zme taleplerini i\u015flemektir. Bu <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">VPS<\/a>, fiziksel bir sunucu veya bir HSM cihaz\u0131 olabilir. Cloudflare, bu sunucunun kurulumu i\u00e7in `gokeyless` ad\u0131nda a\u00e7\u0131k kaynakl\u0131 bir yaz\u0131l\u0131m sunar.<\/li>\n<\/ol>\n<h3><span class=\"ez-toc-section\" id=\"Adim-Adim-Keyless-SSL-Handshake-Sureci\"><\/span>Ad\u0131m Ad\u0131m Keyless SSL Handshake S\u00fcreci<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL handshake s\u00fcreci, geleneksel s\u00fcrece \u00e7ok benzer ancak \u00f6zel anahtar\u0131n kullan\u0131ld\u0131\u011f\u0131 kritik bir noktada farkl\u0131la\u015f\u0131r. \u0130\u015fte s\u00fcrecin i\u015fleyi\u015fi:<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Ad\u0131m<\/th>\n<th>A\u00e7\u0131klama<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>1. \u0130stemci (Client) Ba\u011flant\u0131 Talebi<\/strong><\/td>\n<td>Kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131, web sitesine bir HTTPS talebi g\u00f6nderir (Client Hello). Bu talep, en yak\u0131n Cloudflare edge sunucusuna ula\u015f\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><strong>2. Cloudflare&#8217;in Handshake&#8217;i Ba\u015flatmas\u0131<\/strong><\/td>\n<td>Cloudflare edge sunucusu, siteye ait SSL sertifikas\u0131n\u0131 (ancak \u00f6zel anahtar\u0131 de\u011fil) taray\u0131c\u0131ya g\u00f6nderir (Server Hello). Taray\u0131c\u0131, sunucunun kimli\u011fini do\u011frular ve a\u00e7\u0131k anahtar\u0131 kullanarak bir &#8220;premaster secret&#8221; olu\u015fturur.<\/td>\n<\/tr>\n<tr>\n<td><strong>3. \u015eifre \u00c7\u00f6zme Talebinin Key Server&#8217;a \u0130letilmesi<\/strong><\/td>\n<td>Taray\u0131c\u0131, \u015fifrelenmi\u015f &#8220;premaster secret&#8221; bilgisini Cloudflare&#8217;e g\u00f6nderir. Cloudflare, elinde \u00f6zel anahtar olmad\u0131\u011f\u0131 i\u00e7in bu mesaj\u0131 \u00e7\u00f6zemez. Bunun yerine, bu \u015fifreli veriyi ve ilgili metadata&#8217;y\u0131, aralar\u0131nda kurulmu\u015f g\u00fcvenli bir t\u00fcnel \u00fczerinden m\u00fc\u015fterinin Key Server&#8217;\u0131na iletir.<\/td>\n<\/tr>\n<tr>\n<td><strong>4. M\u00fc\u015fteri Sunucusunda Ger\u00e7ekle\u015fen Kriptografik \u0130\u015flem<\/strong><\/td>\n<td>M\u00fc\u015fterinin Key Server&#8217;\u0131, Cloudflare&#8217;den gelen talebi al\u0131r. Kendi b\u00fcnyesinde g\u00fcvenli bir \u015fekilde saklad\u0131\u011f\u0131 \u00f6zel anahtar\u0131 kullanarak \u015fifrelenmi\u015f &#8220;premaster secret&#8221; verisini \u00e7\u00f6zer. <strong>\u00d6nemli:<\/strong> \u00d6zel anahtar bu i\u015flem s\u0131ras\u0131nda asla sunucudan ayr\u0131lmaz.<\/td>\n<\/tr>\n<tr>\n<td><strong>5. Oturum Anahtar\u0131n\u0131n (Session Key) Olu\u015fturulmas\u0131 ve G\u00fcvenli \u0130leti\u015fimin Ba\u015flamas\u0131<\/strong><\/td>\n<td>Key Server, \u015fifresini \u00e7\u00f6zd\u00fc\u011f\u00fc &#8220;premaster secret&#8221; bilgisini tekrar g\u00fcvenli t\u00fcnel \u00fczerinden Cloudflare edge sunucusuna geri g\u00f6nderir. Art\u0131k Cloudflare sunucusu ve kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131, simetrik oturum anahtarlar\u0131n\u0131 (session keys) olu\u015fturmak i\u00e7in gereken bilgiye sahiptir. Handshake tamamlan\u0131r ve bundan sonraki t\u00fcm veri ak\u0131\u015f\u0131, bu oturum anahtarlar\u0131yla \u015fifrelenerek do\u011frudan Cloudflare edge sunucusu ile taray\u0131c\u0131 aras\u0131nda ger\u00e7ekle\u015fir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Cloudflare-ve-Key-Server-Arasindaki-Iletisimin-Guvenligi-Nasil-Saglanir\"><\/span>Cloudflare ve Key Server Aras\u0131ndaki \u0130leti\u015fimin G\u00fcvenli\u011fi Nas\u0131l Sa\u011flan\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Mimarinin en hassas noktalar\u0131ndan biri, Cloudflare edge sunucular\u0131 ile m\u00fc\u015fterinin Key Server&#8217;\u0131 aras\u0131ndaki ileti\u015fimdir. Bu kanal\u0131n g\u00fcvenli\u011fi, t\u00fcm sistemin g\u00fcvenli\u011fi i\u00e7in hayati \u00f6nem ta\u015f\u0131r. Cloudflare, bu ba\u011flant\u0131y\u0131 korumak i\u00e7in katmanl\u0131 bir g\u00fcvenlik yakla\u015f\u0131m\u0131 benimser:<\/p>\n<ul>\n<li><strong>Kar\u015f\u0131l\u0131kl\u0131 Kimlik Do\u011frulama (mTLS):<\/strong> Ba\u011flant\u0131, her iki taraf\u0131n da birbirine kendi SSL sertifikalar\u0131n\u0131 sundu\u011fu kar\u015f\u0131l\u0131kl\u0131 TLS (mTLS) ile \u015fifrelenir. Bu, sadece yetkili Cloudflare sunucular\u0131n\u0131n Key Server ile konu\u015fabilmesini ve Key Server&#8217;\u0131n da sadece ger\u00e7ek Cloudflare sunucular\u0131ndan gelen talepleri kabul etmesini sa\u011flar.<\/li>\n<li><strong>G\u00fcvenli T\u00fcnel:<\/strong> T\u00fcm ileti\u015fim, bu mTLS ile korunan \u015fifreli bir t\u00fcnel i\u00e7inde ger\u00e7ekle\u015fir. Bu, araya girme (man-in-the-middle) sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar.<\/li>\n<li><strong>IP K\u0131s\u0131tlamalar\u0131:<\/strong> M\u00fc\u015fteriler, Key Server&#8217;lar\u0131na yaln\u0131zca Cloudflare&#8217;in belirli IP aral\u0131klar\u0131ndan gelen isteklere izin verecek \u015fekilde g\u00fcvenlik duvar\u0131 kurallar\u0131 yap\u0131land\u0131rabilirler. Bu, yetkisiz eri\u015fim denemelerine kar\u015f\u0131 ek bir koruma katman\u0131 olu\u015fturur.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Keyless-SSL-Kullanmanin-Avantajlari-ve-Uygulama-Alanlari\"><\/span>Keyless SSL Kullanman\u0131n Avantajlar\u0131 ve Uygulama Alanlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Keyless SSL, yaln\u0131zca bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc olman\u0131n \u00f6tesinde, modern altyap\u0131lar\u0131n esneklik ve uyumluluk ihtiya\u00e7lar\u0131na cevap veren stratejik bir teknolojidir. Bu yakla\u015f\u0131m, g\u00fcvenlikten \u00f6d\u00fcn vermeden en yeni web teknolojilerinden faydalanma imkan\u0131 sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gelismis-Guvenlik-Ozel-Anahtar-Kontrolunun-Tamamen-Musteride-Kalmasi\"><\/span>Geli\u015fmi\u015f G\u00fcvenlik: \u00d6zel Anahtar Kontrol\u00fcn\u00fcn Tamamen M\u00fc\u015fteride Kalmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL&#8217;in en temel ve en \u00f6nemli avantaj\u0131 budur. \u00d6zel anahtar, bir kurumun en de\u011ferli dijital varl\u0131\u011f\u0131d\u0131r. Bu anahtar\u0131n kontrol\u00fcn\u00fc \u00fc\u00e7\u00fcnc\u00fc bir tarafa devretmek, her zaman belirli bir d\u00fczeyde risk i\u00e7erir. Keyless SSL ile bu risk tamamen ortadan kalkar. \u00d6zel anahtar, kurumun kendi g\u00fcvenlik perimetresi i\u00e7inde, kendi denetledi\u011fi donan\u0131m ve yaz\u0131l\u0131mlar \u00fczerinde kal\u0131r. Bu, anahtar\u0131n s\u0131zd\u0131r\u0131lmas\u0131, kopyalanmas\u0131 veya k\u00f6t\u00fcye kullan\u0131lmas\u0131 olas\u0131l\u0131\u011f\u0131n\u0131 en aza indirir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yasal-ve-Kurumsal-Uyumluluk-Gereksinimlerinin-Karsilanmasi-PCI-DSS-HIPAA-vb\"><\/span>Yasal ve Kurumsal Uyumluluk Gereksinimlerinin Kar\u015f\u0131lanmas\u0131 (PCI DSS, HIPAA vb.)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir\u00e7ok sekt\u00f6r, veri g\u00fcvenli\u011fi konusunda kat\u0131 yasal d\u00fczenlemelere ve standartlara tabidir. \u00d6rne\u011fin:<\/p>\n<ul>\n<li><strong>PCI DSS:<\/strong> Kredi kart\u0131 verilerini i\u015fleyen, saklayan veya ileten t\u00fcm kurulu\u015flar i\u00e7in zorunludur. Bu standart, kriptografik anahtarlar\u0131n y\u00f6netimini s\u0131k\u0131 kurallara ba\u011flar ve genellikle anahtarlar\u0131n \u00fc\u00e7\u00fcnc\u00fc taraflarla payla\u015f\u0131lmas\u0131na izin vermez.<\/li>\n<li><strong>HIPAA:<\/strong> ABD&#8217;de sa\u011fl\u0131k verilerinin gizlili\u011fini ve g\u00fcvenli\u011fini d\u00fczenler. Hasta bilgilerini korumak i\u00e7in kullan\u0131lan \u015fifreleme anahtarlar\u0131n\u0131n kontrol\u00fc kritik \u00f6neme sahiptir.<\/li>\n<li><strong>Di\u011fer D\u00fczenlemeler:<\/strong> Avrupa&#8217;daki GDPR veya \u00e7e\u015fitli \u00fclkelerdeki veri yerelle\u015ftirme yasalar\u0131 gibi d\u00fczenlemeler, hassas verilerin ve ilgili kriptografik anahtarlar\u0131n nas\u0131l y\u00f6netilece\u011fi konusunda kat\u0131 kurallar getirebilir.<\/li>\n<\/ul>\n<p>Keyless SSL, bu gibi uyumluluk gereksinimlerini kar\u015f\u0131lamay\u0131 kolayla\u015ft\u0131r\u0131r \u00e7\u00fcnk\u00fc \u00f6zel anahtar\u0131n kurum d\u0131\u015f\u0131na \u00e7\u0131kmas\u0131n\u0131 engelleyerek d\u00fczenlemelerin temel bir \u015fart\u0131n\u0131 yerine getirir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Karmasik-Altyapilarda-ve-Donanim-Guvenlik-Modullerinde-HSM-Esneklik\"><\/span>Karma\u015f\u0131k Altyap\u0131larda ve Donan\u0131m G\u00fcvenlik Mod\u00fcllerinde (HSM) Esneklik<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>B\u00fcy\u00fck kurulu\u015flar genellikle \u00f6zel anahtarlar\u0131n\u0131, kurcalamaya kar\u015f\u0131 dayan\u0131kl\u0131 ve y\u00fcksek d\u00fczeyde g\u00fcvenlik sa\u011flayan \u00f6zel donan\u0131m cihazlar\u0131 olan HSM&#8217;lerde saklar. Geleneksel y\u00f6ntemlerle bir HSM i\u00e7inde bulunan anahtar\u0131 bir bulut hizmetine ta\u015f\u0131mak pratik veya g\u00fcvenli de\u011fildir. Keyless SSL, bu senaryo i\u00e7in m\u00fckemmel bir \u00e7\u00f6z\u00fcm sunar. M\u00fc\u015fterinin Key Server&#8217;\u0131, HSM ile do\u011frudan entegre olabilir. B\u00f6ylece Cloudflare&#8217;den gelen \u015fifre \u00e7\u00f6zme talepleri HSM taraf\u0131ndan i\u015flenir ve anahtar, FIPS 140-2 gibi en y\u00fcksek g\u00fcvenlik standartlar\u0131na sahip bir cihazdan asla ayr\u0131lmaz. Bu da hem HSM yat\u0131r\u0131m\u0131n\u0131n de\u011ferini korur hem de bulut tabanl\u0131 hizmetlerden faydalanma esnekli\u011fi sa\u011flar. Bir\u00e7ok firma bu y\u00f6ntemle g\u00fcvenli\u011fi ve esnekli\u011fi bir arada kullanmak i\u00e7in <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vds-sunucu.html\" target=\"_blank\">VDS<\/a> \u00e7\u00f6z\u00fcmlerini tercih etmektedir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Performans-ve-Guvenlik-Dengesi\"><\/span>Performans ve G\u00fcvenlik Dengesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL, performans ve g\u00fcvenlik aras\u0131nda ideal bir denge kurar. Kriptografik olarak en yo\u011fun ve en yava\u015f i\u015flem olan asimetrik \u015fifre \u00e7\u00f6zme (\u00f6zel anahtar\u0131n kullan\u0131ld\u0131\u011f\u0131 ad\u0131m), m\u00fc\u015fterinin sunucusunda yaln\u0131zca bir kez yap\u0131l\u0131r. Handshake tamamland\u0131ktan sonra, \u00e7ok daha h\u0131zl\u0131 olan simetrik \u015fifreleme ile veri ak\u0131\u015f\u0131 do\u011frudan kullan\u0131c\u0131 ile Cloudflare edge sunucusu aras\u0131nda devam eder. Bu sayede, \u00f6zel anahtar\u0131n g\u00fcvenli\u011fi en \u00fcst d\u00fczeyde tutulurken, Cloudflare&#8217;in k\u00fcresel a\u011f\u0131 sayesinde i\u00e7erik teslimat\u0131 (caching), <a href=\"https:\/\/www.ihs.com.tr\/blog\/windows-10-simdiden-75-milyondan-fazla-cihaza-yuklendi-bile\/\" target=\"_blank\">h\u0131zland\u0131rma ve DDoS korumas\u0131 gibi performans avantajlar\u0131ndan<\/a> tam olarak yararlan\u0131l\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kimler-Icin-Ideal-Bir-Cozumdur\"><\/span>Kimler \u0130\u00e7in \u0130deal Bir \u00c7\u00f6z\u00fcmd\u00fcr?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL, \u00f6zellikle a\u015fa\u011f\u0131daki profil ve sekt\u00f6rlerdeki kurulu\u015flar i\u00e7in ideal bir \u00e7\u00f6z\u00fcmd\u00fcr:<\/p>\n<h4>Finans Kurulu\u015flar\u0131<\/h4>\n<p>Bankalar, sigorta \u015firketleri, \u00f6deme sistemleri ve fintech giri\u015fimleri, hem m\u00fc\u015fteri verilerini korumak hem de PCI DSS gibi standartlara uymak zorundad\u0131r. Keyless SSL, bu kurumlar\u0131n \u00f6zel anahtarlar\u0131n\u0131 kendi y\u00fcksek g\u00fcvenlikli veri merkezlerinde tutmalar\u0131na olanak tan\u0131r.<\/p>\n<h4>Sa\u011fl\u0131k Sekt\u00f6r\u00fc<\/h4>\n<p>Hastaneler, klinikler ve sa\u011fl\u0131k verisi i\u015fleyen teknoloji \u015firketleri, HIPAA gibi kat\u0131 gizlilik yasalar\u0131na tabidir. Hasta kay\u0131tlar\u0131n\u0131n ve ki\u015fisel sa\u011fl\u0131k bilgilerinin gizlili\u011fi esast\u0131r. Keyless SSL, bu verilerin \u015fifrelenmesinde kullan\u0131lan anahtarlar\u0131n tam kontrol\u00fcn\u00fc sa\u011flar.<\/p>\n<h4>Devlet Kurumlar\u0131<\/h4>\n<p>Ulusal g\u00fcvenlik, vatanda\u015f verileri ve kritik altyap\u0131larla ilgili bilgileri y\u00f6neten devlet kurumlar\u0131 i\u00e7in veri egemenli\u011fi ve anahtar kontrol\u00fc vazge\u00e7ilmezdir. Keyless SSL, bu kurumlar\u0131n bulut tabanl\u0131 g\u00fcvenlik hizmetlerini kullan\u0131rken bile anahtar egemenli\u011fini korumalar\u0131na yard\u0131mc\u0131 olur.<\/p>\n<h4>S\u0131k\u0131 G\u00fcvenlik Politikalar\u0131na Sahip B\u00fcy\u00fck \u015eirketler<\/h4>\n<p>Teknoloji devleri, b\u00fcy\u00fck e-ticaret platformlar\u0131 veya fikri m\u00fclkiyeti kritik \u00f6neme sahip \u015firketler, genellikle kendi i\u00e7 g\u00fcvenlik politikalar\u0131 gere\u011fi kriptografik anahtarlar\u0131n kontrol\u00fcn\u00fc d\u0131\u015far\u0131ya devretmezler. Keyless SSL, bu \u015firketlerin g\u00fcvenlik standartlar\u0131ndan \u00f6d\u00fcn vermeden Cloudflare gibi hizmetlerden faydalanmas\u0131n\u0131 sa\u011flar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cloudflare-Uzerinde-Keyless-SSL-Kurulumu-ve-Dikkat-Edilmesi-Gerekenler\"><\/span>Cloudflare \u00dczerinde Keyless SSL Kurulumu ve Dikkat Edilmesi Gerekenler<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Keyless SSL&#8217;i hayata ge\u00e7irmek, geleneksel SSL kurulumundan daha fazla planlama ve teknik haz\u0131rl\u0131k gerektiren bir s\u00fcre\u00e7tir. M\u00fc\u015fterinin kendi altyap\u0131s\u0131nda bir bile\u015fen (Key Server) kurmas\u0131n\u0131 gerektirdi\u011fi i\u00e7in dikkatli bir yap\u0131land\u0131rma esast\u0131r. Ba\u015far\u0131l\u0131 bir kurulum i\u00e7in \u00f6n ko\u015fullar\u0131n sa\u011flanmas\u0131 ve potansiyel zorluklar\u0131n fark\u0131nda olunmas\u0131 \u00f6nemlidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kurulum-Icin-Gerekli-On-Kosullar\"><\/span>Kurulum \u0130\u00e7in Gerekli \u00d6n Ko\u015fullar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL&#8217;i etkinle\u015ftirmeden \u00f6nce a\u015fa\u011f\u0131daki gereksinimlerin kar\u015f\u0131land\u0131\u011f\u0131ndan emin olmal\u0131s\u0131n\u0131z:<\/p>\n<ul>\n<li><strong>Cloudflare Enterprise Plan\u0131:<\/strong> Keyless SSL, yaln\u0131zca Cloudflare&#8217;in Enterprise d\u00fczeyindeki m\u00fc\u015fterilerine sundu\u011fu bir \u00f6zelliktir.<\/li>\n<li><strong>\u00d6zel Anahtar ve Sertifika:<\/strong> Key Server&#8217;da saklanacak olan SSL\/TLS \u00f6zel anahtar\u0131n\u0131za ve bu anahtara kar\u015f\u0131l\u0131k gelen, bir Sertifika Otoritesi (CA) taraf\u0131ndan imzalanm\u0131\u015f SSL sertifikan\u0131za sahip olman\u0131z gerekir.<\/li>\n<li><strong>Key Server Donan\u0131m\u0131:<\/strong> \u00d6zel anahtar\u0131 bar\u0131nd\u0131racak ve kriptografik i\u015flemleri yapacak bir sunucuya ihtiyac\u0131n\u0131z vard\u0131r. Bu, bir fiziksel sunucu, sanal makine (<a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/linux-hosting.html\" target=\"_blank\">Linux Hosting<\/a> \u00fczerinde \u00e7al\u0131\u015fan) veya HSM olabilir. Sunucunun, beklenen trafik y\u00fck\u00fcn\u00fc kald\u0131rabilecek yeterli CPU kapasitesine sahip olmas\u0131 \u00f6nemlidir.<\/li>\n<li><strong>A\u011f Eri\u015fimi ve G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rmas\u0131:<\/strong> Key Server&#8217;\u0131n\u0131z\u0131n internet \u00fczerinden eri\u015filebilir olmas\u0131 ve Cloudflare&#8217;in IP aral\u0131klar\u0131ndan gelen trafi\u011fe izin verecek \u015fekilde g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n ayarlanmas\u0131 gerekir.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Key-Serverin-Hazirlanmasi-ve-Yapilandirilmasi-gokeyless-kullanimi\"><\/span>Key Server&#8217;\u0131n Haz\u0131rlanmas\u0131 ve Yap\u0131land\u0131r\u0131lmas\u0131 (gokeyless kullan\u0131m\u0131)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Cloudflare, Key Server yaz\u0131l\u0131m\u0131n\u0131n kurulumunu kolayla\u015ft\u0131rmak i\u00e7in Go programlama dilinde yaz\u0131lm\u0131\u015f `gokeyless` adl\u0131 a\u00e7\u0131k kaynakl\u0131 bir ara\u00e7 sunar. Kurulum s\u00fcreci genel olarak \u015fu ad\u0131mlar\u0131 i\u00e7erir:<\/p>\n<ol>\n<li><strong>gokeyless Yaz\u0131l\u0131m\u0131n\u0131n Kurulumu:<\/strong> Key Server olarak belirledi\u011finiz sunucuya `gokeyless` uygulamas\u0131n\u0131 derleyip kurman\u0131z gerekir. Bu i\u015flem, genellikle GitHub reposundan kaynak kodunu \u00e7ekip derlemeyi i\u00e7erir.<\/li>\n<li><strong>Yap\u0131land\u0131rma Dosyas\u0131n\u0131n Olu\u015fturulmas\u0131:<\/strong> `gokeyless`&#8217;in \u00e7al\u0131\u015fmas\u0131 i\u00e7in bir yap\u0131land\u0131rma dosyas\u0131 (genellikle bir YAML dosyas\u0131) olu\u015fturulur. Bu dosyada SSL \u00f6zel anahtar\u0131n\u0131n ve sertifikas\u0131n\u0131n dosya yollar\u0131 belirtilir. E\u011fer bir HSM kullan\u0131l\u0131yorsa, PKCS#11 aray\u00fcz\u00fc ile ilgili yap\u0131land\u0131rma bilgileri de bu dosyaya eklenir.<\/li>\n<li><strong>Hizmet Olarak \u00c7al\u0131\u015ft\u0131rma:<\/strong> `gokeyless` sunucusunun sistem ba\u015flang\u0131c\u0131nda otomatik olarak \u00e7al\u0131\u015fmas\u0131 ve s\u00fcrekli aktif kalmas\u0131 i\u00e7in bir sistem hizmeti (\u00f6rne\u011fin, systemd servisi) olarak yap\u0131land\u0131r\u0131lmas\u0131 tavsiye edilir.<\/li>\n<li><strong>G\u00fcvenlik \u00d6nlemleri:<\/strong> Sunucunun kendisi de g\u00fc\u00e7lendirilmelidir. Gereksiz portlar kapat\u0131lmal\u0131, i\u015fletim sistemi g\u00fcncel tutulmal\u0131 ve eri\u015fim kontrolleri s\u0131k\u0131la\u015ft\u0131r\u0131lmal\u0131d\u0131r. Farkl\u0131 <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">alan ad\u0131<\/a> i\u00e7in ayr\u0131 Key Server kurmak da bir se\u00e7enektir.<\/li>\n<\/ol>\n<h3><span class=\"ez-toc-section\" id=\"Cloudflare-Arayuzunden-Keyless-SSLin-Aktiflestirilmesi\"><\/span>Cloudflare Aray\u00fcz\u00fcnden Keyless SSL&#8217;in Aktifle\u015ftirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Key Server&#8217;\u0131n\u0131z haz\u0131r ve \u00e7al\u0131\u015f\u0131r duruma geldikten sonra, Cloudflare taraf\u0131ndaki yap\u0131land\u0131rma olduk\u00e7a basittir:<\/p>\n<ol>\n<li>Cloudflare Enterprise hesab\u0131n\u0131za giri\u015f yap\u0131n.<\/li>\n<li>\u0130lgili <a href=\"https:\/\/www.ihs.com.tr\/whois-sorgulama\" target=\"_blank\">domain sorgulama<\/a> sonras\u0131 y\u00f6netti\u011finiz alan ad\u0131n\u0131 se\u00e7in ve &#8220;SSL\/TLS&#8221; sekmesine gidin.<\/li>\n<li>&#8220;Edge Certificates&#8221; (U\u00e7 Sertifikalar\u0131) b\u00f6l\u00fcm\u00fcnde &#8220;Upload Custom SSL Certificate&#8221; (\u00d6zel SSL Sertifikas\u0131 Y\u00fckle) se\u00e7ene\u011fini bulun.<\/li>\n<li>Burada, &#8220;Keyless SSL&#8221; se\u00e7ene\u011fini g\u00f6receksiniz. Bu se\u00e7ene\u011fi i\u015faretleyin.<\/li>\n<li>Cloudflare, sizden Key Server&#8217;\u0131n\u0131z\u0131n IP adresini veya alan ad\u0131n\u0131, port numaras\u0131n\u0131 ve Key Server&#8217;\u0131 do\u011frulamak i\u00e7in kullan\u0131lacak sertifikay\u0131 (Cloudflare ile Key Server aras\u0131ndaki mTLS t\u00fcneli i\u00e7in) girmenizi isteyecektir.<\/li>\n<li>Gerekli bilgileri girdikten sonra, Cloudflare Key Server&#8217;\u0131n\u0131zla ba\u011flant\u0131 kurmaya \u00e7al\u0131\u015facak ve ba\u011flant\u0131 ba\u015far\u0131l\u0131 olursa Keyless SSL aktif hale gelecektir.<\/li>\n<\/ol>\n<h3><span class=\"ez-toc-section\" id=\"Potansiyel-Zorluklar-ve-Performans-Etkileri-Gecikme-vb\"><\/span>Potansiyel Zorluklar ve Performans Etkileri (Gecikme vb.)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL, bir\u00e7ok avantaj sunsa da baz\u0131 potansiyel zorluklar\u0131 ve dikkat edilmesi gereken noktalar\u0131 vard\u0131r:<\/p>\n<ul>\n<li><strong>Gecikme (Latency):<\/strong> En \u00f6nemli performans etkisi gecikmedir. Her yeni SSL handshake i\u015flemi i\u00e7in Cloudflare&#8217;in edge sunucusu ile sizin Key Server&#8217;\u0131n\u0131z aras\u0131nda bir gidi\u015f-d\u00f6n\u00fc\u015f (round-trip) gerekir. Bu, \u00f6zellikle Key Server&#8217;\u0131n\u0131z\u0131n co\u011frafi olarak kullan\u0131c\u0131dan ve Cloudflare edge sunucusundan uzakta olmas\u0131 durumunda, ilk ba\u011flant\u0131 s\u00fcresine birka\u00e7 on milisaniye ekleyebilir. Bu gecikme, genellikle oturum yeniden kullan\u0131m\u0131 (session resumption) sayesinde sonraki ba\u011flant\u0131larda hissedilmez, ancak ilk ziyaret i\u00e7in bir fakt\u00f6rd\u00fcr.<\/li>\n<li><strong>Key Server&#8217;\u0131n Eri\u015filebilirli\u011fi ve Yedeklili\u011fi:<\/strong> Key Server&#8217;\u0131n\u0131z, web sitenizin HTTPS trafi\u011fi i\u00e7in kritik bir altyap\u0131 bile\u015feni haline gelir. E\u011fer Key Server&#8217;\u0131n\u0131z \u00e7\u00f6kerse veya eri\u015filemez hale gelirse, yeni SSL ba\u011flant\u0131lar\u0131 kurulamaz ve siteniz ziyaret\u00e7iler i\u00e7in eri\u015filemez olabilir. Bu nedenle, y\u00fcksek eri\u015filebilirlik (high availability) i\u00e7in en az iki adet, co\u011frafi olarak farkl\u0131 konumlarda yedekli Key Server kurmak \u015fiddetle tavsiye edilir.<\/li>\n<li><strong>Bak\u0131m ve Y\u00f6netim Sorumlulu\u011fu:<\/strong> Key Server&#8217;\u0131n donan\u0131m, yaz\u0131l\u0131m, g\u00fcvenlik ve a\u011f yap\u0131land\u0131rmas\u0131n\u0131n t\u00fcm sorumlulu\u011fu size aittir. Bu, ek bir operasyonel y\u00fck anlam\u0131na gelir.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Cloudflare-Cozumleri-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>Cloudflare \u00c7\u00f6z\u00fcmleri \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Cloudflare&#8217;in Keyless SSL gibi geli\u015fmi\u015f ve g\u00fc\u00e7l\u00fc \u00f6zelliklerinden tam anlam\u0131yla yararlanmak, do\u011fru bir i\u015f orta\u011f\u0131 ile \u00e7al\u0131\u015fmay\u0131 gerektirir. Kurulum ve y\u00f6netim s\u00fcre\u00e7leri teknik uzmanl\u0131k istedi\u011finden, bu yolculukta size rehberlik edebilecek deneyimli bir partnere sahip olmak kritik \u00f6neme sahiptir. \u0130HS Telekom, Cloudflare \u00e7\u00f6z\u00fcmleri konusundaki derin tecr\u00fcbesi ve m\u00fc\u015fteri odakl\u0131 hizmet anlay\u0131\u015f\u0131yla projenizin her a\u015famas\u0131nda yan\u0131n\u0131zdad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Uzman-Teknik-Destek-ve-Danismanlik\"><\/span>Uzman Teknik Destek ve Dan\u0131\u015fmanl\u0131k<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Keyless SSL kurulumu, standart bir <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> yap\u0131land\u0131rmas\u0131ndan daha karma\u015f\u0131kt\u0131r. Key Server se\u00e7imi, `gokeyless` yaz\u0131l\u0131m\u0131n\u0131n yap\u0131land\u0131r\u0131lmas\u0131, a\u011f g\u00fcvenli\u011fi ayarlar\u0131 ve olas\u0131 performans darbo\u011fazlar\u0131n\u0131n tespiti gibi konularda uzman deste\u011fi hayati rol oynar. \u0130HS Telekom&#8217;un sertifikal\u0131 m\u00fchendisleri, altyap\u0131n\u0131za en uygun Keyless SSL mimarisini tasarlaman\u0131za yard\u0131mc\u0131 olur ve kurulum s\u00fcrecinde size ad\u0131m ad\u0131m rehberlik eder. Ya\u015fanabilecek sorunlara kar\u015f\u0131 proaktif \u00e7\u00f6z\u00fcmler sunarak sisteminizin sorunsuz \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yerel-Fiyatlandirma-ve-Faturalandirma-Avantajlari\"><\/span>Yerel Fiyatland\u0131rma ve Faturaland\u0131rma Avantajlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Cloudflare&#8217;in Enterprise hizmetlerini do\u011frudan yurt d\u0131\u015f\u0131ndan temin etmek, kur dalgalanmalar\u0131 ve uluslararas\u0131 \u00f6deme s\u00fcre\u00e7leri gibi zorluklar\u0131 beraberinde getirebilir. \u0130HS Telekom, Cloudflare&#8217;in resmi i\u015f orta\u011f\u0131 olarak size yerel para birimi (TL) ile faturaland\u0131rma imkan\u0131 sunar. Bu sayede b\u00fct\u00e7enizi daha kolay y\u00f6netebilir, kur riskinden korunabilir ve \u00f6deme s\u00fcre\u00e7lerinizi basitle\u015ftirebilirsiniz. Size \u00f6zel sunulan fiyat avantajlar\u0131 ile projenizin maliyet etkinli\u011fini art\u0131rabilirsiniz. \u00d6zellikle <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/wordpress-hosting.html\" target=\"_blank\">WordPress hosting<\/a> gibi pop\u00fcler sistemlerde bile bu t\u00fcr geli\u015fmi\u015f g\u00fcvenlik \u00e7\u00f6z\u00fcmlerini entegre etme konusunda size yard\u0131mc\u0131 olabiliriz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hizli-Kurulum-ve-Entegrasyon-Surecleri\"><\/span>H\u0131zl\u0131 Kurulum ve Entegrasyon S\u00fcre\u00e7leri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Zaman, dijital d\u00fcnyada en de\u011ferli kaynaklardan biridir. \u0130HS Telekom&#8217;un deneyimli ekibi, projenizin gereksinimlerini h\u0131zla analiz eder ve kan\u0131tlanm\u0131\u015f proje y\u00f6netim metodolojileri ile kurulum ve entegrasyon s\u00fcrecini m\u00fcmk\u00fcn olan en k\u0131sa s\u00fcrede tamamlar. Sizinle yak\u0131n ileti\u015fim halinde \u00e7al\u0131\u015farak, mevcut altyap\u0131n\u0131zla Cloudflare hizmetlerinin sorunsuz bir \u015fekilde entegre edilmesini ve yeni g\u00fcvenlik mimarinizin h\u0131zla devreye al\u0131nmas\u0131n\u0131 sa\u011flar\u0131z.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-ve-Performans-Optimizasyonu-Hizmetleri\"><\/span>G\u00fcvenlik ve Performans Optimizasyonu Hizmetleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom ile \u00e7al\u0131\u015fmak, sadece bir lisans sat\u0131n almaktan \u00e7ok daha fazlas\u0131d\u0131r. Keyless SSL&#8217;i kurduktan sonra bile sisteminizin performans\u0131n\u0131 ve g\u00fcvenli\u011fini s\u00fcrekli olarak izler ve optimize ederiz. Cloudflare&#8217;in sundu\u011fu WAF (Web Uygulama G\u00fcvenlik Duvar\u0131), Rate Limiting, Argo Smart Routing gibi di\u011fer geli\u015fmi\u015f \u00f6zelliklerin de yap\u0131land\u0131r\u0131lmas\u0131nda size destek oluruz. B\u00f6ylece sadece \u00f6zel anahtar\u0131n\u0131z\u0131 korumakla kalmaz, ayn\u0131 zamanda web varl\u0131klar\u0131n\u0131z\u0131n genel g\u00fcvenlik ve performans\u0131n\u0131 da en \u00fcst d\u00fczeye \u00e7\u0131kar\u0131rs\u0131n\u0131z. G\u00fcvenli\u011finizi bir \u00fcst seviyeye ta\u015f\u0131mak i\u00e7in do\u011fru <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/cpanel-hosting.html\" target=\"_blank\">cPanel hosting<\/a> paketi se\u00e7imi kadar do\u011fru partner se\u00e7imi de \u00f6nemlidir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web g\u00fcvenli\u011fi, dijital varl\u0131klar\u0131n korunmas\u0131nda en kritik halkalardan biridir. Bu g\u00fcvenli\u011fin temel ta\u015f\u0131 olan SSL\/TLS sertifikalar\u0131, kullan\u0131c\u0131 ile sunucu aras\u0131ndaki veri ak\u0131\u015f\u0131n\u0131&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16537,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[400],"tags":[],"class_list":["post-16536","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ssl-sertifikasi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16536","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16536"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16536\/revisions"}],"predecessor-version":[{"id":16538,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16536\/revisions\/16538"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16537"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16536"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16536"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16536"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}