{"id":16619,"date":"2026-09-28T16:05:54","date_gmt":"2026-09-28T13:05:54","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16619"},"modified":"2026-09-28T16:05:54","modified_gmt":"2026-09-28T13:05:54","slug":"udp-flood-saldirisi-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/","title":{"rendered":"UDP Flood Sald\u0131r\u0131s\u0131 Nedir? G\u00fcvenlik Duvarlar\u0131n\u0131 Yoran Ba\u011flant\u0131s\u0131z Seli Susturma"},"content":{"rendered":"<p>UDP Flood, siber sald\u0131rganlar\u0131n hedef bir sistemi veya a\u011f\u0131 hizmet d\u0131\u015f\u0131 b\u0131rakmak amac\u0131yla kulland\u0131\u011f\u0131 en yayg\u0131n Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Reddi (DDoS) sald\u0131r\u0131 t\u00fcrlerinden biridir. Bu sald\u0131r\u0131, User Datagram Protocol (UDP) ad\u0131 verilen ve ba\u011flant\u0131 kurulumu gerektirmeyen bir ileti\u015fim protokol\u00fcn\u00fcn zay\u0131fl\u0131klar\u0131n\u0131 istismar eder. Sald\u0131rganlar, hedefin kaynaklar\u0131n\u0131 t\u00fcketmek ve me\u015fru kullan\u0131c\u0131lar\u0131n eri\u015fimini engellemek i\u00e7in \u00e7ok say\u0131da UDP paketini hedefe g\u00f6nderir. Bu yo\u011fun paket seli, \u00f6zellikle g\u00fcvenlik duvarlar\u0131 ve sunucular gibi a\u011f altyap\u0131s\u0131 bile\u015fenlerini yorarak sistemin \u00e7\u00f6kmesine neden olabilir.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6ac0d0e4e291b\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6ac0d0e4e291b\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#UDP-Nedir-ve-Neden-Saldirilarda-Kullanilir\" >UDP Nedir ve Neden Sald\u0131r\u0131larda Kullan\u0131l\u0131r?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#UDP-Protokolunun-Temel-Ozellikleri\" >UDP Protokol\u00fcn\u00fcn Temel \u00d6zellikleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Saldirganlar-Icin-UDPnin-Cazibesi\" >Sald\u0131rganlar \u0130\u00e7in UDP&#8217;nin Cazibesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#UDP-Flood-Saldirisi-Nasil-Calisir\" >UDP Flood Sald\u0131r\u0131s\u0131 Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Saldirinin-Adim-Adim-Anatomisi\" >Sald\u0131r\u0131n\u0131n Ad\u0131m Ad\u0131m Anatomisi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Hedeflenen-Portlar-ve-Servisler\" >Hedeflenen Portlar ve Servisler<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#UDP-Flood-Saldirisinin-Belirtileri-ve-Etkileri\" >UDP Flood Sald\u0131r\u0131s\u0131n\u0131n Belirtileri ve Etkileri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Ag-ve-Sunucu-Uzerindeki-Belirtiler\" >A\u011f ve Sunucu \u00dczerindeki Belirtiler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Guvenlik-Duvarlari-Firewall-Uzerindeki-Etkisi\" >G\u00fcvenlik Duvarlar\u0131 (Firewall) \u00dczerindeki Etkisi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Son-Kullanici-ve-Is-Sureclerine-Etkisi\" >Son Kullan\u0131c\u0131 ve \u0130\u015f S\u00fcre\u00e7lerine Etkisi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#UDP-Flood-Saldirilarina-Karsi-Korunma-Yontemleri\" >UDP Flood Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Korunma Y\u00f6ntemleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Ag-Mimarisi-ve-Donanim-Seviyesinde-Onlemler\" >A\u011f Mimarisi ve Donan\u0131m Seviyesinde \u00d6nlemler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Guvenlik-Duvari-Firewall-Konfigurasyonu\" >G\u00fcvenlik Duvar\u0131 (Firewall) Konfig\u00fcrasyonu<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Bulut-Tabanli-DDoS-Koruma-Servisleri\" >Bulut Tabanl\u0131 DDoS Koruma Servisleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/udp-flood-saldirisi-nedir\/#Sunucu-ve-Uygulama-Seviyesinde-Optimizasyonlar\" >Sunucu ve Uygulama Seviyesinde Optimizasyonlar<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"UDP-Nedir-ve-Neden-Saldirilarda-Kullanilir\"><\/span>UDP Nedir ve Neden Sald\u0131r\u0131larda Kullan\u0131l\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>UDP Flood sald\u0131r\u0131s\u0131n\u0131n mekani\u011fini anlamak i\u00e7in \u00f6ncelikle UDP protokol\u00fcn\u00fcn do\u011fas\u0131n\u0131 ve siber sald\u0131rganlar i\u00e7in neden bu kadar \u00e7ekici oldu\u011funu bilmek gerekir. UDP, internetin temel ileti\u015fim protokollerinden biridir, ancak yayg\u0131n olarak bilinen TCP&#8217;den (Transmission Control Protocol) \u00f6nemli farkl\u0131l\u0131klar g\u00f6sterir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"UDP-Protokolunun-Temel-Ozellikleri\"><\/span>UDP Protokol\u00fcn\u00fcn Temel \u00d6zellikleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>User Datagram Protocol (UDP), TCP\/IP protokol ailesinin iki ana ta\u015f\u0131ma katman\u0131 protokol\u00fcnden biridir. En belirgin \u00f6zelli\u011fi &#8220;ba\u011flant\u0131s\u0131z&#8221; (connectionless) olmas\u0131d\u0131r. Bu, veri g\u00f6ndermeden \u00f6nce al\u0131c\u0131 ile g\u00f6nderici aras\u0131nda bir el s\u0131k\u0131\u015fma (handshake) s\u00fcreci olmad\u0131\u011f\u0131 anlam\u0131na gelir. Veri paketleri, al\u0131c\u0131n\u0131n haz\u0131r olup olmad\u0131\u011f\u0131na veya paketlerin ula\u015f\u0131p ula\u015fmad\u0131\u011f\u0131na dair bir do\u011frulama yap\u0131lmadan do\u011frudan g\u00f6nderilir. Bu yap\u0131s\u0131 sayesinde UDP, video ak\u0131\u015f\u0131, online oyunlar ve DNS sorgular\u0131 gibi h\u0131z\u0131n g\u00fcvenilirlikten daha \u00f6nemli oldu\u011fu uygulamalarda tercih edilir. Paket kayb\u0131n\u0131n tolere edilebildi\u011fi ancak gecikmenin kritik oldu\u011fu senaryolar i\u00e7in idealdir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirganlar-Icin-UDPnin-Cazibesi\"><\/span>Sald\u0131rganlar \u0130\u00e7in UDP&#8217;nin Cazibesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UDP&#8217;nin h\u0131z\u0131 ve basitli\u011fi, onu DDoS sald\u0131r\u0131lar\u0131 i\u00e7in m\u00fckemmel bir ara\u00e7 haline getirir. Sald\u0131rganlar \u015fu nedenlerle UDP&#8217;yi tercih eder:<\/p>\n<ul>\n<li><b>Ba\u011flant\u0131 Kurulumu Yok:<\/b> El s\u0131k\u0131\u015fma s\u00fcrecinin olmamas\u0131, sald\u0131rganlar\u0131n \u00e7ok y\u00fcksek h\u0131zlarda ve minimum kaynakla paket g\u00f6ndermesine olanak tan\u0131r. Sald\u0131rgan, hedeften bir yan\u0131t beklemeden s\u00fcrekli olarak paket g\u00f6nderebilir.<\/li>\n<li><b>Kaynak Kimli\u011fi Sahtecili\u011fi (IP Spoofing):<\/b> UDP&#8217;nin ba\u011flant\u0131s\u0131z do\u011fas\u0131, kaynak IP adresinin sahtelenmesini (spoofing) kolayla\u015ft\u0131r\u0131r. Sald\u0131rganlar, g\u00f6nderdikleri paketlerin kaynak IP adresini de\u011fi\u015ftirerek hem kendi kimliklerini gizleyebilir hem de sald\u0131r\u0131y\u0131 takip etmeyi zorla\u015ft\u0131rabilirler.<\/li>\n<li><b>Y\u00fcksek Hacimli Trafik Olu\u015fturma:<\/b> Basit bir protokol oldu\u011fu i\u00e7in, botnet a\u011f\u0131ndaki binlerce ele ge\u00e7irilmi\u015f cihaz (zombi bilgisayar), hedefe ayn\u0131 anda muazzam miktarda UDP paketi g\u00f6nderebilir. Bu durum, hedef a\u011f\u0131n bant geni\u015fli\u011fini h\u0131zla t\u00fcketir.<\/li>\n<\/ul>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>TCP (Transmission Control Protocol)<\/th>\n<th>UDP (User Datagram Protocol)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Ba\u011flant\u0131 T\u00fcr\u00fc<\/strong><\/td>\n<td>Ba\u011flant\u0131 tabanl\u0131 (Connection-oriented)<\/td>\n<td>Ba\u011flant\u0131s\u0131z (Connectionless)<\/td>\n<\/tr>\n<tr>\n<td><strong>G\u00fcvenilirlik<\/strong><\/td>\n<td>Y\u00fcksek (Paket teslimi garantili ve s\u0131ral\u0131)<\/td>\n<td>D\u00fc\u015f\u00fck (Paket kayb\u0131 olabilir, s\u0131ra garantisi yok)<\/td>\n<\/tr>\n<tr>\n<td><strong>H\u0131z<\/strong><\/td>\n<td>Daha yava\u015f (El s\u0131k\u0131\u015fma ve do\u011frulama nedeniyle)<\/td>\n<td>Daha h\u0131zl\u0131 (Ek y\u00fck\u00fc az)<\/td>\n<\/tr>\n<tr>\n<td><strong>Kullan\u0131m Alanlar\u0131<\/strong><\/td>\n<td>Web tarama (HTTP\/S), E-posta (SMTP), Dosya transferi (FTP)<\/td>\n<td>Video\/ses ak\u0131\u015f\u0131, DNS, online oyunlar, VoIP<\/td>\n<\/tr>\n<tr>\n<td><strong>Sald\u0131r\u0131 Potansiyeli<\/strong><\/td>\n<td>SYN Flood gibi durumsal sald\u0131r\u0131lar<\/td>\n<td>UDP Flood gibi hacimsel (volumetric) sald\u0131r\u0131lar<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"UDP-Flood-Saldirisi-Nasil-Calisir\"><\/span>UDP Flood Sald\u0131r\u0131s\u0131 Nas\u0131l \u00c7al\u0131\u015f\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>UDP Flood sald\u0131r\u0131s\u0131, basit ama son derece etkili bir prensibe dayan\u0131r: hedef sistemi, i\u015fleyemeyece\u011fi kadar \u00e7ok say\u0131da istekle bo\u011fmak. Sald\u0131r\u0131, hedefin kaynaklar\u0131n\u0131 t\u00fcketerek me\u015fru trafi\u011fe yan\u0131t veremez hale gelmesini ama\u00e7lar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirinin-Adim-Adim-Anatomisi\"><\/span>Sald\u0131r\u0131n\u0131n Ad\u0131m Ad\u0131m Anatomisi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir UDP Flood sald\u0131r\u0131s\u0131 genellikle \u015fu ad\u0131mlar\u0131 izler: Sald\u0131rgan, genellikle bir botnet kullanarak, hedef sunucunun IP adresindeki rastgele veya belirli portlara do\u011fru \u00e7ok b\u00fcy\u00fck miktarda UDP paketi g\u00f6nderir. Hedef <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> bu paketleri ald\u0131\u011f\u0131nda, her bir paketin hangi uygulamaya ait oldu\u011funu belirlemek i\u00e7in ilgili portu kontrol eder. \u00c7o\u011fu durumda, sald\u0131rganlar\u0131n hedefledi\u011fi portlarda dinleyen bir uygulama bulunmaz. Bu durumda sunucu, &#8220;Hedefe Ula\u015f\u0131lam\u0131yor&#8221; (Destination Unreachable) anlam\u0131na gelen bir ICMP (Internet Control Message Protocol) paketi ile yan\u0131t verir. Gelen her UDP paketi i\u00e7in bir ICMP paketi olu\u015fturma ve g\u00f6nderme s\u00fcreci, sunucunun CPU, bellek ve a\u011f bant geni\u015fli\u011fi gibi kaynaklar\u0131n\u0131 h\u0131zla t\u00fcketir. Sald\u0131r\u0131 yeterince b\u00fcy\u00fck bir hacme ula\u015ft\u0131\u011f\u0131nda, sunucu art\u0131k me\u015fru isteklere yan\u0131t veremez hale gelir ve hizmet kesintisi ya\u015fan\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hedeflenen-Portlar-ve-Servisler\"><\/span>Hedeflenen Portlar ve Servisler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rganlar genellikle hedef sistemde a\u00e7\u0131k olma olas\u0131l\u0131\u011f\u0131 d\u00fc\u015f\u00fck olan y\u00fcksek numaral\u0131 rastgele portlar\u0131 hedefler. Ancak bazen, belirli servisleri hedef alarak sald\u0131r\u0131n\u0131n etkisini art\u0131rmay\u0131 ama\u00e7larlar. Yayg\u0131n olarak hedeflenen UDP tabanl\u0131 servisler aras\u0131nda \u015funlar bulunur:<\/p>\n<ul>\n<li><b>DNS (Domain Name System &#8211; Port 53):<\/b> DNS sunucular\u0131, UDP \u00fczerinden gelen sorgulara yan\u0131t verir. Bu sunuculara y\u00f6nelik bir UDP seli, alan ad\u0131 \u00e7\u00f6z\u00fcmleme hizmetlerini kesintiye u\u011fratarak o sunucu \u00fczerinden hizmet veren t\u00fcm web sitelerini eri\u015filemez hale getirebilir.<\/li>\n<li><b>NTP (Network Time Protocol &#8211; Port 123):<\/b> A\u011fdaki cihazlar\u0131n saatlerini senkronize etmek i\u00e7in kullan\u0131l\u0131r. NTP sunucular\u0131na y\u00f6nelik sald\u0131r\u0131lar, zaman senkronizasyonunu bozabilir.<\/li>\n<li><b>CHARGEN (Character Generator Protocol &#8211; Port 19):<\/b> Bu eski protokol, test amac\u0131yla kullan\u0131l\u0131r ve gelen her UDP paketine kar\u015f\u0131l\u0131k \u00e7ok daha b\u00fcy\u00fck bir yan\u0131t paketi g\u00f6nderir. Bu \u00f6zellik, sald\u0131r\u0131n\u0131n etkisini katlayarak &#8220;amplifikasyon&#8221; (b\u00fcy\u00fctme) sald\u0131r\u0131lar\u0131na yol a\u00e7abilir.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"UDP-Flood-Saldirisinin-Belirtileri-ve-Etkileri\"><\/span>UDP Flood Sald\u0131r\u0131s\u0131n\u0131n Belirtileri ve Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>UDP Flood sald\u0131r\u0131s\u0131, hedef altyap\u0131 \u00fczerinde y\u0131k\u0131c\u0131 etkilere sahip olabilir. Bu etkileri ve belirtileri erken a\u015famada tan\u0131mak, m\u00fcdahale s\u00fcresini k\u0131saltmak i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-ve-Sunucu-Uzerindeki-Belirtiler\"><\/span>A\u011f ve Sunucu \u00dczerindeki Belirtiler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir UDP Flood sald\u0131r\u0131s\u0131 s\u0131ras\u0131nda g\u00f6zlemlenebilecek en yayg\u0131n belirtiler \u015funlard\u0131r: A\u011f performans\u0131nda ani ve ciddi yava\u015flama, web sitelerine veya online servislere eri\u015fimde zorluk veya tam kesinti, sunucunun CPU ve bellek kullan\u0131m\u0131nda ola\u011fand\u0131\u015f\u0131 art\u0131\u015flar ve a\u011f trafi\u011fi izleme ara\u00e7lar\u0131nda UDP trafi\u011finde belirgin bir art\u0131\u015f. Bu belirtiler, sistem y\u00f6neticileri i\u00e7in ilk uyar\u0131 i\u015faretleridir ve bir DDoS sald\u0131r\u0131s\u0131n\u0131n habercisi olabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-Duvarlari-Firewall-Uzerindeki-Etkisi\"><\/span>G\u00fcvenlik Duvarlar\u0131 (Firewall) \u00dczerindeki Etkisi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcvenlik duvarlar\u0131, a\u011f trafi\u011fini denetlemek i\u00e7in tasarlanm\u0131\u015ft\u0131r, ancak UDP Flood sald\u0131r\u0131lar\u0131 bu cihazlar\u0131 da hedef al\u0131r. Modern durum bilgisi olan (stateful) <a href=\"https:\/\/www.ihs.com.tr\/blog\/firewall-nedir-ne-ise-yarar\/\" target=\"_blank\">firewall<\/a> cihazlar\u0131, gelen ve giden her ba\u011flant\u0131n\u0131n durumunu takip etmek i\u00e7in bir durum tablosu (state table) tutar. Sald\u0131rganlar, saniyede y\u00fcz binlerce veya milyonlarca UDP paketi g\u00f6nderdi\u011finde, bu durum tablolar\u0131 h\u0131zla dolar. Tablo doldu\u011funda, g\u00fcvenlik duvar\u0131 yeni me\u015fru ba\u011flant\u0131lar\u0131 kabul edemez hale gelir veya performans\u0131 o kadar d\u00fc\u015fer ki a\u011f\u0131n kendisi bir darbo\u011faza d\u00f6n\u00fc\u015f\u00fcr. Bu nedenle UDP Flood, &#8220;g\u00fcvenlik duvarlar\u0131n\u0131 yoran sald\u0131r\u0131&#8221; olarak da bilinir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Son-Kullanici-ve-Is-Sureclerine-Etkisi\"><\/span>Son Kullan\u0131c\u0131 ve \u0130\u015f S\u00fcre\u00e7lerine Etkisi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Teknik etkilerin \u00f6tesinde, bir UDP Flood sald\u0131r\u0131s\u0131n\u0131n i\u015f s\u00fcreklili\u011fi \u00fczerinde ciddi sonu\u00e7lar\u0131 vard\u0131r. E-ticaret siteleri i\u00e7in hizmet kesintisi, do\u011frudan gelir kayb\u0131 anlam\u0131na gelir. Online hizmet sa\u011flayan \u015firketler i\u00e7in itibar kayb\u0131 ve m\u00fc\u015fteri g\u00fcvensizli\u011fi uzun vadeli zararlara yol a\u00e7abilir. \u00c7al\u0131\u015fanlar\u0131n \u015firket kaynaklar\u0131na eri\u015fememesi, i\u00e7 operasyonlar\u0131 durma noktas\u0131na getirebilir. Bu nedenle, sald\u0131r\u0131n\u0131n sadece teknik bir sorun de\u011fil, ayn\u0131 zamanda ciddi bir i\u015f riski oldu\u011fu unutulmamal\u0131d\u0131r. Ba\u015far\u0131l\u0131 bir sald\u0131r\u0131 sonras\u0131 do\u011fru bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/alan-adi-degisikligi-seo-kaybi-yasamadan-web-sitesi-nasil-tasinir\/\" target=\"_blank\">alan ad\u0131<\/a> y\u00f6netimi ve ileti\u015fim stratejisi, marka imaj\u0131n\u0131 korumada \u00f6nemli rol oynar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"UDP-Flood-Saldirilarina-Karsi-Korunma-Yontemleri\"><\/span>UDP Flood Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Korunma Y\u00f6ntemleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>UDP Flood gibi hacimsel sald\u0131r\u0131larla m\u00fccadele etmek, \u00e7ok katmanl\u0131 bir g\u00fcvenlik yakla\u015f\u0131m\u0131 gerektirir. Tek bir \u00e7\u00f6z\u00fcm genellikle yetersiz kal\u0131r; donan\u0131m, yaz\u0131l\u0131m ve bulut tabanl\u0131 hizmetlerin bir kombinasyonu en etkili korumay\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag-Mimarisi-ve-Donanim-Seviyesinde-Onlemler\"><\/span>A\u011f Mimarisi ve Donan\u0131m Seviyesinde \u00d6nlemler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130lk savunma hatt\u0131 genellikle a\u011f kenar\u0131nda (network edge) ba\u015flar. \u0130nternet Servis Sa\u011flay\u0131c\u0131 (ISP) ile i\u015f birli\u011fi yaparak gelen trafikte h\u0131z s\u0131n\u0131rlamas\u0131 (rate limiting) uygulamak, belirli bir e\u015fi\u011fi a\u015fan UDP trafi\u011fini daha sunucuya ula\u015fmadan engellemenin etkili bir yoludur. Ayr\u0131ca, b\u00fcy\u00fck \u00f6l\u00e7ekli a\u011flar i\u00e7in tasarlanm\u0131\u015f \u00f6zel DDoS azaltma (mitigation) donan\u0131mlar\u0131, y\u00fcksek hacimli trafi\u011fi analiz edip anormallikleri tespit ederek sald\u0131r\u0131 paketlerini filtreleyebilir. Bu cihazlar, g\u00fcvenlik duvarlar\u0131n\u0131n y\u00fck\u00fcn\u00fc hafifletir ve me\u015fru trafi\u011fin ak\u0131\u015f\u0131n\u0131 s\u00fcrd\u00fcrmesine yard\u0131mc\u0131 olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-Duvari-Firewall-Konfigurasyonu\"><\/span>G\u00fcvenlik Duvar\u0131 (Firewall) Konfig\u00fcrasyonu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcvenlik duvarlar\u0131, do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda UDP Flood sald\u0131r\u0131lar\u0131na kar\u015f\u0131 bir miktar koruma sa\u011flayabilir. \u00d6rne\u011fin, kullan\u0131lmayan UDP portlar\u0131n\u0131 kapatmak ve sadece i\u015f i\u00e7in gerekli olan portlara izin vermek, sald\u0131r\u0131 y\u00fczeyini daralt\u0131r. Eri\u015fim Kontrol Listeleri (ACL&#8217;ler) arac\u0131l\u0131\u011f\u0131yla \u015f\u00fcpheli IP bloklar\u0131ndan veya co\u011frafyalardan gelen trafi\u011fi engellemek de bir \u00f6nlemdir. Ancak, UDP Flood&#8217;un IP sahtecili\u011fi (spoofing) kulland\u0131\u011f\u0131 durumlarda bu y\u00f6ntem yetersiz kalabilir. Bu nedenle, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131 temel bir ad\u0131m olsa da tek ba\u015f\u0131na yeterli bir \u00e7\u00f6z\u00fcm de\u011fildir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Bulut-Tabanli-DDoS-Koruma-Servisleri\"><\/span>Bulut Tabanl\u0131 DDoS Koruma Servisleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En etkili ve modern korunma y\u00f6ntemi, bulut tabanl\u0131 DDoS koruma servisleridir. Bu hizmetler, &#8220;temizleme merkezi&#8221; (scrubbing center) olarak adland\u0131r\u0131lan k\u00fcresel veri merkezleri arac\u0131l\u0131\u011f\u0131yla \u00e7al\u0131\u015f\u0131r. Web sitenizin veya uygulaman\u0131z\u0131n trafi\u011fi, bu temizleme merkezlerine y\u00f6nlendirilir. Burada, geli\u015fmi\u015f algoritmalar ve donan\u0131mlar kullan\u0131larak gelen trafik analiz edilir; sald\u0131r\u0131 paketleri (k\u00f6t\u00fc trafik) filtrelenirken, sadece me\u015fru kullan\u0131c\u0131 istekleri (temiz trafik) sizin sunucunuza iletilir. Bu y\u00f6ntem, sald\u0131r\u0131 trafi\u011fi kendi altyap\u0131n\u0131za ula\u015fmadan engellendi\u011fi i\u00e7in en etkili \u00e7\u00f6z\u00fcmd\u00fcr. Ayr\u0131ca, bu hizmeti sunan bir <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> sa\u011flay\u0131c\u0131s\u0131 ile \u00e7al\u0131\u015fmak, altyap\u0131 g\u00fcvenli\u011finizi \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucu-ve-Uygulama-Seviyesinde-Optimizasyonlar\"><\/span>Sunucu ve Uygulama Seviyesinde Optimizasyonlar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucu taraf\u0131nda al\u0131nabilecek baz\u0131 basit ama etkili \u00f6nlemler de mevcuttur. \u0130\u015fletim sistemi seviyesinde, kullan\u0131lmayan UDP servislerini ve portlar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakmak \u00f6nemlidir. \u00d6rne\u011fin, art\u0131k nadiren kullan\u0131lan CHARGEN veya Echo gibi eski servisler kapat\u0131lmal\u0131d\u0131r. Ayr\u0131ca, sunucunun ICMP &#8220;Destination Unreachable&#8221; yan\u0131tlar\u0131n\u0131n g\u00f6nderim h\u0131z\u0131n\u0131 s\u0131n\u0131rlamak (ICMP rate limiting), sunucu kaynaklar\u0131n\u0131n t\u00fckenmesini yava\u015flatabilir. Bu optimizasyonlar, sald\u0131r\u0131n\u0131n etkisini tamamen ortadan kald\u0131rmasa da hafifletmeye yard\u0131mc\u0131 olur. \u00d6zellikle <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/wordpress-hosting.html\" target=\"_blank\">WordPress hosting<\/a> gibi y\u00f6netilen hizmetlerde, bu t\u00fcr optimizasyonlar genellikle servis sa\u011flay\u0131c\u0131 taraf\u0131ndan yap\u0131l\u0131r.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Korunma Y\u00f6ntemi<\/th>\n<th>Avantajlar\u0131<\/th>\n<th>Dezavantajlar\u0131<\/th>\n<th>En Uygun Oldu\u011fu Senaryo<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>A\u011f Donan\u0131m\u0131 (DDoS Cihazlar\u0131)<\/strong><\/td>\n<td>D\u00fc\u015f\u00fck gecikme s\u00fcresi, yerinde tam kontrol.<\/td>\n<td>Y\u00fcksek ba\u015flang\u0131\u00e7 maliyeti, s\u0131n\u0131rl\u0131 bant geni\u015fli\u011fi kapasitesi.<\/td>\n<td>B\u00fcy\u00fck \u00f6l\u00e7ekli veri merkezleri ve kurumsal a\u011flar.<\/td>\n<\/tr>\n<tr>\n<td><strong>G\u00fcvenlik Duvar\u0131 (Firewall)<\/strong><\/td>\n<td>Temel koruma sa\u011flar, mevcut altyap\u0131y\u0131 kullan\u0131r.<\/td>\n<td>Hacimsel sald\u0131r\u0131larda kolayca a\u015f\u0131labilir, durum tablosu dolabilir.<\/td>\n<td>D\u00fc\u015f\u00fck ve orta \u00f6l\u00e7ekli tehditlere kar\u015f\u0131 ilk savunma hatt\u0131.<\/td>\n<\/tr>\n<tr>\n<td><strong>Bulut Tabanl\u0131 DDoS Koruma<\/strong><\/td>\n<td>Neredeyse s\u0131n\u0131rs\u0131z \u00f6l\u00e7eklenebilirlik, sald\u0131r\u0131y\u0131 kayna\u011f\u0131nda durdurma.<\/td>\n<td>Abonelik tabanl\u0131 maliyet, trafi\u011fin \u00fc\u00e7\u00fcnc\u00fc parti \u00fczerinden ge\u00e7mesi.<\/td>\n<td>Her \u00f6l\u00e7ekteki i\u015fletme i\u00e7in en etkili ve kapsaml\u0131 \u00e7\u00f6z\u00fcm.<\/td>\n<\/tr>\n<tr>\n<td><strong>Sunucu Optimizasyonu<\/strong><\/td>\n<td>Maliyetsizdir, kolayca uygulanabilir.<\/td>\n<td>Sadece sald\u0131r\u0131n\u0131n etkisini hafifletir, tek ba\u015f\u0131na yetersizdir.<\/td>\n<td>T\u00fcm sunucular i\u00e7in temel bir g\u00fcvenlik \u00f6nlemi olarak.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>Sonu\u00e7 olarak, UDP Flood sald\u0131r\u0131lar\u0131 siber g\u00fcvenlik i\u00e7in ciddi bir tehdit olmaya devam etmektedir. Ancak do\u011fru stratejiler ve katmanl\u0131 bir g\u00fcvenlik yakla\u015f\u0131m\u0131yla bu tehdide kar\u015f\u0131 etkili bir savunma sa\u011flamak m\u00fcmk\u00fcnd\u00fcr. \u00d6zellikle sanal sunucu \u00e7\u00f6z\u00fcmleri gibi modern altyap\u0131lar, bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 daha esnek ve \u00f6l\u00e7eklenebilir koruma mekanizmalar\u0131 sunar. \u00d6rne\u011fin, bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vds-sunucu.html\" target=\"_blank\">VDS<\/a> (Virtual Dedicated Server) altyap\u0131s\u0131, kaynaklar\u0131n daha esnek y\u00f6netilmesine olanak tan\u0131yarak sald\u0131r\u0131 an\u0131nda kapasite art\u0131r\u0131m\u0131 gibi imkanlar sunabilir. G\u00fcvenli\u011finizi sa\u011flamak i\u00e7in sitenizin bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL sertifikas\u0131<\/a> ile korunmas\u0131 ve d\u00fczenli olarak <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">domain sorgulama<\/a> yaparak alan ad\u0131n\u0131z\u0131n durumunu kontrol etmek de \u00f6nemlidir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>UDP Flood, siber sald\u0131rganlar\u0131n hedef bir sistemi veya a\u011f\u0131 hizmet d\u0131\u015f\u0131 b\u0131rakmak amac\u0131yla kulland\u0131\u011f\u0131 en yayg\u0131n Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Reddi (DDoS) sald\u0131r\u0131 t\u00fcrlerinden&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16620,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[466],"tags":[],"class_list":["post-16619","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bilgi-guvenligi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16619","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16619"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16619\/revisions"}],"predecessor-version":[{"id":16621,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16619\/revisions\/16621"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16620"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16619"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16619"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16619"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}