{"id":16815,"date":"2026-10-21T15:05:22","date_gmt":"2026-10-21T12:05:22","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16815"},"modified":"2026-10-21T15:05:22","modified_gmt":"2026-10-21T12:05:22","slug":"slowloris-saldirisi-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/","title":{"rendered":"Slowloris Sald\u0131r\u0131s\u0131 Nedir? Yar\u0131m B\u0131rak\u0131lan HTTP \u0130stekleriyle Web Sunucular\u0131 Nas\u0131l Kilitlenir?"},"content":{"rendered":"<p>Siber g\u00fcvenlik d\u00fcnyas\u0131nda, web sunucular\u0131n\u0131 hedef alan sald\u0131r\u0131lar giderek daha sofistike ve tespit edilmesi zor hale gelmektedir. Kaba kuvvet sald\u0131r\u0131lar\u0131n\u0131n aksine, baz\u0131 tehditler sunucular\u0131 y\u00fcksek trafik hacmiyle bo\u011fmak yerine, kaynaklar\u0131n\u0131 yava\u015f ve gizlice t\u00fcketerek hizmetleri aksatmay\u0131 hedefler. Slowloris sald\u0131r\u0131s\u0131, tam olarak bu &#8220;d\u00fc\u015f\u00fck ve yava\u015f&#8221; felsefesini benimseyen, sinsi ama bir o kadar da etkili bir hizmet engelleme (DoS) sald\u0131r\u0131 t\u00fcr\u00fcd\u00fcr. Bu sald\u0131r\u0131, \u00e7ok d\u00fc\u015f\u00fck bir bant geni\u015fli\u011fi kullanarak, iyi korunmayan bir web sunucusunu bile kolayca \u00e7evrimd\u0131\u015f\u0131 b\u0131rakabilir. Bu yaz\u0131da, Slowloris sald\u0131r\u0131s\u0131n\u0131n ne oldu\u011funu, nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131, belirtilerini ve en \u00f6nemlisi bu t\u00fcr sinsi tehditlere kar\u015f\u0131 nas\u0131l korunabilece\u011finizi detayl\u0131 bir \u015fekilde ele alaca\u011f\u0131z.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6ad9b68589507\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6ad9b68589507\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#DoS-Saldirilari-ve-Slowlorisin-Yeri\" >DoS Sald\u0131r\u0131lar\u0131 ve Slowloris&#8217;in Yeri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Dagitilmis-Hizmet-Engelleme-DDoS-Saldirilarina-Genel-Bakis\" >Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Engelleme (DDoS) Sald\u0131r\u0131lar\u0131na Genel Bak\u0131\u015f<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Slowloris-Saldirisi-Nedir\" >Slowloris Sald\u0131r\u0131s\u0131 Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#%E2%80%9CLow-and-Slow%E2%80%9D-Dusuk-ve-Yavas-Saldiri-Kavrami\" >&#8220;Low and Slow&#8221; (D\u00fc\u015f\u00fck ve Yava\u015f) Sald\u0131r\u0131 Kavram\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Slowloris-Saldirisinin-Calisma-Prensibi-ve-Asamalari\" >Slowloris Sald\u0131r\u0131s\u0131n\u0131n \u00c7al\u0131\u015fma Prensibi ve A\u015famalar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#HTTP-Protokolu-ve-Baglanti-Yonetimi\" >HTTP Protokol\u00fc ve Ba\u011flant\u0131 Y\u00f6netimi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Yarim-Birakilan-HTTP-Istekleri-Nasil-Olusturulur\" >Yar\u0131m B\u0131rak\u0131lan HTTP \u0130stekleri Nas\u0131l Olu\u015fturulur?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Sunucu-Kaynaklarinin-Tuketilmesi-Baglanti-Havuzunun-Doldurulmasi\" >Sunucu Kaynaklar\u0131n\u0131n T\u00fcketilmesi: Ba\u011flant\u0131 Havuzunun Doldurulmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Saldirinin-Adim-Adim-Simulasyonu\" >Sald\u0131r\u0131n\u0131n Ad\u0131m Ad\u0131m Sim\u00fclasyonu<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Slowlorisin-Diger-DDoS-Saldiri-Turlerinden-Farklari\" >Slowloris&#8217;in Di\u011fer DDoS Sald\u0131r\u0131 T\u00fcrlerinden Farklar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Hacimsel-Volumetric-Saldirilarla-Karsilastirma\" >Hacimsel (Volumetric) Sald\u0131r\u0131larla Kar\u015f\u0131la\u015ft\u0131rma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Protokol-Tabanli-Saldirilarla-Karsilastirma\" >Protokol Tabanl\u0131 Sald\u0131r\u0131larla Kar\u015f\u0131la\u015ft\u0131rma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Dusuk-Bant-Genisligi-Gereksinimi-ve-Tespitteki-Zorluklar\" >D\u00fc\u015f\u00fck Bant Geni\u015fli\u011fi Gereksinimi ve Tespitteki Zorluklar<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Slowloris-Saldirisinin-Belirtileri-ve-Etkileri\" >Slowloris Sald\u0131r\u0131s\u0131n\u0131n Belirtileri ve Etkileri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Web-Sunucusunda-Gozlemlenen-Performans-Sorunlari\" >Web Sunucusunda G\u00f6zlemlenen Performans Sorunlar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Yasal-Kullanicilarin-Siteye-Erisememesi\" >Yasal Kullan\u0131c\u0131lar\u0131n Siteye Eri\u015fememesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Sunucu-Log-Kayitlarinda-Anormal-Baglanti-Desenleri\" >Sunucu Log Kay\u0131tlar\u0131nda Anormal Ba\u011flant\u0131 Desenleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Is-Surekliligi-Uzerindeki-Potansiyel-Etkileri\" >\u0130\u015f S\u00fcreklili\u011fi \u00dczerindeki Potansiyel Etkileri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Hangi-Web-Sunuculari-Risk-Altinda\" >Hangi Web Sunucular\u0131 Risk Alt\u0131nda?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Apache-Web-Sunucusu-ve-Thread-Tabanli-Mimarisi\" >Apache Web Sunucusu ve Thread Tabanl\u0131 Mimarisi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Neden-Bazi-Sunucular-Nginx-IIS-Daha-Direnclidir\" >Neden Baz\u0131 Sunucular (Nginx, IIS) Daha Diren\u00e7lidir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Saldiriya-Karsi-Savunmasiz-Sunucu-Yapilandirmalari\" >Sald\u0131r\u0131ya Kar\u015f\u0131 Savunmas\u0131z Sunucu Yap\u0131land\u0131rmalar\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Slowloris-Saldirilarina-Karsi-Korunma-ve-Onleme-Yontemleri\" >Slowloris Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Korunma ve \u00d6nleme Y\u00f6ntemleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Web-Sunucusu-Seviyesinde-Yapilandirma-Iyilestirmeleri\" >Web Sunucusu Seviyesinde Yap\u0131land\u0131rma \u0130yile\u015ftirmeleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Ters-Proxy-Reverse-Proxy-ve-Yuk-Dengeleyici-Load-Balancer-Kullanimi\" >Ters Proxy (Reverse Proxy) ve Y\u00fck Dengeleyici (Load Balancer) Kullan\u0131m\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Web-Uygulama-Guvenlik-Duvari-WAF-Cozumleri\" >Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) \u00c7\u00f6z\u00fcmleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Donanim-Tabanli-DDoS-Koruma-Cihazlari\" >Donan\u0131m Tabanl\u0131 DDoS Koruma Cihazlar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Bulut-Tabanli-DDoS-Koruma-Servisleri\" >Bulut Tabanl\u0131 DDoS Koruma Servisleri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Slowloris-Saldirilarina-Karsi-Profesyonel-DDoS-Koruma-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >Slowloris Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Profesyonel DDoS Koruma \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Gelismis-Tehdit-Algilama-ve-Anomali-Tespiti\" >Geli\u015fmi\u015f Tehdit Alg\u0131lama ve Anomali Tespiti<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Katman-7-Uygulama-Katmani-Korumasi\" >Katman 7 (Uygulama Katman\u0131) Korumas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Yuksek-Kapasiteli-Global-Ag-ve-Aninda-Mudahale\" >Y\u00fcksek Kapasiteli Global A\u011f ve An\u0131nda M\u00fcdahale<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#724-Uzman-Guvenlik-Operasyon-Merkezi-Destegi\" >7\/24 Uzman G\u00fcvenlik Operasyon Merkezi Deste\u011fi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/slowloris-saldirisi-nedir\/#Is-Surekliligini-Garanti-Altina-Alan-Cozumler\" >\u0130\u015f S\u00fcreklili\u011fini Garanti Alt\u0131na Alan \u00c7\u00f6z\u00fcmler<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"DoS-Saldirilari-ve-Slowlorisin-Yeri\"><\/span>DoS Sald\u0131r\u0131lar\u0131 ve Slowloris&#8217;in Yeri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0130nternet altyap\u0131s\u0131n\u0131 ve \u00e7evrimi\u00e7i hizmetleri hedef alan siber sald\u0131r\u0131lar, farkl\u0131 katmanlarda ve \u00e7e\u015fitli y\u00f6ntemlerle ger\u00e7ekle\u015ftirilir. Bu sald\u0131r\u0131lar\u0131n en bilinenlerinden biri olan Hizmet Engelleme (Denial of Service &#8211; DoS) sald\u0131r\u0131lar\u0131, hedeflenen sistemin kaynaklar\u0131n\u0131 t\u00fcketerek me\u015fru kullan\u0131c\u0131lar\u0131n hizmet almas\u0131n\u0131 engellemeyi ama\u00e7lar. Bu b\u00f6l\u00fcmde, DoS sald\u0131r\u0131lar\u0131n\u0131n genel yap\u0131s\u0131n\u0131, Slowloris&#8217;in bu ekosistemdeki yerini ve &#8220;d\u00fc\u015f\u00fck ve yava\u015f&#8221; sald\u0131r\u0131 kavram\u0131n\u0131 inceleyece\u011fiz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dagitilmis-Hizmet-Engelleme-DDoS-Saldirilarina-Genel-Bakis\"><\/span>Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Engelleme (DDoS) Sald\u0131r\u0131lar\u0131na Genel Bak\u0131\u015f<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>DoS sald\u0131r\u0131lar\u0131n\u0131n bir \u00fcst seviyesi olan Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Engelleme (DDoS), sald\u0131r\u0131n\u0131n tek bir kaynaktan de\u011fil, d\u00fcnya geneline yay\u0131lm\u0131\u015f \u00e7ok say\u0131da ele ge\u00e7irilmi\u015f cihazdan (botnet) yap\u0131lmas\u0131d\u0131r. Bu y\u00f6ntem, sald\u0131r\u0131n\u0131n kayna\u011f\u0131n\u0131 gizlemeyi ve engellemeyi zorla\u015ft\u0131r\u0131rken, hedefe y\u00f6nlendirilen trafik hacmini devasa boyutlara \u00e7\u0131kar\u0131r. DDoS sald\u0131r\u0131lar\u0131 genellikle a\u011f katman\u0131n\u0131 (Layer 3\/4) veya uygulama katman\u0131n\u0131 (Layer 7) hedef alarak sunucular\u0131, a\u011f altyap\u0131s\u0131n\u0131 veya belirli uygulamalar\u0131 \u00e7al\u0131\u015famaz hale getirir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Slowloris-Saldirisi-Nedir\"><\/span>Slowloris Sald\u0131r\u0131s\u0131 Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Slowloris, 2009 y\u0131l\u0131nda Robert &#8220;RSnake&#8221; Hansen taraf\u0131ndan geli\u015ftirilen ve uygulama katman\u0131n\u0131 hedef alan bir DoS sald\u0131r\u0131 arac\u0131d\u0131r. Ad\u0131n\u0131 yava\u015f hareket eden bir primat t\u00fcr\u00fcnden alan bu sald\u0131r\u0131, hedef web sunucusuna \u00e7ok say\u0131da me\u015fru gibi g\u00f6r\u00fcnen ancak tamamlanmam\u0131\u015f HTTP iste\u011fi g\u00f6ndererek \u00e7al\u0131\u015f\u0131r. Sunucu, her bir iste\u011fin tamamlanmas\u0131n\u0131 beklerken bir ba\u011flant\u0131 yuvas\u0131n\u0131 (connection socket) a\u00e7\u0131k tutar. Slowloris, bu ba\u011flant\u0131lar\u0131 kas\u0131tl\u0131 olarak \u00e7ok yava\u015f bir h\u0131zda veri g\u00f6ndererek s\u00fcrekli me\u015fgul eder ve sunucunun ba\u011flant\u0131 limitini doldurur. Sonu\u00e7 olarak, ger\u00e7ek kullan\u0131c\u0131lar sunucuya yeni ba\u011flant\u0131 kuramaz ve web sitesi eri\u015filemez hale gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"%E2%80%9CLow-and-Slow%E2%80%9D-Dusuk-ve-Yavas-Saldiri-Kavrami\"><\/span>&#8220;Low and Slow&#8221; (D\u00fc\u015f\u00fck ve Yava\u015f) Sald\u0131r\u0131 Kavram\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Slowloris&#8217;i geleneksel DDoS sald\u0131r\u0131lar\u0131ndan ay\u0131ran en temel \u00f6zellik, &#8220;low and slow&#8221; (d\u00fc\u015f\u00fck ve yava\u015f) do\u011fas\u0131d\u0131r. Hacimsel sald\u0131r\u0131lar, hedefi saniyede y\u00fczlerce gigabitlik veri ile bo\u011fmay\u0131 ama\u00e7larken, Slowloris gibi d\u00fc\u015f\u00fck ve yava\u015f sald\u0131r\u0131lar tam tersi bir yakla\u015f\u0131m sergiler. Bu sald\u0131r\u0131lar, \u00e7ok d\u00fc\u015f\u00fck bant geni\u015fli\u011fi kullan\u0131r ve anl\u0131k trafik art\u0131\u015flar\u0131na neden olmaz. Bu nedenle, geleneksel a\u011f g\u00fcvenlik sistemleri ve anomali tespit mekanizmalar\u0131 taraf\u0131ndan fark edilmeleri olduk\u00e7a zordur. Sald\u0131r\u0131, normal kullan\u0131c\u0131 trafi\u011fi gibi g\u00f6r\u00fcnd\u00fc\u011f\u00fc i\u00e7in genellikle alarm e\u015fiklerini tetiklemez ve hedefin kaynaklar\u0131n\u0131 fark ettirmeden yava\u015f\u00e7a t\u00fcketir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Slowloris-Saldirisinin-Calisma-Prensibi-ve-Asamalari\"><\/span>Slowloris Sald\u0131r\u0131s\u0131n\u0131n \u00c7al\u0131\u015fma Prensibi ve A\u015famalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Slowloris&#8217;in etkinli\u011fi, web sunucular\u0131n\u0131n HTTP protokol\u00fcn\u00fc i\u015fleme ve ba\u011flant\u0131lar\u0131 y\u00f6netme bi\u00e7imindeki zafiyetleri istismar etmesine dayan\u0131r. Bu sald\u0131r\u0131, sunucunun s\u0131n\u0131rl\u0131 say\u0131daki ba\u011flant\u0131 i\u015fleme kapasitesini hedef alarak, bu kaynaklar\u0131 me\u015fgul eder ve me\u015fru kullan\u0131c\u0131lar\u0131n eri\u015fimini engeller. Sald\u0131r\u0131n\u0131n nas\u0131l i\u015fledi\u011fini anlamak i\u00e7in HTTP protokol\u00fcn\u00fcn temellerine ve sunucu ba\u011flant\u0131 y\u00f6netimine yak\u0131ndan bakmak gerekir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HTTP-Protokolu-ve-Baglanti-Yonetimi\"><\/span>HTTP Protokol\u00fc ve Ba\u011flant\u0131 Y\u00f6netimi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir kullan\u0131c\u0131 bir web sitesine eri\u015fmek istedi\u011finde, taray\u0131c\u0131s\u0131 sunucuya bir HTTP iste\u011fi g\u00f6nderir. Bu istek, genellikle bir dizi ba\u015fl\u0131k (header) ve bazen bir g\u00f6vde (body) i\u00e7erir. Sunucu bu iste\u011fi al\u0131r, i\u015fler ve bir HTTP yan\u0131t\u0131 ile kar\u015f\u0131l\u0131k verir. Standart bir web sunucusu, ayn\u0131 anda s\u0131n\u0131rl\u0131 say\u0131da istemciye hizmet vermek \u00fczere yap\u0131land\u0131r\u0131lm\u0131\u015ft\u0131r. Her gelen ba\u011flant\u0131 i\u00e7in bir i\u015flem par\u00e7ac\u0131\u011f\u0131 (thread) veya bir soket ay\u0131r\u0131r. Ba\u011flant\u0131 tamamland\u0131\u011f\u0131nda veya zaman a\u015f\u0131m\u0131na u\u011frad\u0131\u011f\u0131nda bu kaynak serbest b\u0131rak\u0131l\u0131r ve ba\u015fka bir istemci i\u00e7in kullan\u0131labilir hale gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yarim-Birakilan-HTTP-Istekleri-Nasil-Olusturulur\"><\/span>Yar\u0131m B\u0131rak\u0131lan HTTP \u0130stekleri Nas\u0131l Olu\u015fturulur?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Slowloris, standart bir HTTP iste\u011fini bilerek tamamlamaz. Sald\u0131rgan, sunucuya bir HTTP GET veya POST iste\u011fi ba\u015flat\u0131r ancak ba\u015fl\u0131klar\u0131 (headers) tam olarak g\u00f6ndermez. \u00d6rne\u011fin, iste\u011fin sonunu belirten \u00e7ift sat\u0131r sonu karakterini (`\\r\\n\\r\\n`) asla g\u00f6ndermez. Sunucu, HTTP standartlar\u0131na g\u00f6re iste\u011fin devam\u0131n\u0131n gelece\u011fini varsayarak ba\u011flant\u0131y\u0131 a\u00e7\u0131k tutar. Sald\u0131rgan, sunucunun ba\u011flant\u0131y\u0131 zaman a\u015f\u0131m\u0131na u\u011fratmas\u0131n\u0131 engellemek i\u00e7in periyodik olarak anlams\u0131z veya ek ba\u015fl\u0131k verileri (&#8220;keep-alive&#8221; ba\u015fl\u0131klar\u0131 gibi) g\u00f6nderir. Bu, ba\u011flant\u0131n\u0131n &#8220;canl\u0131&#8221; kalmas\u0131n\u0131 sa\u011flarken iste\u011fin asla tamamlanmamas\u0131na neden olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucu-Kaynaklarinin-Tuketilmesi-Baglanti-Havuzunun-Doldurulmasi\"><\/span>Sunucu Kaynaklar\u0131n\u0131n T\u00fcketilmesi: Ba\u011flant\u0131 Havuzunun Doldurulmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Slowloris sald\u0131r\u0131s\u0131n\u0131n nihai amac\u0131, sunucunun mevcut t\u00fcm ba\u011flant\u0131 yuvalar\u0131n\u0131 (connection pool) bu yar\u0131m b\u0131rak\u0131lm\u0131\u015f isteklerle doldurmakt\u0131r. Sald\u0131rgan, tek bir makineden y\u00fczlerce, hatta binlerce bu t\u00fcr sahte ba\u011flant\u0131 ba\u015flat\u0131r. Her bir ba\u011flant\u0131, sunucu taraf\u0131nda bir kaynak (genellikle bir thread) ay\u0131rmas\u0131na neden olur. Sunucunun yap\u0131land\u0131r\u0131lm\u0131\u015f maksimum e\u015fzamanl\u0131 ba\u011flant\u0131 limitine ula\u015f\u0131ld\u0131\u011f\u0131nda, art\u0131k yeni gelen hi\u00e7bir iste\u011fi kabul edemez hale gelir. Bu noktada, siteye eri\u015fmeye \u00e7al\u0131\u015fan ger\u00e7ek kullan\u0131c\u0131lar ba\u011flant\u0131 kuramaz ve hizmet reddi (Denial of Service) durumu ger\u00e7ekle\u015fmi\u015f olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirinin-Adim-Adim-Simulasyonu\"><\/span>Sald\u0131r\u0131n\u0131n Ad\u0131m Ad\u0131m Sim\u00fclasyonu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Slowloris sald\u0131r\u0131s\u0131n\u0131n i\u015fleyi\u015fini daha net anlamak i\u00e7in ad\u0131mlar\u0131 sim\u00fcle edelim:<\/p>\n<h4>Soketlerin A\u00e7\u0131lmas\u0131 ve Ba\u011flant\u0131 Kurulmas\u0131<\/h4>\n<p>Sald\u0131rgan\u0131n arac\u0131, hedef web sunucusunun 80 veya 443 numaral\u0131 portuna \u00e7ok say\u0131da TCP ba\u011flant\u0131s\u0131 ba\u015flat\u0131r.<\/p>\n<h4>K\u0131smi HTTP Ba\u015fl\u0131klar\u0131n\u0131n (Headers) G\u00f6nderilmesi<\/h4>\n<p>Her ba\u011flant\u0131 kurulduktan sonra, ara\u00e7 k\u0131smi bir HTTP iste\u011fi g\u00f6nderir. \u00d6rne\u011fin: `GET \/ HTTP\/1.1\\r\\nHost: hedefsite.com\\r\\nUser-Agent: Mozilla\/5.0 &#8230;\\r\\n` Ancak iste\u011fi bitiren son `\\r\\n\\r\\n` karakterlerini g\u00f6ndermez.<\/p>\n<h4>Ba\u011flant\u0131y\u0131 A\u00e7\u0131k Tutmak \u0130\u00e7in &#8220;Keep-Alive&#8221; Verilerinin G\u00f6nderimi<\/h4>\n<p>Sunucunun ba\u011flant\u0131y\u0131 kapatmas\u0131n\u0131 \u00f6nlemek i\u00e7in, sald\u0131r\u0131 arac\u0131 her birka\u00e7 saniyede bir her a\u00e7\u0131k sokete ek, anlams\u0131z bir ba\u015fl\u0131k g\u00f6nderir (\u00f6rne\u011fin, `X-a: b\\r\\n`). Bu, sunucuya istemcinin hala &#8220;canl\u0131&#8221; oldu\u011funu ve iste\u011fin devam etti\u011fini d\u00fc\u015f\u00fcnd\u00fcr\u00fcr.<\/p>\n<h4>Maksimum Ba\u011flant\u0131 Limitine Ula\u015f\u0131lmas\u0131 ve Hizmet Reddi<\/h4>\n<p>Sald\u0131rgan, bu yar\u0131m kalm\u0131\u015f ba\u011flant\u0131lar\u0131n say\u0131s\u0131n\u0131, sunucunun yap\u0131land\u0131r\u0131lm\u0131\u015f maksimum ba\u011flant\u0131 limitine ula\u015fana kadar art\u0131r\u0131r. Bu limite ula\u015f\u0131ld\u0131\u011f\u0131nda, sunucu yeni ba\u011flant\u0131lar\u0131 reddetmeye ba\u015flar ve web sitesi me\u015fru kullan\u0131c\u0131lar i\u00e7in eri\u015filemez hale gelir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Slowlorisin-Diger-DDoS-Saldiri-Turlerinden-Farklari\"><\/span>Slowloris&#8217;in Di\u011fer DDoS Sald\u0131r\u0131 T\u00fcrlerinden Farklar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Slowloris, siber g\u00fcvenlik alan\u0131nda s\u0131k\u00e7a kar\u015f\u0131la\u015f\u0131lan di\u011fer DDoS sald\u0131r\u0131 t\u00fcrlerinden temel \u00e7al\u0131\u015fma prensibi ve hedefleri a\u00e7\u0131s\u0131ndan \u00f6nemli farkl\u0131l\u0131klar g\u00f6sterir. Bu farkl\u0131l\u0131klar, onu hem daha sinsi hem de tespit edilmesi daha zor bir tehdit haline getirir. Hacimsel ve protokol tabanl\u0131 sald\u0131r\u0131larla kar\u015f\u0131la\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda, Slowloris&#8217;in ne kadar \u00f6zg\u00fcn bir yakla\u015f\u0131m benimsedi\u011fi daha net ortaya \u00e7\u0131kar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hacimsel-Volumetric-Saldirilarla-Karsilastirma\"><\/span>Hacimsel (Volumetric) Sald\u0131r\u0131larla Kar\u015f\u0131la\u015ft\u0131rma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Hacimsel sald\u0131r\u0131lar, en yayg\u0131n DDoS t\u00fcr\u00fcd\u00fcr ve hedefin a\u011f bant geni\u015fli\u011fini tamamen doyurmay\u0131 ama\u00e7lar. UDP flood, ICMP flood ve DNS amplification gibi teknikler kullan\u0131larak hedefe saniyede on milyonlarca paket ve y\u00fczlerce gigabitlik sahte trafik g\u00f6nderilir. Ama\u00e7, hedefin internet ba\u011flant\u0131 borusunu t\u0131kayarak me\u015fru trafi\u011fin ge\u00e7i\u015fini engellemektir. Slowloris ise bunun tam tersidir; bant geni\u015fli\u011fini hedef almaz, \u00e7ok az trafik \u00fcretir ve sunucunun uygulama katman\u0131ndaki kaynaklar\u0131n\u0131 t\u00fcketir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Protokol-Tabanli-Saldirilarla-Karsilastirma\"><\/span>Protokol Tabanl\u0131 Sald\u0131r\u0131larla Kar\u015f\u0131la\u015ft\u0131rma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SYN flood gibi protokol tabanl\u0131 sald\u0131r\u0131lar, a\u011f altyap\u0131s\u0131 cihazlar\u0131n\u0131n (firewall, load balancer) veya sunucular\u0131n durum tablolar\u0131n\u0131 (state tables) hedef al\u0131r. \u00d6rne\u011fin, bir SYN flood sald\u0131r\u0131s\u0131, \u00e7ok say\u0131da sahte TCP ba\u011flant\u0131 ba\u015flang\u0131\u00e7 paketi (SYN) g\u00f6ndererek sunucunun ba\u011flant\u0131 tablosunu doldurur ve yeni ba\u011flant\u0131lar\u0131 kabul etmesini engeller. Slowloris de benzer \u015fekilde sunucu kaynaklar\u0131n\u0131 t\u00fcketir ancak bunu a\u011f katman\u0131nda (Layer 4) de\u011fil, do\u011frudan uygulama katman\u0131nda (Layer 7) ve ge\u00e7erli gibi g\u00f6r\u00fcnen HTTP istekleriyle yapar. Bu, sald\u0131r\u0131n\u0131n daha &#8220;ak\u0131ll\u0131&#8221; ve hedefe y\u00f6nelik olmas\u0131n\u0131 sa\u011flar.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>Slowloris (Uygulama Katman\u0131)<\/th>\n<th>Hacimsel Sald\u0131r\u0131 (A\u011f Katman\u0131)<\/th>\n<th>Protokol Sald\u0131r\u0131s\u0131 (A\u011f\/Transport Katman\u0131)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Hedef<\/strong><\/td>\n<td>Web sunucusunun ba\u011flant\u0131 havuzu<\/td>\n<td>A\u011f bant geni\u015fli\u011fi<\/td>\n<td>Sunucu\/Firewall ba\u011flant\u0131 tablolar\u0131<\/td>\n<\/tr>\n<tr>\n<td><strong>Gereken Bant Geni\u015fli\u011fi<\/strong><\/td>\n<td>\u00c7ok D\u00fc\u015f\u00fck<\/td>\n<td>\u00c7ok Y\u00fcksek (Gbps\/Tbps)<\/td>\n<td>Orta\/Y\u00fcksek (Mpps)<\/td>\n<\/tr>\n<tr>\n<td><strong>Trafik Profili<\/strong><\/td>\n<td>Normal kullan\u0131c\u0131 trafi\u011fi gibi g\u00f6r\u00fcn\u00fcr<\/td>\n<td>A\u00e7\u0131k\u00e7a anormal ve y\u00fcksek hacimli<\/td>\n<td>Anormal paket desenleri<\/td>\n<\/tr>\n<tr>\n<td><strong>Tespit Zorlu\u011fu<\/strong><\/td>\n<td>Y\u00fcksek (Gizli ve yava\u015f)<\/td>\n<td>D\u00fc\u015f\u00fck (Ani trafik art\u0131\u015f\u0131)<\/td>\n<td>Orta<\/td>\n<\/tr>\n<tr>\n<td><strong>\u00d6rnek Sald\u0131r\u0131<\/strong><\/td>\n<td>Slowloris, R.U.D.Y.<\/td>\n<td>UDP Flood, DNS Amplification<\/td>\n<td>SYN Flood, Ping of Death<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Dusuk-Bant-Genisligi-Gereksinimi-ve-Tespitteki-Zorluklar\"><\/span>D\u00fc\u015f\u00fck Bant Geni\u015fli\u011fi Gereksinimi ve Tespitteki Zorluklar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Slowloris&#8217;in en belirgin avantaj\u0131, tek bir sald\u0131rgan makinesinin standart bir internet ba\u011flant\u0131s\u0131yla bile g\u00fc\u00e7l\u00fc bir web sunucusunu devre d\u0131\u015f\u0131 b\u0131rakabilmesidir. Y\u00fcksek trafik hacmi olu\u015fturmad\u0131\u011f\u0131 i\u00e7in, a\u011f tabanl\u0131 DDoS tespit sistemleri genellikle bu t\u00fcr bir sald\u0131r\u0131y\u0131 fark edemez. Trafik, yasal bir HTTP iste\u011fi gibi ba\u015flad\u0131\u011f\u0131 i\u00e7in, imza tabanl\u0131 sald\u0131r\u0131 tespit sistemleri (IDS\/IPS) taraf\u0131ndan da kolayca g\u00f6zden ka\u00e7\u0131r\u0131labilir. Sald\u0131r\u0131n\u0131n tespiti, genellikle sunucu loglar\u0131nda uzun s\u00fcre a\u00e7\u0131k kalan ve hi\u00e7 tamamlanmayan \u00e7ok say\u0131da ba\u011flant\u0131n\u0131n manuel olarak incelenmesiyle m\u00fcmk\u00fcn olur.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Slowloris-Saldirisinin-Belirtileri-ve-Etkileri\"><\/span>Slowloris Sald\u0131r\u0131s\u0131n\u0131n Belirtileri ve Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Slowloris sald\u0131r\u0131s\u0131, &#8220;d\u00fc\u015f\u00fck ve yava\u015f&#8221; do\u011fas\u0131 gere\u011fi ba\u015flang\u0131\u00e7ta fark edilmesi zor olabilir. Ancak etkileri ortaya \u00e7\u0131kmaya ba\u015flad\u0131\u011f\u0131nda, hem sistem y\u00f6neticileri hem de son kullan\u0131c\u0131lar i\u00e7in ciddi sorunlara yol a\u00e7ar. Bu sald\u0131r\u0131n\u0131n belirtilerini do\u011fru yorumlamak, sorunun h\u0131zl\u0131 bir \u015fekilde te\u015fhis edilmesi ve m\u00fcdahale edilmesi i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Web-Sunucusunda-Gozlemlenen-Performans-Sorunlari\"><\/span>Web Sunucusunda G\u00f6zlemlenen Performans Sorunlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ilk ve en belirgin i\u015fareti, web sunucusunun genel performans\u0131nda ciddi bir yava\u015flamad\u0131r. Sayfalar ya \u00e7ok ge\u00e7 y\u00fcklenir ya da hi\u00e7 y\u00fcklenmez. Sunucunun CPU veya bellek kullan\u0131m\u0131 tavan yapmayabilir, \u00e7\u00fcnk\u00fc sald\u0131r\u0131 i\u015flemci g\u00fcc\u00fcn\u00fc de\u011fil, ba\u011flant\u0131 yuvalar\u0131n\u0131 hedefler. Sunucu y\u00f6neticileri, sunucunun hala \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ancak d\u0131\u015far\u0131dan gelen isteklere yan\u0131t veremedi\u011fini veya \u00e7ok yava\u015f yan\u0131t verdi\u011fini g\u00f6zlemleyebilir. Bu durum, sunucunun t\u00fcm ba\u011flant\u0131 i\u015fleme kapasitesinin me\u015fgul edildi\u011finin bir g\u00f6stergesidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yasal-Kullanicilarin-Siteye-Erisememesi\"><\/span>Yasal Kullan\u0131c\u0131lar\u0131n Siteye Eri\u015fememesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucunun t\u00fcm mevcut ba\u011flant\u0131lar\u0131 Slowloris taraf\u0131ndan me\u015fgul edildi\u011finde, siteye eri\u015fmeye \u00e7al\u0131\u015fan ger\u00e7ek kullan\u0131c\u0131lar &#8220;ba\u011flant\u0131 kurulamad\u0131&#8221; veya &#8220;sayfa zaman a\u015f\u0131m\u0131na u\u011frad\u0131&#8221; gibi hatalarla kar\u015f\u0131la\u015f\u0131r. Bu durum, ba\u015flang\u0131\u00e7ta aral\u0131kl\u0131 olarak ya\u015fanabilir, ancak sald\u0131r\u0131 yo\u011funla\u015ft\u0131k\u00e7a web sitesi tamamen eri\u015filemez hale gelir. M\u00fc\u015fterileriniz veya kullan\u0131c\u0131lar\u0131n\u0131z i\u00e7in bu durum, hizmetlerinizin g\u00fcvenilmez oldu\u011fu alg\u0131s\u0131n\u0131 yaratabilir ve marka imaj\u0131n\u0131za zarar verebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucu-Log-Kayitlarinda-Anormal-Baglanti-Desenleri\"><\/span>Sunucu Log Kay\u0131tlar\u0131nda Anormal Ba\u011flant\u0131 Desenleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Deneyimli bir sistem y\u00f6neticisi i\u00e7in sunucu eri\u015fim ve hata loglar\u0131, bir Slowloris sald\u0131r\u0131s\u0131n\u0131 te\u015fhis etmede en \u00f6nemli ara\u00e7lard\u0131r. Log kay\u0131tlar\u0131 incelendi\u011finde, belirli IP adreslerinden veya IP bloklar\u0131ndan gelen, \u00e7ok uzun s\u00fcreler boyunca a\u00e7\u0131k kalan ve hi\u00e7bir zaman tamamlanmayan \u00e7ok say\u0131da ba\u011flant\u0131 g\u00f6r\u00fclecektir. Normalde bir HTTP iste\u011fi saniyeler i\u00e7inde tamamlan\u0131rken, Slowloris ba\u011flant\u0131lar\u0131 dakikalarca, hatta saatlerce a\u00e7\u0131k kalabilir. Ayr\u0131ca, bu ba\u011flant\u0131lar\u0131n \u00e7ok az veri transferi yapt\u0131\u011f\u0131 da loglarda dikkat \u00e7eken bir di\u011fer anomali olacakt\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Is-Surekliligi-Uzerindeki-Potansiyel-Etkileri\"><\/span>\u0130\u015f S\u00fcreklili\u011fi \u00dczerindeki Potansiyel Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Slowloris sald\u0131r\u0131s\u0131n\u0131n etkileri sadece teknik sorunlarla s\u0131n\u0131rl\u0131 de\u011fildir. E-ticaret siteleri i\u00e7in eri\u015filemezlik, do\u011frudan gelir kayb\u0131 anlam\u0131na gelir. \u00c7evrimi\u00e7i hizmet sunan \u015firketler i\u00e7in itibar kayb\u0131na ve m\u00fc\u015fteri memnuniyetsizli\u011fine yol a\u00e7ar. Kritik i\u015f uygulamalar\u0131n\u0131 bar\u0131nd\u0131ran sunucular\u0131n hedef al\u0131nmas\u0131, \u015firket i\u00e7i operasyonlar\u0131n durmas\u0131na neden olabilir. Bu nedenle, sald\u0131r\u0131n\u0131n i\u015f s\u00fcreklili\u011fi \u00fczerindeki potansiyel etkisi b\u00fcy\u00fckt\u00fcr ve kesinti s\u00fcresinin en aza indirilmesi i\u00e7in h\u0131zl\u0131 ve etkili \u00f6nlemler al\u0131nmal\u0131d\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Hangi-Web-Sunuculari-Risk-Altinda\"><\/span>Hangi Web Sunucular\u0131 Risk Alt\u0131nda?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Slowloris sald\u0131r\u0131s\u0131n\u0131n ba\u015far\u0131s\u0131, b\u00fcy\u00fck \u00f6l\u00e7\u00fcde hedef web sunucusunun mimarisine ve gelen ba\u011flant\u0131lar\u0131 nas\u0131l y\u00f6netti\u011fine ba\u011fl\u0131d\u0131r. Her web sunucusu yaz\u0131l\u0131m\u0131 bu t\u00fcr bir sald\u0131r\u0131ya kar\u015f\u0131 e\u015fit derecede savunmas\u0131z de\u011fildir. Baz\u0131 mimariler, do\u011falar\u0131 gere\u011fi Slowloris&#8217;in istismar etti\u011fi kaynak t\u00fcketimi y\u00f6ntemine kar\u015f\u0131 daha diren\u00e7liyken, baz\u0131lar\u0131 ise kolayca hedef haline gelebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Apache-Web-Sunucusu-ve-Thread-Tabanli-Mimarisi\"><\/span>Apache Web Sunucusu ve Thread Tabanl\u0131 Mimarisi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tarihsel olarak, Slowloris sald\u0131r\u0131s\u0131na kar\u015f\u0131 en savunmas\u0131z olan web sunucusu Apache&#8217;dir. Bunun temel nedeni, Apache&#8217;nin varsay\u0131lan yap\u0131land\u0131rmada kulland\u0131\u011f\u0131 &#8220;prefork&#8221; gibi i\u015flem\/thread tabanl\u0131 modellerdir. Bu modelde, sunucu her gelen ba\u011flant\u0131 i\u00e7in ayr\u0131 bir i\u015flem (process) veya i\u015f par\u00e7ac\u0131\u011f\u0131 (thread) ay\u0131r\u0131r. Bu, sunucunun ayn\u0131 anda hizmet verebilece\u011fi istemci say\u0131s\u0131n\u0131n, mevcut thread veya process say\u0131s\u0131yla s\u0131n\u0131rl\u0131 oldu\u011fu anlam\u0131na gelir. Slowloris, yava\u015f isteklerle bu thread&#8217;leri uzun s\u00fcre me\u015fgul ederek havuzun h\u0131zla dolmas\u0131na ve sunucunun yeni ba\u011flant\u0131lar\u0131 kabul edememesine neden olur. Bir\u00e7ok <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> sa\u011flay\u0131c\u0131s\u0131 bu nedenle Apache sunucular\u0131n\u0131 \u00f6zel mod\u00fcllerle g\u00fc\u00e7lendirmektedir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Neden-Bazi-Sunucular-Nginx-IIS-Daha-Direnclidir\"><\/span>Neden Baz\u0131 Sunucular (Nginx, IIS) Daha Diren\u00e7lidir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Nginx ve Microsoft IIS gibi modern web sunucular\u0131, farkl\u0131 bir mimari yakla\u015f\u0131m benimserler. Bu sunucular, olay tabanl\u0131 (event-driven), asenkron bir mimari kullan\u0131r. Bu mimaride, her ba\u011flant\u0131 i\u00e7in ayr\u0131 bir thread ay\u0131rmak yerine, tek bir i\u015flem veya az say\u0131da i\u015flem, binlerce ba\u011flant\u0131y\u0131 ayn\u0131 anda y\u00f6netebilir. Bir ba\u011flant\u0131 veri beklerken (\u00f6rne\u011fin Slowloris sald\u0131r\u0131s\u0131nda oldu\u011fu gibi), sunucu o ba\u011flant\u0131y\u0131 beklemeye al\u0131r ve i\u015flemcisini di\u011fer ba\u011flant\u0131lara hizmet vermek i\u00e7in kullan\u0131r. Bu, yava\u015f ba\u011flant\u0131lar\u0131n sunucunun genel kaynaklar\u0131n\u0131 t\u00fcketmesini ve yeni ba\u011flant\u0131lar\u0131 engellemesini \u00e7ok daha zor hale getirir. Bu nedenle, Nginx gibi sunucular Slowloris&#8217;e kar\u015f\u0131 do\u011fal olarak \u00e7ok daha diren\u00e7lidir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Mimari T\u00fcr\u00fc<\/th>\n<th>\u00c7al\u0131\u015fma Prensibi<\/th>\n<th>Slowloris&#8217;e Kar\u015f\u0131 Savunmas\u0131zl\u0131\u011f\u0131<\/th>\n<th>\u00d6rnek Web Sunucular\u0131<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Thread\/Process Tabanl\u0131<\/strong><\/td>\n<td>Her ba\u011flant\u0131 i\u00e7in ayr\u0131 bir thread\/process ay\u0131r\u0131r.<\/td>\n<td><strong>Y\u00fcksek.<\/strong> Ba\u011flant\u0131 havuzu kolayca doldurulabilir.<\/td>\n<td>Apache (prefork\/worker MPM), eski IIS s\u00fcr\u00fcmleri<\/td>\n<\/tr>\n<tr>\n<td><strong>Olay Tabanl\u0131 (Event-Driven)<\/strong><\/td>\n<td>Tek bir thread ile binlerce ba\u011flant\u0131y\u0131 asenkron olarak y\u00f6netir.<\/td>\n<td><strong>D\u00fc\u015f\u00fck.<\/strong> Yava\u015f ba\u011flant\u0131lar kaynaklar\u0131 bloke etmez.<\/td>\n<td>Nginx, Lighttpd, Node.js, yeni IIS s\u00fcr\u00fcmleri<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Saldiriya-Karsi-Savunmasiz-Sunucu-Yapilandirmalari\"><\/span>Sald\u0131r\u0131ya Kar\u015f\u0131 Savunmas\u0131z Sunucu Yap\u0131land\u0131rmalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kullan\u0131lan web sunucusu yaz\u0131l\u0131m\u0131n\u0131n t\u00fcr\u00fc kadar, yap\u0131land\u0131rmas\u0131 da \u00f6nemlidir. Sald\u0131r\u0131ya kar\u015f\u0131 savunmas\u0131z yap\u0131land\u0131rmalar \u015funlar\u0131 i\u00e7erir:<\/p>\n<ul>\n<li><b>Y\u00fcksek Ba\u011flant\u0131 Zaman A\u015f\u0131m\u0131 (Timeout) De\u011ferleri:<\/b> Sunucunun bir istemciden veri gelmesini \u00e7ok uzun s\u00fcre beklemesi, Slowloris&#8217;in i\u015fini kolayla\u015ft\u0131r\u0131r.<\/li>\n<li><b>S\u0131n\u0131rs\u0131z veya \u00c7ok Y\u00fcksek Maksimum Ba\u011flant\u0131 Limiti:<\/b> Sunucunun kald\u0131rabilece\u011finden daha fazla ba\u011flant\u0131ya izin vermesi, kaynaklar\u0131n h\u0131zla t\u00fckenmesine yol a\u00e7abilir.<\/li>\n<li><b>Tek Bir IP&#8217;den Gelen Ba\u011flant\u0131 Say\u0131s\u0131nda K\u0131s\u0131tlama Olmamas\u0131:<\/b> Sald\u0131rgan\u0131n tek bir kaynaktan binlerce ba\u011flant\u0131 a\u00e7mas\u0131na izin vermek, riski art\u0131r\u0131r.<\/li>\n<li><b>Koruyucu Mod\u00fcllerin Eksikli\u011fi:<\/b> Apache i\u00e7in `mod_reqtimeout` veya `mod_qos` gibi yava\u015f istekleri tespit edip sonland\u0131ran mod\u00fcllerin kullan\u0131lmamas\u0131 sunucuyu savunmas\u0131z b\u0131rak\u0131r. Bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">VPS<\/a> \u00fczerinde yap\u0131lan yanl\u0131\u015f yap\u0131land\u0131rmalar bu t\u00fcr zafiyetlere yol a\u00e7abilir.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Slowloris-Saldirilarina-Karsi-Korunma-ve-Onleme-Yontemleri\"><\/span>Slowloris Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Korunma ve \u00d6nleme Y\u00f6ntemleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Slowloris gibi sinsi ve tespit edilmesi zor sald\u0131r\u0131lara kar\u015f\u0131 korunmak, tek bir \u00e7\u00f6z\u00fcme bel ba\u011flamak yerine katmanl\u0131 bir g\u00fcvenlik yakla\u015f\u0131m\u0131 benimsemeyi gerektirir. Korunma stratejileri, web sunucusu seviyesindeki yap\u0131land\u0131rmalardan, a\u011f altyap\u0131s\u0131 cihazlar\u0131na ve bulut tabanl\u0131 servislere kadar geni\u015f bir yelpazeyi kapsar. Ama\u00e7, yava\u015f ve k\u00f6t\u00fc niyetli ba\u011flant\u0131lar\u0131 me\u015fru kullan\u0131c\u0131lardan ay\u0131rt edip engellemektir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Web-Sunucusu-Seviyesinde-Yapilandirma-Iyilestirmeleri\"><\/span>Web Sunucusu Seviyesinde Yap\u0131land\u0131rma \u0130yile\u015ftirmeleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130lk savunma hatt\u0131, do\u011frudan web sunucusunun kendisidir. Do\u011fru yap\u0131land\u0131rma parametreleri ile Slowloris&#8217;in etkisi b\u00fcy\u00fck \u00f6l\u00e7\u00fcde azalt\u0131labilir. Hatta baz\u0131 durumlarda, bir <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/wordpress-hosting.html\" target=\"_blank\">WordPress hosting<\/a> hizmetinde bile bu ayarlar y\u00f6neticiler taraf\u0131ndan \u00f6nceden optimize edilmi\u015f olabilir.<\/p>\n<h4>Maksimum Ba\u011flant\u0131 Say\u0131s\u0131n\u0131n S\u0131n\u0131rland\u0131r\u0131lmas\u0131<\/h4>\n<p>Web sunucunuzun kald\u0131rabilece\u011fi maksimum e\u015fzamanl\u0131 ba\u011flant\u0131 say\u0131s\u0131n\u0131 (\u00f6rne\u011fin Apache&#8217;de `MaxClients` direktifi) donan\u0131m kaynaklar\u0131n\u0131za uygun, ger\u00e7ek\u00e7i bir seviyeye ayarlamak \u00f6nemlidir. Bu, sunucunun tamamen kilitlenmesini \u00f6nleyebilir.<\/p>\n<h4>Ba\u011flant\u0131 Zaman A\u015f\u0131mlar\u0131n\u0131n (Timeout) D\u00fc\u015f\u00fcr\u00fclmesi<\/h4>\n<p>Bir istemcinin veri g\u00f6ndermeden ne kadar s\u00fcre bo\u015fta kalabilece\u011fini belirleyen zaman a\u015f\u0131m\u0131 de\u011ferlerini (\u00f6rne\u011fin Apache&#8217;de `Timeout` veya `RequestReadTimeout` direktifleri) agresif bir \u015fekilde d\u00fc\u015f\u00fcrmek, Slowloris&#8217;in ba\u011flant\u0131lar\u0131 uzun s\u00fcre a\u00e7\u0131k tutmas\u0131n\u0131 engeller. \u00d6rne\u011fin, varsay\u0131lan 300 saniye yerine 10-20 saniye gibi bir de\u011fer belirlenebilir.<\/p>\n<h4>\u0130stemci Ba\u015f\u0131na Ba\u011flant\u0131 H\u0131z\u0131n\u0131n ve Say\u0131s\u0131n\u0131n K\u0131s\u0131tlanmas\u0131<\/h4>\n<p>Apache&#8217;de `mod_qos` veya Nginx&#8217;te `limit_conn_zone` gibi mod\u00fcller kullanarak, tek bir IP adresinin a\u00e7abilece\u011fi e\u015fzamanl\u0131 ba\u011flant\u0131 say\u0131s\u0131n\u0131 ve minimum veri g\u00f6nderme h\u0131z\u0131n\u0131 s\u0131n\u0131rlayabilirsiniz. Belirlenen h\u0131z\u0131n alt\u0131na d\u00fc\u015fen ba\u011flant\u0131lar otomatik olarak sonland\u0131r\u0131l\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ters-Proxy-Reverse-Proxy-ve-Yuk-Dengeleyici-Load-Balancer-Kullanimi\"><\/span>Ters Proxy (Reverse Proxy) ve Y\u00fck Dengeleyici (Load Balancer) Kullan\u0131m\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Web sunucunuzun \u00f6n\u00fcne Nginx gibi olay tabanl\u0131 bir mimariye sahip bir ters proxy veya bir y\u00fck dengeleyici yerle\u015ftirmek, Slowloris&#8217;e kar\u015f\u0131 \u00e7ok etkili bir savunma y\u00f6ntemidir. Ters proxy, d\u0131\u015far\u0131dan gelen yava\u015f istekleri kendi arabelle\u011finde (buffer) biriktirir ve sadece tam olarak gelen istekleri arka plandaki web sunucusuna (\u00f6rne\u011fin Apache) iletir. Bu, savunmas\u0131z olan sunucunun ba\u011flant\u0131 havuzunun me\u015fgul edilmesini engeller.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Web-Uygulama-Guvenlik-Duvari-WAF-Cozumleri\"><\/span>Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) \u00c7\u00f6z\u00fcmleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Web Uygulama G\u00fcvenlik Duvarlar\u0131 (WAF), HTTP trafi\u011fini derinlemesine analiz ederek anormal davran\u0131\u015flar\u0131 tespit etmek \u00fczere tasarlanm\u0131\u015ft\u0131r. Modern bir WAF, Slowloris gibi &#8220;d\u00fc\u015f\u00fck ve yava\u015f&#8221; sald\u0131r\u0131 modellerini tan\u0131yabilir ve bu t\u00fcr davran\u0131\u015f sergileyen IP adreslerinden gelen ba\u011flant\u0131lar\u0131, web sunucusuna ula\u015fmadan \u00f6nce engelleyebilir. Ayr\u0131ca bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL sertifikas\u0131<\/a> ile birlikte kullan\u0131ld\u0131\u011f\u0131nda, \u015fifreli trafi\u011fin de denetlenmesini sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Donanim-Tabanli-DDoS-Koruma-Cihazlari\"><\/span>Donan\u0131m Tabanl\u0131 DDoS Koruma Cihazlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>B\u00fcy\u00fck \u00f6l\u00e7ekli a\u011flar ve veri merkezleri i\u00e7in tasarlanm\u0131\u015f donan\u0131m tabanl\u0131 DDoS koruma cihazlar\u0131, hem hacimsel sald\u0131r\u0131lar\u0131 hem de Slowloris gibi uygulama katman\u0131 sald\u0131r\u0131lar\u0131n\u0131 engelleme kapasitesine sahiptir. Bu cihazlar, gelen t\u00fcm trafi\u011fi inceleyerek anomali tespiti yapar ve k\u00f6t\u00fc niyetli ba\u011flant\u0131lar\u0131 ger\u00e7ek zamanl\u0131 olarak sonland\u0131r\u0131r. Bu t\u00fcr bir koruma genellikle g\u00fc\u00e7l\u00fc bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vds-sunucu.html\" target=\"_blank\">VDS<\/a> altyap\u0131s\u0131 ile birlikte sunulur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Bulut-Tabanli-DDoS-Koruma-Servisleri\"><\/span>Bulut Tabanl\u0131 DDoS Koruma Servisleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcn\u00fcm\u00fczde en yayg\u0131n ve etkili y\u00f6ntemlerden biri, bulut tabanl\u0131 bir DDoS koruma servisi kullanmakt\u0131r. Bu servisler, web sitenizin trafi\u011fini kendi global a\u011flar\u0131 \u00fczerinden ge\u00e7irir. Gelen trafik, sitenize ula\u015fmadan \u00f6nce bu a\u011f \u00fczerinde temizlenir; sadece me\u015fru kullan\u0131c\u0131 isteklerinin ge\u00e7i\u015fine izin verilir. Bu servisler, devasa kapasiteleri sayesinde en b\u00fcy\u00fck hacimsel sald\u0131r\u0131lar\u0131 bile absorbe edebilir ve geli\u015fmi\u015f algoritmalar\u0131yla Slowloris gibi Katman 7 tehditlerini etkin bir \u015fekilde durdurabilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Slowloris-Saldirilarina-Karsi-Profesyonel-DDoS-Koruma-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>Slowloris Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Profesyonel DDoS Koruma \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Slowloris ve benzeri uygulama katman\u0131 (Katman 7) sald\u0131r\u0131lar\u0131, standart g\u00fcvenlik \u00f6nlemlerini kolayca a\u015fabilen sofistike tehditlerdir. Bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 etkili bir koruma sa\u011flamak, yaln\u0131zca do\u011fru ara\u00e7lara de\u011fil, ayn\u0131 zamanda derinlemesine uzmanl\u0131k ve proaktif bir yakla\u015f\u0131ma sahip olmay\u0131 gerektirir. \u0130HS Telekom, sundu\u011fu profesyonel DDoS koruma hizmetleriyle i\u015fletmenizin dijital varl\u0131klar\u0131n\u0131 bu sinsi tehditlere kar\u015f\u0131 g\u00fcvence alt\u0131na al\u0131r. Alan\u0131nda uzmanla\u015fm\u0131\u015f bir hizmet sa\u011flay\u0131c\u0131 olarak \u0130HS Telekom, ayn\u0131 zamanda g\u00fcvenilir bir <a href=\"https:\/\/www.ihs.com.tr\/kurumsal\/iletisim.html\" target=\"_blank\">ileti\u015fim<\/a> kanal\u0131 sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gelismis-Tehdit-Algilama-ve-Anomali-Tespiti\"><\/span>Geli\u015fmi\u015f Tehdit Alg\u0131lama ve Anomali Tespiti<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom&#8217;un DDoS koruma altyap\u0131s\u0131, normal trafik davran\u0131\u015f\u0131n\u0131z\u0131 s\u00fcrekli olarak \u00f6\u011frenen ve analiz eden ak\u0131ll\u0131 sistemler \u00fczerine kuruludur. Bu sayede, Slowloris gibi &#8220;d\u00fc\u015f\u00fck ve yava\u015f&#8221; sald\u0131r\u0131lar\u0131n neden oldu\u011fu hafif sapmalar bile an\u0131nda anomali olarak tespit edilir. Geleneksel e\u015fik tabanl\u0131 sistemlerin aksine, davran\u0131\u015fsal analiz y\u00f6ntemlerimiz sayesinde en sinsi sald\u0131r\u0131lar bile web sunucunuza zarar vermeden \u00f6nce engellenir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Katman-7-Uygulama-Katmani-Korumasi\"><\/span>Katman 7 (Uygulama Katman\u0131) Korumas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Slowloris, do\u011frudan uygulama katman\u0131n\u0131 hedef ald\u0131\u011f\u0131 i\u00e7in, sadece a\u011f katman\u0131na odaklanan koruma \u00e7\u00f6z\u00fcmleri yetersiz kal\u0131r. \u0130HS Telekom, \u00f6zellikle HTTP\/HTTPS trafi\u011fini derinlemesine inceleyen, yar\u0131m b\u0131rak\u0131lm\u0131\u015f istekleri, anormal ba\u015fl\u0131klar\u0131 ve yava\u015f veri transferlerini tespit edip engelleyen geli\u015fmi\u015f Katman 7 korumas\u0131 sunar. Bu, web sunucunuzun ba\u011flant\u0131 kaynaklar\u0131n\u0131n t\u00fckenmesini \u00f6nleyerek hizmetlerinizin kesintisiz \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yuksek-Kapasiteli-Global-Ag-ve-Aninda-Mudahale\"><\/span>Y\u00fcksek Kapasiteli Global A\u011f ve An\u0131nda M\u00fcdahale<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>DDoS koruma hizmetimiz, d\u00fcnyan\u0131n farkl\u0131 noktalar\u0131na yay\u0131lm\u0131\u015f y\u00fcksek kapasiteli bir global a\u011f (scrubbing center) \u00fczerinde \u00e7al\u0131\u015f\u0131r. Sald\u0131r\u0131 trafi\u011fi, kayna\u011f\u0131na en yak\u0131n noktada kar\u015f\u0131lan\u0131r ve temizlenir, b\u00f6ylece sadece me\u015fru trafik <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> altyap\u0131n\u0131za ula\u015f\u0131r. Bu global da\u011f\u0131t\u0131m, sald\u0131r\u0131 an\u0131nda bile kullan\u0131c\u0131lar\u0131n\u0131z i\u00e7in gecikme s\u00fcresinin minimumda tutulmas\u0131n\u0131 sa\u011flar ve an\u0131nda m\u00fcdahale kapasitesi sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"724-Uzman-Guvenlik-Operasyon-Merkezi-Destegi\"><\/span>7\/24 Uzman G\u00fcvenlik Operasyon Merkezi Deste\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Siber tehditler asla uyumaz. Bu nedenle G\u00fcvenlik Operasyon Merkezimiz (SOC), 7 g\u00fcn 24 saat boyunca altyap\u0131n\u0131z\u0131 izler ve olas\u0131 tehditlere kar\u015f\u0131 tetikte bekler. Otomatik sistemlerimizin yan\u0131 s\u0131ra, siber g\u00fcvenlik uzmanlar\u0131m\u0131z da her an m\u00fcdahaleye haz\u0131rd\u0131r. Herhangi bir anomali durumunda, uzmanlar\u0131m\u0131z durumu analiz eder ve i\u015fletmenize \u00f6zel en uygun savunma stratejisini devreye al\u0131r. G\u00fcvenlik ve performans\u0131n yan\u0131 s\u0131ra, <a href=\"https:\/\/www.ihs.com.tr\/whois-sorgulama\" target=\"_blank\">whois sorgulama<\/a> gibi ara\u00e7larla alan ad\u0131 bilgilerinizi de y\u00f6netebilirsiniz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Is-Surekliligini-Garanti-Altina-Alan-Cozumler\"><\/span>\u0130\u015f S\u00fcreklili\u011fini Garanti Alt\u0131na Alan \u00c7\u00f6z\u00fcmler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom i\u00e7in DDoS korumas\u0131, sadece bir sald\u0131r\u0131y\u0131 engellemekten ibaret de\u011fildir; bu, i\u015f s\u00fcreklili\u011finizi garanti alt\u0131na almakt\u0131r. Sundu\u011fumuz \u00e7\u00f6z\u00fcmlerle web sitenizin, uygulamalar\u0131n\u0131z\u0131n ve \u00e7evrimi\u00e7i hizmetlerinizin her zaman eri\u015filebilir kalmas\u0131n\u0131 sa\u011fl\u0131yoruz. Gelir kayb\u0131, itibar zedelenmesi ve m\u00fc\u015fteri memnuniyetsizli\u011fi gibi riskleri ortadan kald\u0131rarak, sizin sadece kendi i\u015finize odaklanman\u0131za olanak tan\u0131yoruz. Projeniz i\u00e7in yeni bir <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">domain sorgulama<\/a> i\u015flemi yaparken, altyap\u0131n\u0131z\u0131n g\u00fcvende oldu\u011funu bilmenin rahatl\u0131\u011f\u0131n\u0131 ya\u015fars\u0131n\u0131z.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Siber g\u00fcvenlik d\u00fcnyas\u0131nda, web sunucular\u0131n\u0131 hedef alan sald\u0131r\u0131lar giderek daha sofistike ve tespit edilmesi zor hale gelmektedir. Kaba kuvvet sald\u0131r\u0131lar\u0131n\u0131n aksine, baz\u0131&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16816,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[466],"tags":[],"class_list":["post-16815","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bilgi-guvenligi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16815"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16815\/revisions"}],"predecessor-version":[{"id":16817,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16815\/revisions\/16817"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16816"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16815"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16815"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}