{"id":8298,"date":"2024-08-30T22:13:44","date_gmt":"2024-08-30T19:13:44","guid":{"rendered":"https:\/\/sunucucozumleri.com\/?p=8298"},"modified":"2024-08-30T22:13:44","modified_gmt":"2024-08-30T19:13:44","slug":"vcenter-firewall-ayarlari-yapilandirma","status":"publish","type":"post","link":"https:\/\/sunucucozumleri.com\/blog\/vcenter-firewall-ayarlari-yapilandirma\/","title":{"rendered":"Vcenter Firewall Ayarlar\u0131 Yap\u0131land\u0131rma"},"content":{"rendered":"

VMware vCenter Server Appliance dahili g\u00fcvenlik duvar\u0131n\u0131n s\u0131kl\u0131kla kullan\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6rmedim. Y\u00f6neticilerin bunu kullanmas\u0131 gerekti\u011fini d\u00fc\u015f\u00fcn\u00fcyorum \u00e7\u00fcnk\u00fc vCenter’\u0131n\u0131z i\u00e7in ek bir koruma katman\u0131 sa\u011flayacakt\u0131r, bu da b\u00fcy\u00fck olas\u0131l\u0131kla kritik bir altyap\u0131 bile\u015fenidir.<\/p>\n

G\u00fcvenlik duvar\u0131, belirli IP adreslerinin veya a\u011flar\u0131n vCenter ile ileti\u015fim kurmas\u0131na izin verebilece\u011finiz veya reddedebilece\u011finiz kurallar olu\u015fturman\u0131za olanak tan\u0131r. \u201cvCenter Server Management\u201d aray\u00fcz\u00fcndeki g\u00fcvenlik duvar\u0131 web tabanl\u0131 y\u00f6netimi, y\u00f6neticinin belirli bir IP veya a\u011fdan gelen trafi\u011fi Kabul Etmesine, Yoksaymas\u0131na, Reddetmesine ve Geri D\u00f6nd\u00fcrmesine olanak tan\u0131r. Kurallar\u0131 arka planda yap\u0131land\u0131rmak i\u00e7in web aray\u00fcz\u00fcn\u00fc kullan\u0131rken, vCenter Server Appliance g\u00fcvenlik\u00a0 duvar\u0131 i\u015flevini sa\u011flamak i\u00e7in\u00a0iptables<\/em>\u00a0kullan\u0131r \u00a0.<\/p>\n

\"Vcenter
Vcenter Firewall Ayarlar\u0131 Yap\u0131land\u0131rma 1<\/figcaption><\/figure>\n

Kurallar, admin’in web aray\u00fcz\u00fcnde olu\u015fturdu\u011fu s\u0131raya g\u00f6re i\u015flenir. A\u015fa\u011f\u0131daki \u00f6rnekte, t\u00fcm trafi\u011fe 10.10.10.3 IP adresinden izin verilir, ancak 10.10.10.0\/24’teki di\u011fer t\u00fcm IP adresleri engellenir.<\/span><\/p>\n

\n
\"Vcenter
Vcenter Firewall Ayarlar\u0131 Yap\u0131land\u0131rma 2<\/figcaption><\/figure>\n

Bu \u00f6rnekte, 10.10.10.0\/24 a\u011f\u0131ndan gelen t\u00fcm trafik engelleniyor ve kural numaras\u0131 iki g\u00f6z ard\u0131 ediliyor: 10.10.10.3 IP adresinin vCenter’a eri\u015fimi yok.<\/p>\n

\n
\"Vcenter
Vcenter Firewall Ayarlar\u0131 Yap\u0131land\u0131rma 3<\/figcaption><\/figure>\n

Tavsiyem, y\u00f6neticilerin vCenter’a ba\u011fland\u0131\u011f\u0131 y\u00f6netim IP’sini “Kabul Et” ile bir numaral\u0131 kural olarak eklemenizdir. Bu kural, kurallar setinde yapabilece\u011finiz hatalara kar\u015f\u0131 koruma sa\u011flar.<\/p>\n

\n
\"Vcenter
Vcenter Firewall Ayarlar\u0131 Yap\u0131land\u0131rma 4<\/figcaption><\/figure>\n

Ayr\u0131ca ESXi IP adreslerini ve vCenter’a ba\u011flanmas\u0131 gereken ara\u00e7lar (vRealize, VMware Site Recovery Manager, vb.) taraf\u0131ndan kullan\u0131lan di\u011fer IP adreslerini eklemeniz de \u00f6nerilir.\u00a0<\/span><\/p>\n

vCenter Server Appliance g\u00fcvenlik duvar\u0131n\u0131 bir API arac\u0131l\u0131\u011f\u0131yla y\u00f6netmek de m\u00fcmk\u00fcnd\u00fcr. Bunu bir sonraki yaz\u0131da ele alaca\u011f\u0131m.\u00a0<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

VMware vCenter Server Appliance dahili g\u00fcvenlik duvar\u0131n\u0131n s\u0131kl\u0131kla kullan\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6rmedim. Y\u00f6neticilerin bunu kullanmas\u0131 gerekti\u011fini d\u00fc\u015f\u00fcn\u00fcyorum \u00e7\u00fcnk\u00fc vCenter’\u0131n\u0131z i\u00e7in ek bir koruma katman\u0131 sa\u011flayacakt\u0131r, bu da b\u00fcy\u00fck olas\u0131l\u0131kla kritik bir altyap\u0131 bile\u015fenidir. G\u00fcvenlik duvar\u0131, belirli IP adreslerinin veya a\u011flar\u0131n vCenter ile ileti\u015fim kurmas\u0131na izin verebilece\u011finiz veya reddedebilece\u011finiz kurallar olu\u015fturman\u0131za olanak tan\u0131r. \u201cvCenter Server Management\u201d aray\u00fcz\u00fcndeki g\u00fcvenlik …<\/p>\n","protected":false},"author":1,"featured_media":8299,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[15,5],"tags":[],"class_list":["post-8298","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-esxi","category-linux"],"acf":[],"_links":{"self":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/8298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/comments?post=8298"}],"version-history":[{"count":0,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/8298\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media\/8299"}],"wp:attachment":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media?parent=8298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/categories?post=8298"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/tags?post=8298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}