Grafana<\/strong><\/td>\n| G\u00f6rselle\u015ftirme ve uyar\u0131<\/td>\n | Prometheus ihracat\u00e7\u0131s\u0131 arac\u0131l\u0131\u011f\u0131yla metrik toplar, \u00f6zelle\u015ftirilebilir paneller<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Nas\u0131l etkile\u015firler:<\/strong> Caddy, 443 ve 853 portlar\u0131nda dinler, DoH\/DoT isteklerini Technitium’a y\u00f6nlendirir, Technitium sorgular\u0131 \u00e7\u00f6zer ve g\u00fcnl\u00fc\u011fe kaydeder. Technitium ihracat\u00e7\u0131s\u0131, Prometheus i\u00e7in \/metrics<\/code> sunar; Grafana bunu tarayarak sorgu gecikmesi, hata oranlar\u0131 ve \u00f6nbellek ba\u015far\u0131 oranlar\u0131 g\u00f6steren paneller olu\u015fturur. K\u00fc\u00e7\u00fck bir Caddy eklentisi (dynamic_dns<\/code>) mini-PC’nin kamu IP’si ile d\u0131\u015f DNS kay\u0131tlar\u0131n\u0131 senkronize tutar, b\u00f6ylece ISP adresinizi de\u011fi\u015ftirdi\u011finde bile ev cihazlar\u0131n\u0131z DoH sunucusuna her zaman ula\u015fabilir.<\/p>\n\u00d6rnek:<\/em> <\/p>\nCaddy \u279c (DoH) \u279c Technitium \u279c (\u00e7\u00f6zer) \u279c \u0130nternet\n |\n \u2514\u2500 Prometheus ihracat\u00e7\u0131s\u0131 \u279c Grafana paneli\n<\/code><\/pre>\nNeden \u00d6nemlidir<\/h2>\nGizlilik & G\u00fcvenlik<\/h3>\n\n- \u015eifreli trafik<\/strong>: DoH\/DoT, sorgu i\u00e7eri\u011fini pasif dinleyicilerden gizler.<\/li>\n<\/ul>\n
Operasyonel Bilgiler<\/h3>\n\n- An\u0131nda uyar\u0131lar<\/strong>: Sorgu hatalar\u0131nda aniden art\u0131\u015f, bir yanl\u0131\u015f yap\u0131land\u0131rmay\u0131 ya da bir DDoS giri\u015fimini g\u00f6sterebilir. <\/li>\n
- Tarihi e\u011filimler<\/strong>: Zaman i\u00e7inde \u00f6nbellek hit oranlar\u0131n\u0131 izlemek, TTL\u2019leri h\u0131z ile tazelik aras\u0131nda dengelemek i\u00e7in ayarlaman\u0131za yard\u0131mc\u0131 olur. <\/li>\n
- K\u00f6k neden analizi<\/strong>: Ev otomasyonu ba\u015far\u0131s\u0131z olursa, Grafana paneli hatan\u0131n DNS zaman a\u015f\u0131m\u0131 m\u0131 yoksa yanl\u0131\u015f y\u00f6nlendirilmi\u015f sorgu mu oldu\u011funu ortaya \u00e7\u0131karabilir. <\/li>\n<\/ul>\n
Ger\u00e7ek hayattan \u00f6rnek:<\/em> Daha \u00f6nceki bir kurulumda, ISP\u2019nin BGP duyurular\u0131ndaki ani bir de\u011fi\u015fiklik ev a\u011f\u0131n\u0131n farkl\u0131 bir genel IP almas\u0131na yol a\u00e7t\u0131. Statik DNS kayd\u0131 kullanan ak\u0131ll\u0131 kilidim hata vermeye ba\u015flad\u0131. Caddy\u2019nin dynamic_dns<\/code> eklentisiyle Cloudflare kay\u0131tlar\u0131n\u0131 otomatik olarak g\u00fcncelleyerek kilidi manuel m\u00fcdahale olmadan eri\u015filebilir tutabildik. <\/p>\nGereksinimler<\/h2>\nDonan\u0131m<\/h3>\n\n- Mini\u2011PC<\/strong>: En az 1\u202fGHz \u00e7ift \u00e7ekirdek, 2\u202fGB RAM ve SSD (NVMe h\u0131zl\u0131ysa art\u0131). Raspberry Pi\u202f4 4\u202fGB yeterli olsa da, y\u00fcksek sorgu y\u00fckleri i\u00e7in daha g\u00fc\u00e7l\u00fc bir kenar y\u00f6nlendirici ya da d\u00fc\u015f\u00fck g\u00fc\u00e7 t\u00fcketimli Intel NUC tercih edilir. <\/li>\n
- G\u00fc\u00e7<\/strong>: Kesintisiz g\u00fc\u00e7 kayna\u011f\u0131 (UPS) ya da en az 15\u202fW\u2019l\u0131k adapt\u00f6r, beklenmedik bir g\u00fc\u00e7 kesintisinde ani kapanmay\u0131 \u00f6nlemek i\u00e7in gerekir. <\/li>\n<\/ul>\n
\u0130\u015fletim Sistemi<\/h3>\nUbuntu\u202f22.04 LTS, Debian\u202f12 veya systemd ve apt<\/code> i\u00e7eren herhangi bir yeni da\u011f\u0131t\u0131m.<\/p>\nA\u011f<\/h3>\n\n- Statik IP veya DDNS<\/strong>: En az bir a\u00e7\u0131k IP adresi, bir domaine e\u015flenebilmeli. Dinamik IP ortamlar\u0131 i\u00e7in Cloudflare, DuckDNS veya Caddy’nin
dynamic_dns<\/code> eklentisi gibi bir dinamik DNS sa\u011flay\u0131c\u0131s\u0131 \u015fartt\u0131r.<\/li>\n- Portlar<\/strong>: <\/li>\n
- 443\/TCP, DoH i\u00e7in <\/li>\n
- 853\/TCP, DoT i\u00e7in <\/li>\n
- 443\/TCP, Grafana i\u00e7in (g\u00fcvenlik amac\u0131yla farkl\u0131 bir port se\u00e7ebilirsiniz)<\/li>\n<\/ul>\n
Yaz\u0131l\u0131m Ba\u011f\u0131ml\u0131l\u0131klar\u0131<\/h3>\n\n- Docker (Grafana ve exporter i\u00e7in)<\/li>\n
- systemd (servis y\u00f6netimi)<\/li>\n
- curl, jq (CLI ara\u00e7lar\u0131)<\/li>\n
- caddy (https:\/\/caddyserver.com\/download’dan indirilen)<\/li>\n<\/ul>\n
\u00d6rnek:<\/em>
\nUbuntu 22.04 \u00e7al\u0131\u015fan bir Raspberry Pi\u202f4, Cloudflare domainine doh.example.com<\/code> ba\u011flanm\u0131\u015f, y\u00f6nlendiricide 443 ve 853 portlar\u0131 a\u00e7\u0131k ise, tamamen \u00e7al\u0131\u015f\u0131r durumda bir kurulumdur.<\/p>\nAd\u0131m\u2011Ad\u0131m Uygulama<\/h2>\nA\u015fa\u011f\u0131daki b\u00f6l\u00fcmler, her bile\u015fenin kurulumu, yap\u0131land\u0131r\u0131lmas\u0131 ve entegrasyonu i\u00e7in ad\u0131m ad\u0131m rehberlik eder. Sonundaki betik, bu ad\u0131mlar\u0131n \u00e7o\u011funu otomatikle\u015ftirir, ama her blo\u011fun ne yapt\u0131\u011f\u0131n\u0131 a\u00e7\u0131klayaca\u011f\u0131m, b\u00f6ylece ortam\u0131n\u0131za uyarlayabilirsiniz.<\/p>\n 1. Technitium DNS Sunucusunu Y\u00fckleyin<\/h3>\n\n- En son ikili dosyay\u0131 GitHub’dan indir:
\nbash
\n wget https:\/\/github.com\/TechnitiumSoftware\/DnsServer\/releases\/download\/v5.2.0\/dns-server-linux-amd64.tar.gz<\/code><\/li>\n- A\u00e7\u0131n ve
\/usr\/local\/bin<\/code> konumuna ta\u015f\u0131y\u0131n:
\nbash
\n tar -xzf dns-server-linux-amd64.tar.gz
\n sudo mv dns-server-linux-amd64 \/usr\/local\/bin\/dns-server<\/code><\/li>\n- systemd birimi olu\u015fturun:
\n “`bash
\n cat <<EOF | sudo tee \/etc\/systemd\/system\/dns-server.service
\n [Unit]
\n Description=Technitium DNS Server
\n After=network.target<\/li>\n<\/ol>\n[Service]
\n ExecStart=\/usr\/local\/bin\/dns-server
\n Restart=on-failure
\n User=nobody
\n Group=nogroup
\n Environment=PORT=53
\n TimeoutStartSec=0<\/p>\n [Install]
\n WantedBy=multi-user.target
\n EOF
\n 4. Ba\u015flat\u0131n ve etkinle\u015ftirin:<\/code>bash
\n sudo systemctl daemon-reload
\n sudo systemctl start dns-server
\n sudo systemctl enable dns-server
\n “`<\/p>\n2. DoH\/DoT i\u00e7in Caddy\u2019yi yap\u0131land\u0131r<\/h3>\n\n- \n
Caddy ikili dosyas\u0131n\u0131 ve dynamic_dns<\/code> eklentisini indir:
\n bash
\n curl -Lo caddy.zip https:\/\/caddyserver.com\/api\/download?os=linux&arch=amd64
\n unzip caddy.zip
\n sudo mv caddy \/usr\/local\/bin\/<\/code><\/p>\n<\/li>\n- \n
DoH, DoT ve dinamik DNS deste\u011fiyle bir Caddyfile olu\u015ftur:
\n “`bash
\n cat <<EOF | sudo tee \/etc\/caddy\/Caddyfile
\n doh.example.com {
\n reverse_proxy localhost:53
\n tls internal
\n }<\/p>\n<\/li>\n<\/ol>\n dot.example.com {
\n reverse_proxy localhost:53
\n tls internal
\n }<\/p>\n admin.example.com {
\n reverse_proxy localhost:8080
\n tls internal
\n }<\/p>\n (dynamic) {
\n header X-Forwarded-For {remote}
\n header X-Real-IP {remote}
\n }<\/p>\n dns.example.com {
\n import dynamic
\n reverse_proxy localhost:53
\n tls internal
\n }
\n EOF
\n “`<\/p>\n \n- \n
dynamic_dns<\/code> eklentisini Caddyfile\u2019a ekleyerek veya mod\u00fcl olarak kurarak etkinle\u015ftir. H\u0131zl\u0131 bir test i\u00e7in Caddy ile birlikte gelen yerle\u015fik dynamic_dns<\/code> beti\u011fini kullan:
\n bash
\n curl -Lo dynamic-dns.sh https:\/\/caddyserver.com\/api\/plugins?name=dynamic_dns
\n chmod +x dynamic-dns.sh
\n sudo mv dynamic-dns.sh \/usr\/local\/bin\/<\/code><\/p>\n<\/li>\n- \n
Caddy i\u00e7in bir systemd birimi olu\u015ftur:
\n “`bash
\n cat <<EOF | sudo tee \/etc\/systemd\/system\/caddy.service
\n [Unit]
\n Description=Caddy web server
\n After=network.target<\/p>\n<\/li>\n<\/ol>\n [Service]
\n ExecStart=\/usr\/local\/bin\/caddy run –config \/etc\/caddy\/Caddyfile
\n ExecReload=\/usr\/local\/bin\/caddy reload –config \/etc\/caddy\/Caddyfile
\n ExecStop=\/usr\/local\/bin\/caddy stop
\n Restart=on-failure
\n User=nobody
\n Group=nogroup<\/p>\n [Install]
\n WantedBy=multi-user.target
\n EOF
\n “`<\/p>\n \n- Ba\u015flat ve etkinle\u015ftir:
\n bash
\n sudo systemctl daemon-reload
\n sudo systemctl start caddy
\n sudo systemctl enable caddy<\/code><\/li>\n<\/ol>\n3. Grafana ve Technitium Exporter\u2019\u0131 Kurma<\/h3>\n\n- \n
Docker Compose dosyas\u0131 olu\u015fturun:
\n bash
\n cat <<EOF | sudo tee \/home\/pi\/docker-compose.yml
\n version: '3.7'
\n services:
\n grafana:
\n image: grafana\/grafana:latest
\n container_name: grafana
\n ports:
\n - \"3000:3000\"
\n volumes:
\n - grafana-data:\/var\/lib\/grafana
\n exporter:
\n image: technitium\/dns-exporter:latest
\n container_name: dns-exporter
\n ports:
\n - \"9115:9115\"
\n volumes:
\n grafana-data:
\n EOF<\/code><\/p>\n<\/li>\n- \n
Stack\u2019i ba\u015flat\u0131n:
\n bash
\n cd \/home\/pi
\n docker compose up -d<\/code><\/p>\n<\/li>\n- \n
Grafana\u2019y\u0131 yap\u0131land\u0131r\u0131n:
\n – http:\/\/<mini-pc-ip>:3000<\/code> adresini a\u00e7\u0131n ve varsay\u0131lan admin<\/code>\/admin<\/code> ile giri\u015f yap\u0131n.
\n – Bir Prometheus<\/strong> veri kayna\u011f\u0131 ekleyin ve http:\/\/exporter:9115\/metrics<\/code> adresine i\u015faret etsin.
\n – Grafana Labs\u2019tan \u00f6nceden olu\u015fturulmu\u015f dashboard\u2019u i\u00e7e aktar\u0131n: https:\/\/grafana.com\/grafana\/dashboards\/24555-technitium-dns-exporter\/.
\n\u0130\u00e7e aktar<\/em> \u00f6zelli\u011fini kullan\u0131n ve dashboard ID’sini girin.<\/p>\n<\/li>\n<\/ol>\n4. Dinamik DNS\u2019i Ba\u011flama<\/h3>\nCloudflare kullan\u0131yorsan\u0131z, \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n export CF_API_TOKEN=\"your_cloudflare_api_token\"\n.\/dynamic-dns.sh \\\n --token=\"$CF_API_TOKEN\" \\\n --zone=\"example.com\" \\\n --record=\"doh\" \\\n --subdomain=\"doh\" \\\n --ttl=300\n<\/code><\/pre>\nBu betik, herkese a\u00e7\u0131k IP de\u011fi\u015fti\u011finde doh.example.com<\/code> A kayd\u0131n\u0131 g\u00fcnceller. Token\u2019\u0131 g\u00fcvenli bir yerde saklay\u0131n ve her 5 dakikada bir \u00e7al\u0131\u015facak bir cron i\u015fi kurun.<\/p>\n5. Noktalar\u0131 Do\u011frula<\/h3>\n\n- DoH:
curl -s https:\/\/doh.example.com\/dns-query -H 'accept: application\/dns-json' -d '{\"id\":1,\"opcode\":0,\"questions\":[{\"name\":\"example.com\",\"type\":1}]}' | jq .<\/code><\/li>\n- DoT: Use
dig @dot.example.com example.com +dnssec +short<\/code><\/li>\n- Grafana: Panoya gidin, sorgu say\u0131lar\u0131 ve gecikmenin g\u00fcncellenip g\u00fcncellenmedi\u011fini kontrol edin.<\/li>\n<\/ul>\n
Herhangi bir hizmet ba\u015far\u0131s\u0131z olursa, g\u00fcnl\u00fckleri kontrol edin:<\/p>\n journalctl -u caddy -f\njournalctl -u dns-server -f\ndocker logs grafana\ndocker logs exporter\n<\/code><\/pre>\nSorun Giderme<\/h2>\n\n\n\n| Belirti<\/th>\n | Muhtemel Sebep<\/th>\n | D\u00fczeltme<\/th>\n<\/tr>\n<\/thead>\n | \n\n502 Bad Gateway<\/strong><\/td>\n| Caddy, Technitium\u2019e ula\u015fam\u0131yor (yanl\u0131\u015f port veya firewall)<\/td>\n | Technitium\u2019un 53 portunda dinlenip dinlemedi\u011fini ve ufw<\/code>\/router ACL\u2019lerinin trafi\u011fe izin verip vermedi\u011fini do\u011frulay\u0131n<\/td>\n<\/tr>\n\nTLS handshake failure<\/strong><\/td>\n| Caddy\u2019de uygun sertifika eksik veya DNS kayd\u0131 yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f<\/td>\n | caddy validate<\/code> ile konfig\u00fcrasyonu kontrol edin; alan ad\u0131n\u0131n do\u011fru IP\u2019ye i\u015faret etti\u011finden emin olun<\/td>\n<\/tr>\n\nGrafana veri kayna\u011f\u0131 hatas\u0131<\/strong><\/td>\nExporter, 9115\u2019te \/metrics<\/code> sunmuyorsa<\/td>\ncurl http:\/\/exporter:9115\/metrics<\/code> \u00e7al\u0131\u015ft\u0131r\u0131n; bo\u015fsa, exporter g\u00fcnl\u00fcklerini kontrol edin<\/td>\n<\/tr>\n\nDNS sorgu zaman a\u015f\u0131mlar\u0131<\/strong><\/td>\n| ISP UDP 53\u2019\u00fc engelliyor veya firewall paketleri d\u00fc\u015f\u00fcr\u00fcyor<\/td>\n | DoH\/DoT\u2019yi 443\/853 portuna ge\u00e7ir; bu portlar\u0131n a\u00e7\u0131k oldu\u011fundan emin olun<\/td>\n<\/tr>\n | \n\u00d6nbellek ka\u00e7\u0131rma art\u0131\u015f\u0131<\/strong><\/td>\n| Y\u00fcksek TTL\u2019ler eski veri yarat\u0131yor<\/td>\n | Caddyfile\u2019da cache TTL\u2019yi azalt\u0131n: cache default 300<\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\nGenel hata<\/strong>: Caddyfile\u2019\u0131 d\u00fczenlerken --reload<\/code> bayra\u011f\u0131n\u0131 eklemeyi unutmak. Caddy otomatik yeniden ba\u015flar, ama k\u0131sa bir kesinti g\u00f6rebilirsiniz. Bunun \u00f6n\u00fcne ge\u00e7mek i\u00e7in caddy reload --config \/etc\/caddy\/Caddyfile<\/code> kullan\u0131n.<\/p>\nGeri Alma stratejisi:<\/strong>
\n– Caddy i\u00e7in: caddy stop && caddy run --config \/etc\/caddy\/Caddyfile.old<\/code>
\n– Technitium i\u00e7in: \/etc\/dns-server.conf<\/code> dosyas\u0131n\u0131 yedekten geri y\u00fckleyin
\n– Grafana i\u00e7in: Eski JSON\u2019\u0131 kullanarak panoyu yeniden i\u00e7e aktar\u0131n<\/p>\nOptimizasyon<\/h2>\n\n\n\n| Alan<\/th>\n | Teknik<\/th>\n | Fayda<\/th>\n<\/tr>\n<\/thead>\n | \n\nCaddy \u00f6nbelle\u011fi<\/strong><\/td>\ncache default 300<\/code><\/td>\n| Yayg\u0131n sorgular i\u00e7in yan\u2011\u00e7evrim say\u0131s\u0131n\u0131 azalt\u0131r<\/td>\n<\/tr>\n | \nTechnitium \u00f6l\u00e7eklendirme<\/strong><\/td>\nOkunur bir yedek kurun ve rsync<\/code> ile yap\u0131land\u0131rmalar\u0131 senkronize edin<\/td>\n| Yo\u011fun okuma trafi\u011fini hafifletir, dayan\u0131kl\u0131l\u0131\u011f\u0131 art\u0131r\u0131r<\/td>\n<\/tr>\n | \nGrafana uyar\u0131lar\u0131<\/strong><\/td>\nE\u015fik: query_latency > 200ms<\/code><\/td>\n| Gecikme artarsa an\u0131nda bildirim al\u0131rs\u0131n\u0131z<\/td>\n<\/tr>\n | \nYedeklemeler<\/strong><\/td>\ncron.daily \/usr\/local\/bin\/backup.sh<\/code><\/td>\n| Yanl\u0131\u015f yap\u0131land\u0131rma de\u011fi\u015fikliklerinden sonra h\u0131zl\u0131ca geri y\u00fckleme<\/td>\n<\/tr>\n | \nG\u00fc\u00e7<\/strong><\/td>\n| En az 2 saat \u00e7al\u0131\u015fma s\u00fcresine sahip bir UPS kullan\u0131n<\/td>\n | Yap\u0131land\u0131rma dosyalar\u0131n\u0131 bozan ani kapanmalar\u0131 \u00f6nler<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Pratik bir operat\u00f6r notu: Son 30 g\u00fcn\u00fcn Grafana anl\u0131k g\u00f6r\u00fcnt\u00fclerini i\u00e7eren k\u00fc\u00e7\u00fck bir USB s\u00fcr\u00fcc\u00fcs\u00fc tutuyorum. Katalitik bir hata meydana geldi\u011finde, pano d\u00fczenini ve veri kayna\u011f\u0131 ayarlar\u0131n\u0131 5 dakikadan k\u0131sa s\u00fcrede geri y\u00fckleyebilirim.<\/p>\n SSS<\/h2>\nS: Caddy, Technitium DNS ve Grafana ev a\u011f\u0131 i\u00e7in ne zaman do\u011fru bir se\u00e7imdir?<\/strong>
\nA:<\/strong> \u015eifreli DNS’e ihtiya\u00e7 duydu\u011funuzda, ISP manip\u00fclasyonunu \u00f6nlemek istedi\u011finizde ve sorgu desenlerine g\u00f6r\u00fcn\u00fcrl\u00fck istedi\u011finizde. Ak\u0131ll\u0131 evler, VoIP veya g\u00fcvenilir isim \u00e7\u00f6z\u00fcmlemesi gerektiren herhangi bir hizmet i\u00e7in idealdir.<\/p>\nS: Bu y\u0131\u011f\u0131n\u0131 kurarken en yayg\u0131n hata nedir?<\/strong>
\nA:<\/strong> DoH ve DoT i\u00e7in ayn\u0131 alan ad\u0131n\u0131 a\u00e7may\u0131 unutmak veya Caddy’yi yanl\u0131\u015f arka u\u00e7 ba\u011flant\u0131 noktas\u0131yla yap\u0131land\u0131rmak. \u00dcretime ge\u00e7meden \u00f6nce her zaman curl<\/code> veya dig<\/code> ile test edin.<\/p>\nS: \u0130zleme servisini kurduktan sonra neyi do\u011frulamal\u0131s\u0131n\u0131z?<\/strong>
\nA:<\/strong> Grafana’n\u0131n canl\u0131 sorgu say\u0131mlar\u0131n\u0131 g\u00f6sterdi\u011finden, Prometheus’un \/metrics<\/code>‘i kaz\u0131d\u0131\u011f\u0131ndan ve sim\u00fcle edilen art\u0131\u015flar i\u00e7in uyar\u0131lar\u0131n tetiklendi\u011finden emin olun. Dinamik DNS g\u00fcncellemesini, test ortam\u0131nda genel IP’yi manuel olarak de\u011fi\u015ftirerek do\u011frulay\u0131n.<\/p>\nS: Caddy y\u00f6netim aray\u00fcz\u00fcn\u00fc nas\u0131l g\u00fcvence alt\u0131na al\u0131r\u0131m?<\/strong>
\nA:<\/strong> | | | | | | | | | | | | | | | | | | | |
|