[{"id":347,"title":"Ludus: HomeLab ve CyberRange \u0130\u00e7in G\u00fc\u00e7l\u00fc Altyap\u0131 \u00c7\u00f6z\u00fcm\u00fc","content":"<h2>Ludus Nedir?<\/h2>\n<p>Ludus, g&uuml;venlik profesyonelleri ve sistem y&ouml;neticileri i&ccedil;in tasarlanm\u0131\u015f, <strong>tek komutla karma\u015f\u0131k test ortamlar\u0131<\/strong> olu\u015fturabilen a&ccedil;\u0131k kaynakl\u0131 bir altyap\u0131 otomasyon platformudur. &Ouml;zellikle HomeLab, CyberRange, penetrasyon testi ve e\u011fitim ortamlar\u0131 i&ccedil;in idealdir.<\/p>\n<p><iframe src=\"https:\/\/www.youtube.com\/embed\/d5pdiVSkAyI\" width=\"560\" height=\"314\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<h2>Temel &Ouml;zellikler ve Yetenekler<\/h2>\n<h3>1. <strong>A\u011f Y&ouml;netimi<\/strong><\/h3>\n<pre><code class=\"language-yaml\"># &Ouml;rnek VLAN yap\u0131land\u0131rmas\u0131\nnetworks:\n  - name: \"DMZ_Network\"\n    vlan_id: 10\n    subnet: \"10.10.10.0\/24\"\n    gateway: \"10.10.10.1\"\n    \n  - name: \"Internal_Network\"\n    vlan_id: 20\n    subnet: \"192.168.1.0\/24\"\n    gateway: \"192.168.1.1\"\n    \n  - name: \"Management\"\n    vlan_id: 30\n    subnet: \"172.16.0.0\/24\"\n    gateway: \"172.16.0.1\"\n<\/code><\/pre>\n<h3>2. <strong>VM Da\u011f\u0131t\u0131m Kapasitesi<\/strong><\/h3>\n<ul>\n<li>Host makinenin kaynaklar\u0131na ba\u011fl\u0131 olarak s\u0131n\u0131rs\u0131z VM<\/li>\n<li>Otomatik kaynak y&ouml;netimi<\/li>\n<li>Dinamik bellek ve CPU tahsisi<\/li>\n<\/ul>\n<h3>3. <strong>G&uuml;venlik Duvar\u0131 Kurallar\u0131<\/strong><\/h3>\n<pre><code class=\"language-bash\"># &Ouml;rnek firewall kural\u0131 ekleme\nludus firewall add --source 10.10.10.0\/24 \\\n                   --destination 192.168.1.0\/24 \\\n                   --port 443 \\\n                   --protocol tcp \\\n                   --action allow\n<\/code><\/pre>\n<h2>Kurulum ve Ba\u015flang\u0131&ccedil;<\/h2>\n<h3>Sistem Gereksinimleri<\/h3>\n<pre><code class=\"language-bash\"># Minimum Gereksinimler\n- CPU: 8+ Core\n- RAM: 32GB+ (64GB &ouml;nerilir)\n- Disk: 500GB+ SSD\n- OS: Ubuntu 20.04\/22.04 veya Debian 11\n- Virtualization: KVM\/QEMU deste\u011fi\n<\/code><\/pre>\n<h3>H\u0131zl\u0131 Kurulum<\/h3>\n<pre><code class=\"language-bash\"># 1. Ludus'u indirin ve kurun\ncurl -fsSL https:\/\/ludus.cloud\/install.sh | sudo bash\n\n# 2. Ba\u015flang\u0131&ccedil; yap\u0131land\u0131rmas\u0131\nludus init\n\n# 3. \u0130lk range'i olu\u015fturun\nludus range create --name \"test-lab\" \\\n                   --config .\/lab-config.yml\n\n# 4. VM'leri ba\u015flat\u0131n\nludus range deploy test-lab\n<\/code><\/pre>\n<h2>Kullan\u0131m Senaryolar\u0131<\/h2>\n<h3>1. <strong>Active Directory Test Ortam\u0131<\/strong><\/h3>\n<pre><code class=\"language-yaml\"># ad-lab.yml\nvms:\n  - name: DC01\n    os: windows-server-2019\n    role: domain-controller\n    ip: 192.168.1.10\n    ansible_roles:\n      - active_directory\n      - certificate_services\n      \n  - name: CLIENT01\n    os: windows-10\n    role: domain-member\n    ip: 192.168.1.100\n    ansible_roles:\n      - domain_join\n      - corporate_apps\n<\/code><\/pre>\n<h3>2. <strong>Red Team Altyap\u0131s\u0131<\/strong><\/h3>\n<pre><code class=\"language-yaml\"># redteam-infra.yml\nvms:\n  - name: C2-Server\n    os: kali-linux\n    ip: 10.10.10.5\n    ansible_roles:\n      - cobalt_strike\n      - empire\n      - metasploit\n      \n  - name: Redirector\n    os: ubuntu-22.04\n    ip: 10.10.10.10\n    ansible_roles:\n      - nginx_redirector\n      - iptables_rules\n<\/code><\/pre>\n<h3>3. <strong>SIEM\/SOC Test Ortam\u0131<\/strong><\/h3>\n<pre><code class=\"language-yaml\"># soc-lab.yml\nvms:\n  - name: SIEM-Server\n    os: ubuntu-22.04\n    ip: 172.16.0.10\n    resources:\n      cpu: 8\n      ram: 16384\n    ansible_roles:\n      - elasticsearch\n      - kibana\n      - logstash\n      \n  - name: Log-Collector\n    os: ubuntu-22.04\n    ip: 172.16.0.20\n    ansible_roles:\n      - beats\n      - syslog_ng\n<\/code><\/pre>\n<h2>Geli\u015fmi\u015f &Ouml;zellikler<\/h2>\n<h3>Ansible Entegrasyonu<\/h3>\n<pre><code class=\"language-bash\"># Ansible role ekleme\nludus ansible add-role --vm DC01 \\\n                      --role .\/roles\/vulnerable_ad\n\n# T&uuml;m VM'lere rol uygulama\nludus ansible apply --range test-lab\n<\/code><\/pre>\n<h3>DNS Y&ouml;netimi<\/h3>\n<pre><code class=\"language-bash\"># &Ouml;zel DNS kayd\u0131 ekleme\nludus dns add --domain \"evil.corp\" \\\n              --ip 192.168.1.100 \\\n              --type A\n\n# Wildcard DNS\nludus dns add --domain \"*.phishing.local\" \\\n              --ip 10.10.10.50 \\\n              --type A\n<\/code><\/pre>\n<h3>Snapshot ve Backup<\/h3>\n<pre><code class=\"language-bash\"># Snapshot olu\u015fturma\nludus snapshot create --range test-lab \\\n                     --name \"before-pentest\"\n\n# Geri y&uuml;kleme\nludus snapshot restore --range test-lab \\\n                      --name \"before-pentest\"\n<\/code><\/pre>\n<h2>Performans Optimizasyonu<\/h2>\n<h3>Resource Pool Y&ouml;netimi<\/h3>\n<pre><code class=\"language-yaml\"># resource-pools.yml\npools:\n  high_performance:\n    cpu_overcommit: 1.5\n    ram_overcommit: 1.2\n    storage: ssd_pool\n    \n  standard:\n    cpu_overcommit: 2.0\n    ram_overcommit: 1.5\n    storage: hybrid_pool\n<\/code><\/pre>\n<h3>Network Optimization<\/h3>\n<pre><code class=\"language-bash\"># Jumbo frames etkinle\u015ftirme\nludus network optimize --mtu 9000 \\\n                      --offload enable\n<\/code><\/pre>\n<h2>G&uuml;venlik En \u0130yi Uygulamalar\u0131<\/h2>\n<h3>1. <strong>\u0130zolasyon<\/strong><\/h3>\n<pre><code class=\"language-bash\"># Range izolasyonu\nludus range isolate --name sensitive-lab \\\n                   --level strict\n<\/code><\/pre>\n<h3>2. <strong>Eri\u015fim Kontrol&uuml;<\/strong><\/h3>\n<pre><code class=\"language-bash\"># Kullan\u0131c\u0131 ekleme\nludus user add --username pentester \\\n               --role operator \\\n               --range test-lab\n\n# SSH key ekleme\nludus ssh add-key --user pentester \\\n                  --key ~\/.ssh\/id_rsa.pub\n<\/code><\/pre>\n<h2>\u0130pu&ccedil;lar\u0131 ve P&uuml;f Noktalar\u0131<\/h2>\n<h3>H\u0131zl\u0131 Template Olu\u015fturma<\/h3>\n<pre><code class=\"language-bash\"># Mevcut ortamdan template\nludus template create --from-range test-lab \\\n                     --name \"ad-vulnerable-v1\"\n\n# Template'den yeni range\nludus range create --from-template ad-vulnerable-v1 \\\n                  --name \"student-lab-01\"\n<\/code><\/pre>\n<h3>Monitoring ve Logging<\/h3>\n<pre><code class=\"language-bash\"># Prometheus metrics etkinle\u015ftirme\nludus monitoring enable --type prometheus \\\n                       --port 9090\n\n# Log toplama\nludus logs collect --range test-lab \\\n                   --output .\/logs\/\n<\/code><\/pre>\n<h2>Alternatiflerle Kar\u015f\u0131la\u015ft\u0131rma<\/h2>\n<table>\n<thead>\n<tr>\n<th><strong>&Ouml;zellik<\/strong><\/th>\n<th><strong>Ludus<\/strong><\/th>\n<th><strong>Vagrant<\/strong><\/th>\n<th><strong>Terraform<\/strong><\/th>\n<th><strong>Proxmox<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Kurulum Kolayl\u0131\u011f\u0131<\/strong><\/td>\n<td>\u2b50\u2b50\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50<\/td>\n<\/tr>\n<tr>\n<td><strong>A\u011f Y&ouml;netimi<\/strong><\/td>\n<td>\u2b50\u2b50\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50\u2b50<\/td>\n<\/tr>\n<tr>\n<td><strong>Otomasyon<\/strong><\/td>\n<td>\u2b50\u2b50\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50<\/td>\n<\/tr>\n<tr>\n<td><strong>GUI<\/strong><\/td>\n<td>\u2b50\u2b50<\/td>\n<td>\u2b50<\/td>\n<td>\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50\u2b50\u2b50<\/td>\n<\/tr>\n<tr>\n<td><strong>CyberRange Odakl\u0131<\/strong><\/td>\n<td>\u2b50\u2b50\u2b50\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50<\/td>\n<td>\u2b50\u2b50\u2b50<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>&Ouml;rnek Senaryolar<\/h2>\n<h3>Ransomware Sim&uuml;lasyonu<\/h3>\n<pre><code class=\"language-yaml\"># ransomware-sim.yml\nscenario:\n  name: \"WannaCry Simulation\"\n  stages:\n    - deploy_vulnerable_systems\n    - setup_network_shares\n    - deploy_ransomware_simulator\n    - monitor_propagation\n    - collect_iocs\n<\/code><\/pre>\n<h3>Zero Trust Lab<\/h3>\n<pre><code class=\"language-yaml\"># zero-trust.yml\narchitecture:\n  - micro_segmentation: enabled\n  - identity_verification: continuous\n  - encryption: end_to_end\n  - monitoring: comprehensive\n<\/code><\/pre>\n<h2>&nbsp;<\/h2>\n<p>Ludus, &ouml;zellikle g&uuml;venlik profesyonelleri i&ccedil;in tasarlanm\u0131\u015f, <strong>kullan\u0131m kolayl\u0131\u011f\u0131 ve g&uuml;&ccedil;l&uuml; &ouml;zellikler<\/strong> sunan m&uuml;kemmel bir HomeLab &ccedil;&ouml;z&uuml;m&uuml;d&uuml;r. Tek komutla karma\u015f\u0131k ortamlar kurabilme yetene\u011fi, onu rakiplerinden ay\u0131ran en &ouml;nemli &ouml;zelli\u011fidir.<\/p>\n<h3>Kimler \u0130&ccedil;in \u0130deal?<\/h3>\n<ul>\n<li><strong>Red Team<\/strong> uzmanlar\u0131<\/li>\n<li><strong>Blue Team<\/strong> analistleri<\/li>\n<li><strong>E\u011fitmenler<\/strong> ve &ouml;\u011frenciler<\/li>\n<li><strong>G&uuml;venlik ara\u015ft\u0131rmac\u0131lar\u0131<\/strong><\/li>\n<li><strong>HomeLab<\/strong> merakl\u0131lar\u0131<\/li>\n<\/ul>\n<p><strong>Tavsiye<\/strong>: E\u011fer d&uuml;zenli olarak test ortamlar\u0131 kuruyorsan\u0131z veya g&uuml;venlik e\u011fitimleri veriyorsan\u0131z, Ludus'u mutlaka denemelisiniz. Zaman kazand\u0131rmas\u0131 ve otomasyon yetenekleri, yat\u0131r\u0131m\u0131n\u0131z\u0131 k\u0131sa s&uuml;rede amorti edecektir.<\/p>","excerpt":"Ludus, g\u00fcvenlik profesyonelleri ve sistem y\u00f6neticileri i\u00e7in tasarlanm\u0131\u015f, tek komutla karma\u015f\u0131k test ortamlar\u0131 olu\u015fturabilen a\u00e7\u0131k kaynakl\u0131 bir altyap\u0131 otomasyon platformudur. \u00d6zellikle HomeLab, CyberRange, penetrasyon testi ve e\u011fitim ortamlar\u0131 i\u00e7in idealdir.","created_at":"2025-11-26 17:22:14","updated_at":"2026-09-08 00:15:27","category_id":7,"view_count":618,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-11-26 14:22:00","featured_image":"c95a000a341afe8fdd956f636840605f.png","slug":"ludus-homelab-ve-cyberrange-icin-guclu-altyapi-cozumu","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"}]