Authorizing communications between computing nodes

A non-transitory computer-readable medium whose contents configure a computing system to perform a method, the method comprising:

• receiving a communication sent by a sending node to a destination node via one or more networks, the communication indicating a source network address for the sending node for use in responding to the communication over the one or more networks, the indicated source address including a partial source network address for the sending node that corresponds to a source location of one or more nodes within the one or more networks and including a representation of a virtual network address, wherein the sending node is one of a plurality of nodes of a virtual network, and wherein the virtual network address is specified in accordance with the virtual network and is not based on the one or more networks;
• determining, by the configured computing system, that the communication is authorized based at least in part on the indicated source address for the communication, the determining including:
• identifying the one or more nodes to which the source location of the partial source network address corresponds;
• determining one of the plurality of nodes to which the virtual network address represented in the indicated source address is assigned;
• and
• determining that the determined one node is one of the identified one or more nodes;
• and
• facilitating providing of the communication to the destination node based at least in part on the determining that the communication is authorized.

A system configured to authorize communications between computing nodes, comprising:

• one or more memories of one or more computing systems;
• and
• a communication manager module that is associated with a group of one or more computing nodes and is configured to manage communications for the group, by, after a sending computing node that is not a member of the group initiates a communication over one or more networks to a destination computing node that is a member of the group:
• determining whether the initiated communication is authorized based at least in part on information about the sending computing node that is included with the initiated communication, the determining including
• identifying one or more computing nodes that correspond to a source location indicated within the initiated communication, the indicated source location identifying a portion of the one or more networks that is a source of the initiated communication;
• determining a computing node to which a virtual network address in the included information is assigned, wherein the determined computing node is one of a plurality of computing nodes of a virtual network, and wherein the virtual network address is specified in accordance with the virtual network and is not based on the one or more networks;
• verifying that the determined computing node corresponds to at least one of the identified one or more computing nodes;
• and
• facilitating providing of the initiated communication to the destination computing node if the initiated communication is determined to be authorized.