Establishing secure remote access to private computer networks

A non-transitory computer-readable medium having stored contents that cause one or more computing systems of a network service to:

• provide, by the one or more computing systems, a first computer network for a first client of the network service based on information specified by the first client, wherein the providing of the first computer network for the first client includes:
• selecting multiple computing nodes from a plurality of computing nodes provided by the network service for use by remote clients;
• provisioning the multiple computing nodes for use in the first computer network for the client;
• and
• configuring one or more hardware devices of the network service that provide one or more of the multiple computing nodes to emulate functionality of a virtual router device of the first computer network that is indicated in the information specified by the first client and to route communications between the multiple computing nodes according to a network topology specified for the first computer network by the first client;
• receive, by the one or more computing systems and via an interface of the network service for use by remote clients to manage computer networks provided by the network service for the remote clients, a request to configure remote access from a first remote location to the first computer network provided by the network service for the first client;
• and
• respond, by the one or more computing systems, to the received request by providing configuration information that enables one or more devices at the first remote location to participate in the remote access to the first computer network from the first remote location.

A system comprising:

• one or more hardware processors of one or more computing systems;
• and
• one or more memories with stored instructions that, when executed by at least one of the one or more hardware processors, cause the one or more computing systems to implement functionality for a network service that provides computer networks to remote clients, the implementing of the functionality including:
• providing a first computer network for a first client of the network service based on information specified by the first client, wherein the providing of the first computer network for the first client includes:
• selecting multiple computing nodes from a plurality of computing nodes provided by the network service for use by remote clients;
• provisioning the multiple computing nodes for use in the first computer network for the client;
• and
• configuring one or more hardware devices of the network service that provide one or more of the multiple computing nodes to route communications according to a network topology of the first computer network that is indicated in the information specified by the first client;
• receiving, from the first client via an interface of the network service, a request for a secure connection between a first remote location and the first computer network provided by the network service for the first client;
• and
• responding to the received request by providing configuration information that enables one or more devices at the first remote location to participate in the secure connection.