Abstract: Described herein are systems, methods, and software that manage the communication between computing elements outside a private network and computing elements inside a private network. In one example, a relay computing element receives a first packet from a first computer outside a private network. The relay computing element determines whether the first packet is permitted for a second computer inside the private network. If the first packet is permitted, the relay computing element generates a second packet with the first packet in the payload and encapsulates the second packet in a third packet. Once encapsulated, the third packet is forwarded to the second computer.

Abstract: Described herein are systems, methods, and software to direct communications for a private network using advertised encryption key information. In one implementation, a first computing element identifies an encrypted communication from a second computing element and identifies a destination computing element from a plurality of destination computing elements based on an application of encryption keys to the encrypted communication. The first computing element further forwards the encrypted communication to the destination computing element.

Abstract: The technology described herein manages nameserver rules for domain name system (DNS) requests across multiple hardware and/or software configurations. In one implementation, a method includes receiving a domain name system (DNS) configuration from a coordination service at a computing element. The DNS configuration comprises rules associating at least one domain name with a nameserver of a plurality of nameservers. The method further includes dividing the rules into operating system rules and DNS application rules depending on one or more characteristics of the computing element. The method also includes configuring an operating system of the computing element to implement the operating system rules and configuring a DNS application executing on the computing element to implement the DNS application rules. Additionally, the method includes applying the operating system rules in the operating system and the DNS application rules in the DNS application.

Abstract: Described herein are systems, methods, and software to manage private networks for computing elements. In one example, a coordination service may obtain a request from a computing element to join a private network. In response to the request, the coordination service may identify communication rules associated with the computing element based on credential and device information in the request and may identify communication information to permit the computing element to communicate with one or more other computing elements in the private network. Once identified, the communication information may be communicated to the computing element.

Abstract: Described herein are systems, methods, and software to manage domain name system (DNS) requests in a computing system. In one example, a computing system identifies a DNS request from an application on the computing system and, in response to the request, identifies a DNS server to support the DNS request from a plurality of DNS servers based on a domain in the DNS request. The computing system further forwards the DNS request to the DNS server, wherein the DNS server is located on the computing system, obtains a response to the DNS request from the DNS server, wherein the response indicates a private internet protocol (IP) address in a private network subnet, and provides the response to the application.

Abstract: Described herein are systems, methods, and software to manage the approval of new computing elements for a private network. In one implementation, an administrator computing device in a private network is configured to receive a notification for a computing element to join the private network, wherein the notification includes a public key for the computing element and supplemental information for the computing element. The administrator computing device further identifies input indicating that the computing element is approved for the private network and, in response to the input, signs at least the public key. Once signed, the administrator computing device distributes the signed public key to one or more other computing elements in the private network.

Abstract: Described herein are systems, methods, and software to manage nameservers for domain name system (DNS) requests. In one implementation, a computing element receives a domain name system (DNS) configuration from a coordination service that includes a plurality of rules. The computing element identifies an operating system configuration on the computing element and maps each of the rules to local rule implementations on the computing element based on the operating system configuration. Once the local rule implementations are identified, the computing element applies the local rule implementations on the computing element.

Abstract: Described herein are systems, methods, and software to manage private networks for computing elements. In one example, a computing element may obtain credential information associated with a user and generate a public-private key pair for the computing element. The computing element may further communicate the public key from the pair with metadata to a coordination service to register the computing element at the coordination service. Once registered, the computing element may receive communication information associated with one or more other computing elements that permit the computing element to communicate with the other computing elements.

Abstract: Described herein are systems, methods, and software to manage private networks for computing elements. In one example, a computing element may obtain credential information associated with a user and generate a public-private key pair for the computing element. The computing element may further communicate the public key from the pair with metadata to a coordination service to register the computing element at the coordination service. Once registered, the computing element may receive communication information associated with one or more other computing elements that permit the computing element to communicate with the other computing elements.