Remote access rarely starts as a complicated problem. You have a server somewhere, you need to reach it, and a VPN seems like the obvious answer. Then the number of machines grows, networks change, and suddenly the simple solution has accumulated enough configuration to deserve its own documentation.