You are developing a noise reduction application with multiple Linux machines on Compute Engine. These VMs lack public IPs, yet you require SSH access over the internet without network configuration changes. Additionally, any new VMs added should not need extra setup. What is the best approach?