As a Cloud storage provider company, how can you connect to workloads in a dedicated server room that can only be accessed from within a private network, from Compute Engine instances within a Google Cloud Platform project? Which two approaches should be taken to meet these requirements?