Salt Master-Slave
With Salt, you can control hundreds of computers. You write the infrastructure as code, and the computers configure themselves.
In this brief article, you install Salt master-slave architecture. The slave computers phone home, so only master needs to be in a known address. Yes, you can reach the slave computers even if they are in an unknown address, behind a firewall and behind NAT.