1. CentOS Infra issue/request

Please file this generic issue template or feel free to select another one in the list above (Description / Choose a template)

1. 1. Issue Type

• [] Issue - problem with something that was working
• [] Feature Request - something you'd like us to add/modify/change
• [x] Task - mostly used by CentOS Infra team for day-to-day operations or bigger plans

1. 1. Description

While almost all CI resources are now hosted in AWS (like duffy.ci.centos.org , ephemeral x86_64 and aarch64 ec2 machines, and also openshift cluster), we still have a tunnel to migrate to rdu3, and then add back ppc64le (on-prem only) feature in duffy api service. (see #1708 )

We have now a new isolated vlan/ip range in rdu3 for that but it's not (yet) configured/tested so this task will reflect that needed work.

Plan:

• setup at least one infra VM in that new vlan that can be used as wireguard tunnel
• setup unbound caching to forward to route53 resolvers (for `ci.centos.org` and `pool.ci.centos.org` zones
• verify with one machine there that we can reach in both directions needed api endpoints and ec2 machines through tunnel

Once all done, we'll be able to work on #1708