A pull-through cache and policy-aware proxy for Debian/Ubuntu repositories - faster CI builds, isolated networks, fewer mirror hiccups.