How to organize the installation and updating of software for linux servers without direct access to the Internet?

Question

linux

There are dozens of servers with centos (mostly) and debian-like systems. How can you ensure the installation and updating of software via yum \ apt in the absence of direct access to the Internet from servers (the Internet is generally available, but direct access to it is closed to these servers specifically)? Repositories are used different, both basic from distributions, and separate software (rsyslog, mysql, etc. with the ability to add).
At the moment, I see two ways - to raise a local mirror for each repository within the network and update the rest of the servers from it. Or raise a proxy that yum \ apt can use to work.

Answer 1

There is a specialized caching proxy for apt: that's what it's called, apt-proxy.
There should be something similar for yum too.

Answer 2

I am for local turnips. This will save you traffic. True, quite a lot of disk space is required.

Answer 3

Proxies are an easier way
Local turnips are more reliable