Set up a router/firewall for both testng and production

[moozer]

If we decide to use vSRX, this means creating a new role
If we decide on OpenBSD, @moozer has a router role for that.