Multi-tier Azure network architecture with private endpoints isolating frontend, backend, and database layers across dedicated subnets within a VNet. Traffic flows from users through Application Gateway to frontend load balancer and VMs, then to backend load balancer and compute, finally reaching Azure SQL Database via private endpoints. Private Link connections ensure sensitive data never traverses the public internet, meeting zero-trust and compliance requirements. Fork this diagram on Diagrams.so to customize subnet ranges, VM SKUs, or add additional security controls like Azure Firewall or DDoS Protection.