Multi-layered Azure network infrastructure for a B2B travel marketplace spanning production and DR regions with segmented VNets for internet, API, compute, data, and integration workloads. Traffic flows through Azure Front Door Premium and WAF, routing to App Gateway in the Internet VNet, then to API Management and internal load balancers across isolated application and data subnets. Identity is centralized via Microsoft Entra ID and Azure AD B2C with SSO and MFA, while data services including PostgreSQL, Cosmos DB, and Synapse Analytics remain in a private data plane protected by NSGs and Private Endpoints. This architecture demonstrates zero-trust network segmentation, DDoS protection, and controlled outbound integration via Azure Firewall and ExpressRoute, critical for SaaS platforms handling sensitive travel and payment data. Fork and customize this diagram on Diagrams.so to adapt subnet ranges, add additional regions, or modify failover routing policies for your own multi-tenant marketplace.