ILB ASE behind App Gateway, Redis Cache in VNet and Service End Points for SQL Azure DB, Azure Storage and Azure Key Vault

This template deploys:

• A VNet with 4 subnets: ASE Subnet, WAF Subnet, Cache Subnet DMZ Subnet
• ILB App Service Environment in the ASE subnet - NO public IP
• App Gateway in the WAF Subnet with public IP and ASE in the backend pool
• An App Service Plan
• A Web Application in the ASP with code deployed from a github repo
• VisualStudio VM for RDP in the DMZ Subnet
• Redis Cache in Cache Subnet
• SQL Azure DB with Service Endpoints to ASE Subnet
• Storage Account with Service Endpoints to Cache Subnet
• Azure Key Vault with Service Endpoint to ASE Subnet

The ASE IP is in the backend pool of App Gateway. No VNet DNS needed since the requests come from outside. To make it work you need to change DNS so it points to the App Gateway public IP.