All network communications within a VNet take place only in Azure. The most common architectural pattern places each application tier in its own subnet — perhaps one subnet for the web front‐end tier, ...