Example Reference Network Topologies for API Management in private mode.

andyc383838 Hello Andy, thanks for your valuable comment. To be fair an honest, there's been a lot of debate on that. My opinionated take is to put in on the Hub as it's easier to manage routing according to this article which is one of my fav (Application Gateway and Firewall). I would only create separate App GW per spoke if you hit into App GW specific limits, like counts of listeners, routing rules and so on. If you don't, I would just put your back end pools on the spokes and manage the App GW on the hub.