Cloud migration path is working
Front Door → Azure Firewall DNAT → private Traefik → NGINX