Access Azure Application Gateway on Private Network

Azure Application Gateway now has some new private network enhancements.

Public preview: Private Application Gateway v2

Private Deployment (Preview)

Now you have an option to deploy Application Gateway without public IP frontend. (It was not possible in the past.)

Private Application Gateway deployment (preview)

Public Deployment with private endpoint (Preview)

Also, you have the option to configure Application Gate for private connection with private link. In this case you will have Public IP frontend, but you can have private endpoint to access frontend on private virtual network.
Azure Application Gateway Private Link (preview)

This could be good when you have public and private applications also in the same Application Gateway setup.

Configure Azure Application Gateway Private Link (preview)

New Network controls

• Enhanced control over Network Securtiy Groups
• Enhanced control over Route Table rules

Benefits

Using Azure Application Gateway with Private Link is beneficial for several reasons:

1. Enhanced security: Private Link provides secure access to your web applications through a private endpoint in your virtual network, reducing the exposure of your applications to the public internet. This minimizes the attack surface and protects your applications from potential threats.
2. Isolation: By using Private Link, your applications are isolated from the public internet, ensuring that traffic remains within your virtual network and the Microsoft backbone network. This isolation helps maintain compliance with regulatory requirements and organizational policies.
3. Improved performance: By keeping traffic within your virtual network and the Microsoft backbone network, Private Link helps optimize performance and minimize latency. This results in a better user experience for your web applications.

In summary, using Azure Application Gateway with Private Link offers a secure, simplified, and efficient solution for accessing web applications, making it an attractive option for organizations seeking to protect their applications and maintain compliance with regulatory requirements.

You can read more about this.

Configure Azure Application Gateway Private Link — Microsoft Community Hub