title: Can I control inbound and outbound traffic to App Services on a VNET?
body: <p>Everything I have found thus far is pointing me to use <a href="https://docs.microsoft.com/en-us/azure/app-service-web/app-service-app-service-environment-control-inbound-traffic" rel="nofollow noreferrer">App Service Environment</a> to control traffic to my applications.</p>
  
  <p>Basically I am trying to set up 2 subnets within my VNET, the front end subnet will contain an App Service that will be internet accessible over 80/443. The backend subnet will contain an App Service that will not be accessible to internet traffic over 80/443 but should allow traffic from the front end subnet over 80/443.</p>
  
  <p>Is this possible without using the App Service Environment, if so what infrastructure would be required?  </p>