The requirement here was related to allowing connection via ExpressRoute back to their on-prem data center. This was so that the app can connect to services running on-prem.
This is about connecting to Contoso's private network, not about providing a private service endpoint.
My only knowledge of how to do this is that I found this Azure article about how to do it:
You'll see that the solution is explicitly NOT for ASE, as you get this "for free" with ASS. have heard John Doe and others assert that such a thing can't be done, but this article contradicts that assertion.
Notes:
I don't know if this solution works.
If it does work, I don't know if you can peer and route to an ER vnet.
If is does work with ER, I don't know if Contoso would approve the approach.
John Doe has said that ExpressRoute connectivity can be left out of scope for now. I suspect he's saying that because he believes it can't be done currently.
We can probably consider this lower priority for now, but it is absolutely a longer term goal to enable App Service-to-ExpressRoute functionality.
Copied from Azure Dev Ops Backlog
The requirement here was related to allowing connection via ExpressRoute back to their on-prem data center. This was so that the app can connect to services running on-prem.
This is about connecting to Contoso's private network, not about providing a private service endpoint.
My only knowledge of how to do this is that I found this Azure article about how to do it:
https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet
You'll see that the solution is explicitly NOT for ASE, as you get this "for free" with ASS. have heard John Doe and others assert that such a thing can't be done, but this article contradicts that assertion.
Notes:
We can probably consider this lower priority for now, but it is absolutely a longer term goal to enable App Service-to-ExpressRoute functionality.