Home > Storage > PowerFlex > White Papers > Dell APEX Block Storage for Azure: SQL Server 2022 Multi-Subnet Failover Clustering Deployment and Resiliency > Network architecture
The following Figure 2 shows the network architecture for a two-layer system deployed across multiple AZs in a single Azure Resource group.
Figure 2. APEX Block Storage network architecture in Azure
In this example, APEX Block Storage for Azure storage is deployed with one Virtual Network across three availability zones within the same Azure resource group for resiliency. For each availability zone, a separate private and public subnet is created to provide connectivity and routing across different availability zones. The public subnet contains resources that are accessible over the Internet and the private subnet contains the compute and storage resources.
A network address translation (NAT) gateway is configured in the public routing table to enable access to the Azure VM instances in the public subnet over the Internet. Security groups are created for Azure VM instances to provide an additional layer of security and control over inbound and outbound traffic at the subnet level.