The service is designed to be deployed into a subnet within a virtual network (VNet). Our recommended best practice is to connect the VNet of the service with your Azure VMware Solution (AVS) resource via an ExpressRoute circuit directly between the VNet and AVS.
This setup provides a seamless and secure connection, and optimal performance and minimal latency.
More details can be found in Network Requirements.