
Explanation:
Box 1: A connector to the default connector group and a connector to a new connector group To optimize the connection between the users and the application proxy, deploy:
Application proxy uses the same connector as Microsoft Entra Private Access. The connector is called Microsoft Entra private network connector.
If you install connectors in different regions, you should optimize traffic by selecting the closest application proxy cloud service region with each connector group.
Box 2: Expressroute with Microsoft peering
To optimize the connection between the connector and App1, use:
Note: For the best performance, connect your organization to Microsoft with Express Route.
General approach to minimize latency
Minimize the latency of end-to-end traffic by optimizing each network connection.
* Reduce the distance between the two ends of the hop.
* Choose the right network to traverse. For example, traversing a private network rather than the public internet could be faster, due to dedicated links.
Consider using a dedicated VPN or ExpressRoute link between Microsoft and your corporate network.
Focus your optimization strategy
There's little that you can do to control the connection between your users and the application proxy service. Users access your apps from a home network, a coffee shop, or a different region.
Instead, you can optimize the connections from the application proxy service to the private network connectors to the apps. Consider incorporating the following patterns in your environment.
Reference:
https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-network-topology