We had similar situation where we required two types of Interfaces - 1. External 2. Internal. In our case we used F5 Load balancer (Layer 7) for External traffic and Ngnix (and Azure Internal Loadbalancer) for Internal traffic. Both F5 and Ngnix were configured to Listen on Port 443. In F5 backend Pool configuration we added an Internal IP Address of Ngnix and in NSG we allowed F5 IP Address.
... View more