A service requires load balancing for inbound TCP traffic to regional VM backends without HTTP-level inspection. Which service is the closest fit?

1. Azure Traffic Manager alone
2. Azure Application Gateway
3. Azure Private DNS
4. Azure Load Balancer