An internet application runs in several Azure regions. It needs global HTTP routing, TLS termination near users, and web application firewall protection at the edge. Which service is the best fit?

1. A VPN gateway
2. Azure Front Door
3. An internal Azure Load Balancer
4. Azure Traffic Manager alone