A public HTTP application runs in two regions and needs global edge routing, TLS termination, and WAF protection. Which front-end service best fits?

1. Azure Front Door
2. Azure Traffic Manager alone for TLS termination
3. An internal Azure Load Balancer only
4. Azure NAT Gateway