Topology - Single VNet
This is the most commonly used Combine Network Architecture. In this topology Combine is deployed to a single VNet. Private DNS entries redirect all emulated endpoint traffic to local Combine Endpoint servers. The 'Customer' subnets (reserved for your use) are routed to Combine's Proxy machine which acts as an airgap.
Topology - Multiple VNet
Architecture
Topology - Multiple VNet - Central Combine VNet
Architecture