Azure documentation mentions using SSL termination at app gateways to offload app services from some overhead. This sounds like a good idea, but then traffic will be unencrypted when travelling from the gateway to the service. Even if I use private endpoints the traffic is still travelling some distance across the Azure backbone unencrypted.
For security purposes, is it considered best practice to not use SSL termination and instead allow end-to-end encryption?