You plan to deploy apps to virtual machines in a virtual network together with microservices in AKS that are being consumed by the apps within the same network. You need to design a solution that will expose the microservices to the consuming apps. The ingress access to microservices must be restricted to a single private IP address and protected by using mutual TLS authentication. The number of microservices must be rate-limited and the cost must be minimized. How will you approach the challenge?