A retail company hosts a single public web application at www.contoso.com. Behind it are three backend pools of VMs: one serving the main storefront, one serving the /api/* endpoints, and one serving the /images/* static content. The architect must route incoming HTTPS traffic to the correct backend pool based on the URL path, terminate TLS at the edge, and protect the application against common web exploits such as SQL injection. Which Azure load-balancing solution should be recommended?