I can see that Azure SQL looks to be gaining support here, but I have not found specific documents in regards to the using the Azure VNet you mentioned. But I think that the diagram on that page is referring to using the private virtual network for the Jira nodes on the back end, while the NAT would sit in the public network.