Hello DB,

                 1)Each ESG is certainly showing 4x subnets , is that correct ?

                 2)Do you have reachability from missing subnets(2x) to workloads behind DLR or vice versa keeping the routing table issue aside ?

                 3) You have mentioned filtering is minimal - however I'm interested to know the actual configuration