Hello DB,
1)Each ESG is certainly showing 4x subnets , is that correct ?
2)Do you have reachability from missing subnets(2x) to workloads behind DLR or vice versa keeping the routing table issue aside ?
3) You have mentioned filtering is minimal - however I'm interested to know the actual configuration