Routing with internal and external domains

Question

I have a Service-A (SA) deployed in a virtual machine (VM) in a private subnet (no public route). SA is simple tomcat based application. I have nginx hosted on another VM in