Set up a Virtual Network with multiple VMs

Dear all,

I am trying to setup a Virtual Network to enhance my website backend security.

I have a balanced set of two Debian VMs running Laravel and a VM running Debian and MySQL. I would like to make all the Internet traffic go inside a dedicated VM with an IDS (snort) that redirects connections to the balanced set of VMs of the backend.

Lastly, VMs of the backend have to be connected to the DB server but the DB server cannot be accessed from outside the VN for security reasons.

I am developing under mac OS X, so I cannot use particular Azure commands.

Thank you for your support