ACLs on Virtual Network in Azure

I have an application/product which is deployed on azure and uses following different azure services

1. Storage
2. SQL Database
3. Service Bus
4. Cloud Service Web and worker role
5. Virtual Machine
6. Azure Cache
7. WAAD
8. Virtual Network (i try to create every other thing in the network)

I want to make sure that all azure components are physically closed to each other so that communication is faster.

And more important I want apply IP restriction to all azure components , is there a way to apply restriction to virtual network so that it is applied to all other components in that network.

Thanks,

Subodh