How to connect on premise from Azure PaaS Service?
What connectivity will be best suited in terms of security and performance?
You can use private link to do this. In terms of performance it depends on your IaaS Architecture and in what KPI you define. Here is a link to a good Microsoft document: zero-trust-part-1-networking