[Draft] Release Network 2025-07-01

specification/network/cspell.yaml

@@ -111,6 +111,18 @@ overrides:
       - Reimages
       - privatenicipconfig
       - publicnicipconfig
+  - filename: >-
+      **/specification/network/resource-manager/Microsoft.Network/Network/stable/2025-07-01/applicationGateway.json
+    words:
+      - Conditon
+  - filename: >-
+      **/specification/network/resource-manager/Microsoft.Network/Network/stable/2025-07-01/virtualNetwork.json
+    words:
+      - reimage
+      - Reimage
+      - Reimages
+      - privatenicipconfig
+      - publicnicipconfig
   - filename: >-
       **/specification/network/resource-manager/Microsoft.Network/Network/Network/NetworkVirtualAppliance.tsp
     words:

specification/network/resource-manager/Microsoft.Network/Network/Common/main.tsp

@@ -1,5 +1,6 @@
 import "@typespec/rest";
 import "@typespec/http";
+import "@typespec/versioning";
 import "@azure-tools/typespec-azure-resource-manager";
 import "./NetworkInterface.tsp";
 import "./NetworkInterfaceIPConfiguration.tsp";
@@ -33,6 +34,7 @@ import "@azure-tools/typespec-client-generator-core";
 
 using TypeSpec.Rest;
 using TypeSpec.Http;
+using TypeSpec.Versioning;
 using Azure.ResourceManager;
 using Azure.ResourceManager.Foundations;
 using Azure.ClientGenerator.Core;
@@ -45,14 +47,14 @@ namespace Common;
  */
 enum Versions {
   /**
-   * The 2018-10-01 API version.
+   * The 2025-05-01 API version.
    */
-  v2018_10_01: "2018-10-01",
+  v2025_05_01: "2025-05-01",
 
   /**
-   * The 2025-05-01 API version.
+   * The 2025-07-01 API version.
    */
-  v2025_05_01: "2025-05-01",
+  v2025_07_01: "2025-07-01",
 }
 
 #suppress "@azure-tools/typespec-azure-core/no-enum" "FIXME: Update justification, follow aka.ms/tsp/conversion-fix for details"
@@ -166,11 +168,30 @@ union RouteNextHopType {
   VirtualAppliance: "VirtualAppliance",
 
   /**
-   * None
+   * Routes traffic to virtual appliances using Equal-Cost Multi-Path (ECMP) routing with multiple next hop IP addresses.
+   */
+  @added(Versions.v2025_07_01)
+  VirtualApplianceEcmp: "VirtualApplianceEcmp",
+
+  /**
+   * No next hop type.
    */
   None: "None",
 }
 
+/**
+ * Whether to disable the routes learned by peering on the route table.
+ */
+union DisablePeeringRoute {
+  string,
+
+  /** Peering routes are enabled. */
+  None: "None",
+
+  /** All peering routes are disabled. */
+  All: "All",
+}
+
 /**
  * Specifies the IP version type for the private IPs of the private endpoint. If not defined, this defaults to IPv4.
  */
@@ -395,6 +416,29 @@ union NatGatewaySkuName {
   StandardV2: "StandardV2",
 }
 
+/**
+ * Whether Nat64 is enabled for the NAT gateway resource.
+ */
+@added(Versions.v2025_07_01)
+union Nat64State {
+  string,
+
+  /**
+   * Nat64 Property is not set.
+   */
+  None: "None",
+
+  /**
+   * Nat64 is enabled.
+   */
+  Enabled: "Enabled",
+
+  /**
+   * Nat64 is disabled.
+   */
+  Disabled: "Disabled",
+}
+
 /**
  * Migration phase of Public IP Address.
  */
@@ -1392,6 +1436,11 @@ model DdosSettings {
    */
   protectionMode?: DdosSettingsProtectionMode;
 
+  /**
+   * The DDoS custom policy associated with the public IP.
+   */
+  ddosCustomPolicy?: SubResource;
+
   /**
    * The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled
    */
@@ -1924,6 +1973,19 @@ model FrontendIPConfigurationPropertiesFormat {
    */
   @visibility(Lifecycle.Read)
   provisioningState?: ProvisioningState;
+
+  /**
+   * The DDoS protection settings associated with the frontend IP configuration.
+   */
+  @added(Versions.v2025_07_01)
+  ddosSettings?: DdosFrontendIpConfigurationSettings;
+}
+
+/** DDoS protection settings for a frontend IP configuration. */
+@added(Versions.v2025_07_01)
+model DdosFrontendIpConfigurationSettings {
+  /** The reference to the DDoS Custom Policy resource. */
+  ddosCustomPolicy?: SubResource;
 }
 
 /**
@@ -3080,6 +3142,11 @@ model RouteTablePropertiesFormat {
    */
   disableBgpRoutePropagation?: boolean;
 
+  /**
+   * Whether to disable the routes learned by peering on the route table. 'None' means peering routes are enabled, 'All' means all peering routes are disabled.
+   */
+  disablePeeringRoute?: DisablePeeringRoute;
+
   /**
    * The provisioning state of the route table resource.
    */
@@ -3192,6 +3259,12 @@ model NatGatewayPropertiesFormat {
    */
   serviceGateway?: SubResource;
 
+  /**
+   * Whether Nat64 is enabled for the NAT gateway resource.
+   */
+  @added(Versions.v2025_07_01)
+  nat64?: Nat64State;
+
   /**
    * The resource GUID property of the NAT gateway resource.
    */
@@ -3757,6 +3830,12 @@ model RoutePropertiesFormat {
    */
   nextHopIpAddress?: string;
 
+  /**
+   * The next hop definition containing ECMP next hop IP addresses. Only allowed when nextHopType is VirtualApplianceEcmp.
+   */
+  @added(Versions.v2025_07_01)
+  nextHop?: RouteNextHopEcmp;
+
   /**
    * The provisioning state of the route resource.
    */
@@ -3770,6 +3849,21 @@ model RoutePropertiesFormat {
   hasBgpOverride?: boolean;
 }
 
+/**
+ * The next hop definition for ECMP routes containing multiple next hop IP addresses.
+ */
+#suppress "@azure-tools/typespec-azure-core/no-legacy-usage" "Brownfield service: RouteNextHopEcmp uses Legacy.feature for consistency with existing Network routing models"
+@Azure.ResourceManager.Legacy.feature(Features.virtualNetwork)
+@added(Versions.v2025_07_01)
+model RouteNextHopEcmp {
+  /**
+   * List of next hop IP addresses for ECMP routing. Must contain between 2 and 64 IP addresses.
+   */
+  @minItems(2)
+  @maxItems(64)
+  nextHopIpAddresses: string[];
+}
+
 /**
  * Service Endpoint policy definition resource.
  */
@@ -3978,6 +4072,12 @@ model VirtualNetworkPropertiesFormat {
    */
   @visibility(Lifecycle.Read)
   defaultPublicNatGateway?: SubResource;
+
+  /**
+   * A configurable list of summarized gateway prefixes advertised for the virtual network.
+   */
+  @added(Versions.v2025_07_01)
+  summarizedGatewayPrefixes?: AddressSpace;
 }
 
 /**

specification/network/resource-manager/Microsoft.Network/Network/Network/AzureFirewall.tsp

@@ -2,10 +2,12 @@ import "@azure-tools/typespec-azure-core";
 import "@azure-tools/typespec-azure-resource-manager";
 import "@typespec/openapi";
 import "@typespec/rest";
+import "@typespec/versioning";
 import "./models.tsp";
 import "../Common/main.tsp";
 
 using TypeSpec.Rest;
+using TypeSpec.Versioning;
 using Azure.ResourceManager;
 using TypeSpec.Http;
 using TypeSpec.OpenAPI;
@@ -62,6 +64,14 @@ interface AzureFirewalls {
   @tag("AzureFirewalls")
   createOrUpdate is ArmResourceCreateOrReplaceAsync<
     AzureFirewall,
+    Parameters = {
+      /**
+       * When set to true, creates an AFC control plane for the Azure Firewall.
+       */
+      @added(Versions.v2025_07_01)
+      @query("createAfcControlPlane")
+      createAfcControlPlane?: boolean;
+    },
     Error = CloudError
   >;