CLI support for new DDoS Protection feature: DDoS Policy Customization

[AvirupCha]

Resource provider. What is the Azure resource provider your feature is part of?

• Network (NRP)

Description of feature or work requested. Provide a brief description of the feature or work requested. A link to conceptual documentation may be helpful too.

• DDoS Custom Policy allows Azure DDoS Protection customers to customize their ddos detection thresholds.
• https://learn.microsoft.com/en-us/rest/api/virtualnetwork/ddos-custom-policies/create-or-update?view=rest-virtualnetwork-2025-03-01&tabs=HTTP

Minimum API version required. What is the minimum API version of your service required to implement your feature?

• 2025-03-01

Swagger link. Provide a link to the location of your feature(s) in the REST API specs repo. If your feature(s) has corresponding commit or pull request in the REST API specs repo, provide them. This should be on the master branch of the REST API specs repo.

• https://learn.microsoft.com/en-us/rest/api/virtualnetwork/ddos-custom-policies/create-or-update?view=rest-virtualnetwork-2025-03-01&viewFallbackFrom=rest-virtualnetwork-2025-01-01&tabs=HTTP
• Public repo: https://github.com/Azure/azure-rest-api-specs?files=1
  we can now see new properties on 2025-03-01 API version: https://github.com/Azure/azure-rest-api-specs/blob/main/specification/network/resource-manager/Microsoft.Network/stable/2025-03-01/ddosCustomPolicy.json
• NRP release branch: https://github.com/Azure/azure-rest-api-specs/tree/kamboj-prjwl/release-network-2025-03-01

Target date. If you have a target date for releasing this feature/work, please provide it. While we can't guarantee these dates, it will help us prioritize your request against other requests.

• March 2026

Where do you want the feature to locate? A command module or an extension? Here is a Comparison.

• Module

Status of the service. Is it in preview or GA?

• Preview

Examples of the feature. Usually REST API specs repo should contain examples. An independent documentation or tutorial is also OK.

• https://learn.microsoft.com/en-us/rest/api/virtualnetwork/ddos-custom-policies/create-or-update?view=rest-virtualnetwork-2025-03-01&viewFallbackFrom=rest-virtualnetwork-2025-01-01&tabs=HTTP

Prerequisite to use this feature. Whitelisting subscription? Registering the feature for subscription? Is it available in public Azure?

• Available in public Azure. Requires subscription whitelisting.

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• DDoS Policy Customization Feature #9380

---

Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)

Solution 1:

This feature is disabled in NRP side on all the prod regions, that's why it's returning region not enabled. Since the feature is not active, testing should be held off. The feature will need to be enabled before proceeding.

Reference:

• DDoS Policy Customization Feature #9380 (comment)

Solution 2:

Close the issue for now. Please reopen or create another issue when the feature is enabled.

Reference:

• DDoS Policy Customization Feature #9380 (comment)

Powered by issue-sentinel

[AvirupCha]

@necusjz @yonzhan can we whitelist your subscription so you can continue testing?

[AvirupCha]

Could you folks provide the subscription id and an ETA? @necusjz

[necusjz]

Could you folks provide the subscription id and an ETA? @necusjz

@william051200 is already working on it.