Update src/content/docs/azure/services/virtual-network.mdx

Co-authored-by: Paolo Salvatori <leprino@hotmail.com>

Author: HarshCasper

src/content/docs/azure/services/virtual-network.mdx

@@ -220,6 +220,42 @@ az network vnet list --resource-group rg-vnet-demo
 ```bash title="Output"
 []
 ```
+## Features
+
+The Virtual Network emulator supports the following features:
+
+- **Virtual networks**: Create, update, delete, list, and get virtual networks with configurable address spaces, DNS servers, and DDoS protection settings.
+- **Subnets**: Full lifecycle management of subnets within virtual networks, including address prefix allocation, service endpoint configuration, and NSG/route table associations.
+- **Network security groups**: Create and manage network security groups with custom security rules. Default rules (AllowVnetInBound, AllowAzureLoadBalancerInBound, DenyAllInBound, AllowVnetOutBound, AllowInternetOutBound, DenyAllOutBound) are automatically provisioned.
+- **Route tables**: Create and manage route tables with custom route entries supporting next hop types such as VirtualAppliance, VirtualNetworkGateway, Internet, and VnetLocal.
+- **Public IP addresses**: Create and manage public IP addresses with Static or Dynamic allocation methods, Standard or Basic SKUs, and availability zone configuration.
+- **Public IP prefixes**: Create and manage public IP prefixes with configurable prefix lengths and SKU settings.
+- **NAT gateways**: Create and manage NAT gateways with public IP address and public IP prefix associations.
+- **Network interfaces**: Create and manage network interfaces with IP configurations, dynamic IP allocation from subnets, accelerated networking, and IP forwarding settings.
+- **Private DNS zones**: Create and manage private DNS zones with virtual network links, registration enablement, and A record sets.
+- **Private endpoints**: Create and manage private endpoints with automatic network interface provisioning, private link service connections, and private DNS zone group integration.
+- **Bastion hosts**: Create and manage bastion hosts with IP configuration validation, SKU selection (Basic, Standard, Premium), and scale unit configuration.
+
+## Limitations
+
+- **No network traffic routing**: The emulator does not route network traffic or enforce security rules. Resources are stored and returned with correct metadata, but no packet-level behavior is applied.
+- **IPv6**: IPv6 fields are accepted in requests but are not functional. All IP allocation operates on IPv4 address spaces only.
+- **Private DNS record types**: Only A record sets are supported in private DNS zones. Other record types (CNAME, MX, TXT, SRV, AAAA) are not available.
+- **Public IP addresses**: Addresses are locally generated and do not represent routable IPs on the public internet.
+- **Bastion host connectivity**: Feature flags such as tunneling, file copy, and Kerberos authentication are stored as configuration but do not provide actual connectivity.
+- **VNet peering**: Virtual network peering is not supported.
+- **VPN and ExpressRoute gateways**: VPN gateways and ExpressRoute circuits are not implemented.
+- **Load balancers**: Azure Load Balancer resources are not implemented.
+- **Application gateways**: Application Gateway resources are not implemented.
+- **Network watchers**: Network Watcher and flow log resources are not implemented.
+- **No data persistence**: Network resources are not persisted and are lost when the emulator is stopped or restarted.
+
+## Samples
+
+The following samples demonstrate how to use Virtual Network with LocalStack for Azure:
+
+- [Function App and Service Bus](https://github.com/localstack/localstack-azure-samples/tree/main/samples/function-app-service-bus/dotnet/)
+- [Web App and Cosmos DB for MongoDB API](https://github.com/localstack/localstack-azure-samples/tree/main/samples/web-app-cosmosdb-mongodb-api/python/)
 
 ## API Coverage