Next line returns 200 as status https://github.com/Kong/kong/blob/c817fada7a514d84f6e0aab7461605c71bf3a841/kong/plugins/cors/handler.lua#L13

Internet says it should return 204:

• https://developer.mozilla.org/en-US/docs/Glossary/Preflight_request
• https://docs.microsoft.com/en-us/aspnet/core/security/cors?view=aspnetcore-3.1#preflight-requests

Internet changed its mind since 2018 https://

On contexts with many APIs and APIs calling other APIs in chains, having too many spans in the zipkin/jaeger dashboards may lead to a too complex usage of such dashboards and of not necessary big data volumes.

For Tyk's admin team, the steps representing the time spent in each Tyk middleware are much valuable.

But the upstream APIs teams just want to know the global time spent in Tyk interna

Currently, the id of APISIX is generated UUID, which can't be controlled by the user. I think it would be good to allow user to specify a meaningful id to bind APISIX instance with their internal system.

Is your feature request related to a problem? Please describe.
Gloo Edge users want an easy-to-implement solution for CSRF protection of their applications.

Describe the solution you'd like
Add support for upstream CSRF filter in Gloo Edge.
https://www.envoyproxy.io/docs/envoy/latest/api-v2/config/filter/http/csrf/v2/csrf.proto
https://www.envoyproxy.io/docs/envoy/latest/start/sandb

It may be helpful to not only allow wildcards for HTTP status rules like *, but also 4* .

Would there be any appetite to add a rule that checks for the inclusion of required and optional fields in your API?

Feature request

We have support hosts field, need to support remote_addrs field.

https://github.com/apache/apisix/blob/master/doc/admin-api.md#route