ARTEMIS Lite design and PoC

[vkotronis]

Is your feature request related to a problem? Please describe.
Lighter ARTEMIS version with bare minimum reqs:

• Configuration primitives (YAML) + memory importer
• Simple RIS Live websocket monitor
• Detector (comparing input from RIS live with the YAML file in-mem info)
• Alerter with integrations
• No DB state, no per-hijack state (simple triggers + alerts)
• No multi-user DB, should be runnable with very little reqs on Linux or Mac
• Only UI
• for speed: YAML file should be stored in an in-mem structure (prefix trie?) which can also support quick lookups for incoming BGP updates.
• The user should be able to see: BGP updates, BGP hijacks/alerts
• Needs some intelligence on alert creation (e.g., batch processing of several alerts saying the same thing)

Describe the solution you'd like
Rust-based implementation (not Python for performance reasons)

Describe alternatives you've considered
Rust, golang

Additional context
N/A (TBD)

[vkotronis]

Followers:
@CuriouzK0d3r
@vkotronis

[CuriouzK0d3r]

Additional idea: Integrate the artemis-lite functionality to a purely-client side app. The heavier-performance stuff could be implemented in WASM. I would recommend Svelte instead of React this time. It has faster loading times.

[0verloader]

Additional idea: Create a lite version of ARTEMIS using the GOlang. The BGP data can be collected using CAIDA libBGPstream library.

[vkotronis]

@CuriouzK0d3r @0verloader where are we at with this?

[0verloader]

I am currently working on duckDB. I have a POC that receives announcements via the websocket and presents them in a web-interface using svelte.