Chokepoint Monitoring
The system monitors 13 strategic waterways where disruptions could impact global trade, powered by three data sources: IMF PortWatch (weekly vessel transit counts), AISStream (real-time 24h crossing counter), and CorridorRisk (risk intelligence).| Chokepoint | Strategic Importance |
|---|---|
| Strait of Hormuz | 20% of global oil transits; Iran control |
| Suez Canal | Europe-Asia shipping; single point of failure |
| Strait of Malacca | Primary Asia-Pacific oil route |
| Bab el-Mandeb | Red Sea access; Yemen/Houthi activity |
| Panama Canal | Americas east-west transit |
| Taiwan Strait | Semiconductor supply chain; PLA activity |
| Cape of Good Hope | Suez bypass route for VLCCs |
| Strait of Gibraltar | Atlantic-Mediterranean gateway; NATO chokepoint |
| Bosporus Strait | Black Sea access; includes Dardanelles corridor; Montreux Convention |
| Korea Strait | Japan-Korea trade; busiest East Asia corridor |
| Dover Strait | World’s busiest shipping lane |
| Kerch Strait | Russia-controlled; Ukraine grain via Azov restricted |
| Lombok Strait | Malacca bypass for large tankers |
Density Analysis
Vessel positions are aggregated into a 2-degree grid to calculate traffic density. Each cell tracks:- Current vessel count
- Historical baseline (30-minute rolling window)
- Change percentage from baseline
Dark Ship Detection
The system monitors for AIS gaps, vessels that stop transmitting their position. An AIS gap exceeding 60 minutes in monitored regions may indicate:- Sanctions evasion (ship-to-ship transfers)
- Illegal fishing
- Military activity
- Equipment failure
WebSocket Architecture
AIS data flows through a WebSocket relay for real-time updates without polling:Railway Relay Architecture
Some APIs block requests from cloud providers (Vercel, AWS, Cloudflare Workers). A Railway relay server provides authenticated access:| Endpoint | Purpose | Authentication |
|---|---|---|
/ (WebSocket) | AIS vessel stream | AISStream API key |
/opensky | Military aircraft | OAuth2 Bearer token |
/rss | Blocked RSS feeds | None (user-agent spoofing) |
/health | Status check | None |
AISSTREAM_API_KEY- AIS data accessOPENSKY_CLIENT_ID- OAuth2 client IDOPENSKY_CLIENT_SECRET- OAuth2 client secret
- Residential IP ranges (not blocked like cloud providers)
- WebSocket support for persistent connections
- Global edge deployment for low latency
- Free tier sufficient for moderate traffic
