Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-07-18 03:41:4525-07-18 03:41:5000:00:050 → 5
Maintaining25-07-18 03:41:5025-07-18 03:46:5100:05:015
Decreasing25-07-18 03:46:5125-07-18 03:46:5100:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 135 (+35) 0 11.01 (-4.16) 3 (0) 62 (+1) 0.45 (+0.12) 0.00 (+0.00)
GET get_analysis_latest_cpe 138 (+38) 0 102.28 (-16.30) 34 (-28) 191 (+17) 0.46 (+0.13) 0.00 (+0.00)
GET get_analysis_status 138 (+38) 0 4.74 (+0.04) 1 (0) 48 (+4) 0.46 (+0.13) 0.00 (+0.00)
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 138 (+38) 138 5.04 (+0.64) 1 (-1) 50 (+3) 0.46 (+0.13) 0.46 (+0.13)
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 138 (+38) 138 1.12 (+0.09) 1 (0) 5 (+3) 0.46 (+0.13) 0.46 (+0.13)
GET list_advisory 137 (+37) 0 502.06 (-77.86) 233 (-165) 922 (-321) 0.46 (+0.12) 0.00 (+0.00)
GET list_advisory_paginated 135 (+35) 0 399.06 (-38.38) 136 (-77) 967 (+277) 0.45 (+0.12) 0.00 (+0.00)
GET list_importer 133 (+33) 0 4.26 (-1.91) 1 (0) 58 (-8) 0.44 (+0.11) 0.00 (+0.00)
GET list_organizations 137 (+37) 0 8.56 (+3.71) 1 (0) 53 (+28) 0.46 (+0.12) 0.00 (+0.00)
GET list_packages 133 (+33) 0 423.29 (-81.75) 154 (-57) 929 (-25) 0.44 (+0.11) 0.00 (+0.00)
GET list_packages_paginated 133 (+33) 0 370.23 (-27.54) 108 (+41) 658 (-27) 0.44 (+0.11) 0.00 (+0.00)
GET list_products 138 (+38) 0 7.77 (+0.70) 2 (0) 59 (+43) 0.46 (+0.13) 0.00 (+0.00)
GET list_sboms 138 (+38) 0 630.67 (+21.23) 406 (-88) 970 (+223) 0.46 (+0.13) 0.00 (+0.00)
GET list_sboms_paginated 138 (+38) 0 564.04 (+11.66) 402 (-51) 1091 (+427) 0.46 (+0.13) 0.00 (+0.00)
GET list_vulnerabilities 133 (+33) 0 255.89 (+0.94) 100 (+12) 420 (+5) 0.44 (+0.11) 0.00 (+0.00)
GET list_vulnerabilities_paginated 133 (+33) 0 188.71 (+10.36) 85 (-11) 311 (-5) 0.44 (+0.11) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 138 (+38) 0 32.50 (+1.01) 12 (-3) 87 (+20) 0.46 (+0.13) 0.00 (+0.00)
GET search_advisory 135 (+35) 0 804.18 (-336.67) 300 (-27) 2069 (-68) 0.45 (+0.12) 0.00 (+0.00)
GET search_exact_purl 138 (+38) 0 7.73 (-0.58) 2 (0) 57 (+6) 0.46 (+0.13) 0.00 (+0.00)
GET search_purls 138 (+33) 0 6213.62 (-3300.58) 1383 (-1617) 14935 (+1210) 0.46 (+0.11) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 138 (+38) 0 482.97 (+91.73) 247 (-94) 990 (+524) 0.46 (+0.13) 0.00 (+0.00)
Aggregated 2862 (+757) 276 527.73 (-196.22) 1 (0) 14935 (+1210) 9.54 (+2.52) 0.92 (+0.25)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (-1) 7 (-1) 8 (-1) 11 (-10) 40 (-11) 48 (-5) 57 (-3) 62 (+1)
GET get_analysis_latest_cpe 97 (-13) 100 (-10) 110 (-30) 140 (-10) 160 (0) 180 (+20) 190 (+20) 190 (+20)
GET get_analysis_status 2 (0) 2 (0) 3 (0) 4 (+1) 5 (0) 32 (+4) 48 (+5) 48 (+4)
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 3 (0) 3 (0) 3 (0) 4 (0) 5 (+1) 8 (+4) 49 (+2) 50 (+3)
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 1 (0) 1 (0) 1 (0) 1 (0) 2 (0) 3 (+1) 3 (+1) 5 (+3)
GET list_advisory 460 (-40) 490 (-110) 500 (-100) 600 (-100) 700 (-100) 800 (-100) 800 (-200) 900 (-100)
GET list_advisory_paginated 390 (-50) 410 (-60) 430 (-50) 470 (-30) 500 (0) 500 (-100) 700 (+100) 967 (+277)
GET list_importer 2 (-1) 3 (0) 3 (-1) 4 (-1) 6 (-2) 10 (-33) 53 (+5) 58 (-8)
GET list_organizations 4 (+1) 4 (0) 6 (+1) 11 (+4) 23 (+14) 39 (+25) 52 (+36) 53 (+28)
GET list_packages 390 (-70) 400 (-90) 430 (-70) 460 (-140) 600 (-200) 700 (-200) 900 (0) 900 (-54)
GET list_packages_paginated 380 (-40) 390 (-30) 400 (-40) 420 (-50) 480 (-10) 500 (0) 600 (-85) 658 (-27)
GET list_products 6 (0) 7 (0) 8 (-1) 8 (-1) 9 (-2) 11 (0) 54 (+41) 59 (+43)
GET list_sboms 600 (0) 700 (+100) 700 (+100) 700 (+100) 800 (+100) 800 (+100) 970 (+270) 970 (+270)
GET list_sboms_paginated 500 (0) 600 (0) 600 (0) 600 (0) 700 (+100) 700 (+100) 1,000 (+336) 1,000 (+336)
GET list_vulnerabilities 260 (-10) 270 (-10) 290 (-20) 310 (-20) 350 (-10) 380 (+10) 420 (+10) 420 (+5)
GET list_vulnerabilities_paginated 190 (+20) 200 (+20) 210 (+10) 210 (0) 260 (+30) 280 (+10) 300 (0) 310 (-6)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 21 (0) 23 (-2) 44 (+1) 55 (+6) 65 (+8) 71 (+7) 83 (+16) 87 (+20)
GET search_advisory 600 (-400) 700 (-300) 900 (-100) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (0) 6 (0) 7 (+1) 7 (0) 9 (+1) 11 (-33) 56 (+6) 57 (+6)
GET search_purls 2,000 (-10,000) 3,000 (-10,000) 11,000 (-2,000) 13,000 (0) 14,000 (+1,000) 14,000 (+1,000) 14,935 (+1,210) 14,935 (+1,210)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 430 (+40) 490 (+100) 500 (+100) 600 (+180) 700 (+280) 700 (+250) 990 (+540) 990 (+524)
Aggregated 170 (+10) 320 (-50) 410 (-30) 500 (0) 700 (0) 2,000 (0) 13,000 (0) 14,935 (+1,210)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 135 [200]
GET get_analysis_latest_cpe 138 [200]
GET get_analysis_status 138 [200]
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 138 [404]
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 138 [400]
GET list_advisory 137 [200]
GET list_advisory_paginated 135 [200]
GET list_importer 133 [200]
GET list_organizations 137 [200]
GET list_packages 133 [200]
GET list_packages_paginated 133 [200]
GET list_products 138 [200]
GET list_sboms 138 [200]
GET list_sboms_paginated 138 [200]
GET list_vulnerabilities 133 [200]
GET list_vulnerabilities_paginated 133 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 138 [200]
GET search_advisory 135 [200]
GET search_exact_purl 138 [200]
GET search_purls 138 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 138 [200]
Aggregated 138 [404], 2,586 [200], 138 [400]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 137 (+37) 0 (0) 13.84 (-0.23) 7 (-4) 32 (+9) 0.46 (+0.12) 0.00 (+0.00)
1.1 list_organizations 137 (+37) 0 (0) 8.84 (+3.75) 1 (-1) 54 (+29) 0.46 (+0.12) 0.00 (+0.00)
1.2 list_advisory 137 (+37) 0 (0) 502.15 (-77.79) 233 (-165) 922 (-321) 0.46 (+0.12) 0.00 (+0.00)
1.3 list_advisory_paginated 135 (+35) 0 (0) 399.11 (-38.44) 136 (-77) 967 (+277) 0.45 (+0.12) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 135 (+35) 0 (0) 11.04 (-4.16) 3 (0) 62 (+1) 0.45 (+0.12) 0.00 (+0.00)
1.5 search_advisory 135 (+35) 0 (0) 804.21 (-336.68) 300 (-27) 2069 (-68) 0.45 (+0.12) 0.00 (+0.00)
1.6 list_vulnerabilities 133 (+33) 0 (0) 255.94 (+0.92) 100 (+12) 420 (+5) 0.44 (+0.11) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 133 (+33) 0 (0) 188.76 (+10.33) 86 (-10) 311 (-5) 0.44 (+0.11) 0.00 (+0.00)
1.8 list_importer 133 (+33) 0 (0) 4.28 (-1.94) 1 (0) 58 (-9) 0.44 (+0.11) 0.00 (+0.00)
1.9 list_packages 133 (+33) 0 (0) 423.34 (-81.73) 154 (-57) 929 (-25) 0.44 (+0.11) 0.00 (+0.00)
1.10 list_packages_paginated 133 (+33) 0 (0) 370.29 (-27.58) 108 (+41) 658 (-27) 0.44 (+0.11) 0.00 (+0.00)
1.11 search_purls 138 (+33) 0 (0) 6213.65 (-3300.60) 1383 (-1617) 14935 (+1210) 0.46 (+0.11) 0.00 (+0.00)
1.12 search_exact_purl 138 (+38) 0 (0) 7.78 (-0.60) 2 (0) 57 (+6) 0.46 (+0.13) 0.00 (+0.00)
1.13 list_products 138 (+38) 0 (0) 7.79 (+0.68) 3 (+1) 59 (+43) 0.46 (+0.13) 0.00 (+0.00)
1.14 list_sboms 138 (+38) 0 (0) 630.71 (+21.24) 406 (-88) 971 (+224) 0.46 (+0.13) 0.00 (+0.00)
1.15 list_sboms_paginated 138 (+38) 0 (0) 564.09 (+11.66) 402 (-51) 1091 (+427) 0.46 (+0.13) 0.00 (+0.00)
1.16 get_analysis_status 138 (+38) 0 (0) 4.77 (-0.01) 1 (0) 48 (+4) 0.46 (+0.13) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 138 (+38) 0 (0) 102.35 (-16.25) 35 (-27) 192 (+18) 0.46 (+0.13) 0.00 (+0.00)
1.18 get_sbom[sha256:f293eb89…6720f692ec5f3081] 138 (+38) 0 (0) 5.07 (+0.65) 1 (-1) 50 (+3) 0.46 (+0.13) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 138 (+38) 0 (0) 32.58 (+1.01) 12 (-3) 87 (+20) 0.46 (+0.13) 0.00 (+0.00)
1.20 get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 138 (+38) 0 (0) 1.15 (+0.08) 1 (0) 5 (+3) 0.46 (+0.13) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 138 (+38) 0 (0) 483.03 (+91.79) 247 (-94) 990 (+524) 0.46 (+0.13) 0.00 (+0.00)
Aggregated 2,999 (+794) 0 (0) 503.62 (-187.49) 1 (0) 14935 (+1210) 10.00 (+2.65) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 137 (+37) 11003.19 (-3937.82) 5997 (-2563) 20108 (+694) 0.46 (+0.12) 27.40 (+7.40)
Aggregated 5 (0) 137 (+37) 11003.19 (-3937.82) 5997 (-2563) 20108 (+694) 0.46 (+0.12) 27.40 (+7.40)

User Metrics

Errors

# Error
138 (+38) 400 Bad Request: get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954]
138 (+38) 404 Not Found: get_sbom[sha256:f293eb89…6720f692ec5f3081]