Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-07-18 08:15:0025-07-18 08:15:0500:00:050 → 5
Maintaining25-07-18 08:15:0525-07-18 08:20:0500:05:005
Decreasing25-07-18 08:20:0525-07-18 08:20:0600:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 65 (-70) 0 9.86 (-1.15) 3 (0) 59 (-3) 0.22 (-0.23) 0.00 (+0.00)
GET get_analysis_latest_cpe 67 (-71) 0 140.99 (+38.70) 29 (-5) 332 (+141) 0.22 (-0.24) 0.00 (+0.00)
GET get_analysis_status 67 (-71) 0 6.97 (+2.23) 1 (0) 65 (+17) 0.22 (-0.24) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 67 0 1177.01 333 2405 0.22 0.00
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 67 0 870.42 389 1222 0.22 0.00
GET list_advisory 67 (-70) 0 442.79 (-59.27) 194 (-39) 799 (-123) 0.22 (-0.23) 0.00 (+0.00)
GET list_advisory_paginated 66 (-69) 0 389.42 (-9.64) 123 (-13) 605 (-362) 0.22 (-0.23) 0.00 (+0.00)
GET list_importer 65 (-68) 0 5.12 (+0.86) 1 (0) 52 (-6) 0.22 (-0.23) 0.00 (+0.00)
GET list_organizations 67 (-70) 0 10.90 (+2.33) 1 (0) 50 (-3) 0.22 (-0.23) 0.00 (+0.00)
GET list_packages 65 (-68) 0 423.12 (-0.17) 220 (+66) 909 (-20) 0.22 (-0.23) 0.00 (+0.00)
GET list_packages_paginated 65 (-68) 0 364.75 (-5.48) 115 (+7) 588 (-70) 0.22 (-0.23) 0.00 (+0.00)
GET list_products 70 (-68) 0 10.44 (+2.67) 2 (0) 55 (-4) 0.23 (-0.23) 0.00 (+0.00)
GET list_sboms 70 (-68) 0 1471.44 (+840.78) 820 (+414) 2096 (+1126) 0.23 (-0.23) 0.00 (+0.00)
GET list_sboms_paginated 69 (-69) 0 2192.88 (+1628.85) 608 (+206) 3702 (+2611) 0.23 (-0.23) 0.00 (+0.00)
GET list_vulnerabilities 65 (-68) 0 283.63 (+27.74) 141 (+41) 430 (+10) 0.22 (-0.23) 0.00 (+0.00)
GET list_vulnerabilities_paginated 65 (-68) 0 181.65 (-7.07) 116 (+31) 257 (-54) 0.22 (-0.23) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 67 (-71) 0 76.55 (+44.05) 13 (+1) 209 (+122) 0.22 (-0.24) 0.00 (+0.00)
GET search_advisory 65 (-70) 0 1083.60 (+279.42) 333 (+33) 2163 (+94) 0.22 (-0.23) 0.00 (+0.00)
GET search_exact_purl 70 (-68) 0 8.26 (+0.53) 3 (+1) 64 (+7) 0.23 (-0.23) 0.00 (+0.00)
GET search_purls 70 (-68) 0 12178.11 (+5964.50) 1695 (+312) 23400 (+8465) 0.23 (-0.23) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 67 (-71) 0 632.88 (+149.91) 228 (-19) 1234 (+244) 0.22 (-0.24) 0.00 (+0.00)
Aggregated 1406 (-1456) 0 1075.16 (+547.43) 1 (0) 23400 (+8465) 4.69 (-4.85) 0.00 (-0.92)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (0) 8 (0) 10 (-1) 16 (-24) 47 (-1) 51 (-6) 59 (-3)
GET get_analysis_latest_cpe 120 (+23) 170 (+70) 180 (+70) 190 (+50) 210 (+50) 270 (+90) 280 (+90) 330 (+140)
GET get_analysis_status 2 (0) 2 (0) 3 (0) 4 (0) 7 (+2) 51 (+19) 59 (+11) 65 (+17)
GET get_sbom[sha256:720e4451…a939656247164447] 1,000 1,000 1,000 2,000 2,000 2,000 2,000 2,000
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 900 1,000 1,000 1,000 1,000 1,000 1,000
GET list_advisory 440 (-20) 470 (-20) 490 (-10) 500 (-100) 600 (-100) 600 (-200) 700 (-100) 799 (-101)
GET list_advisory_paginated 400 (+10) 420 (+10) 430 (0) 450 (-20) 480 (-20) 500 (0) 500 (-200) 600 (-367)
GET list_importer 2 (0) 3 (0) 3 (0) 3 (-1) 5 (-1) 46 (+36) 49 (-4) 52 (-6)
GET list_organizations 4 (0) 4 (0) 6 (0) 19 (+8) 42 (+19) 46 (+7) 49 (-3) 50 (-3)
GET list_packages 400 (+10) 410 (+10) 430 (0) 470 (+10) 600 (0) 800 (+100) 900 (0) 900 (0)
GET list_packages_paginated 380 (0) 390 (0) 400 (0) 420 (0) 470 (-10) 500 (0) 588 (-12) 588 (-70)
GET list_products 9 (+3) 10 (+3) 11 (+3) 12 (+4) 16 (+7) 18 (+7) 53 (-1) 55 (-4)
GET list_sboms 1,000 (+400) 2,000 (+1,300) 2,000 (+1,300) 2,000 (+1,300) 2,000 (+1,200) 2,000 (+1,200) 2,000 (+1,030) 2,000 (+1,030)
GET list_sboms_paginated 2,000 (+1,500) 2,000 (+1,400) 3,000 (+2,400) 3,000 (+2,400) 3,000 (+2,300) 3,000 (+2,300) 3,702 (+2,702) 3,702 (+2,702)
GET list_vulnerabilities 290 (+30) 320 (+50) 330 (+40) 360 (+50) 380 (+30) 410 (+30) 430 (+10) 430 (+10)
GET list_vulnerabilities_paginated 190 (0) 190 (-10) 210 (0) 210 (0) 220 (-40) 230 (-50) 250 (-50) 257 (-53)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (+49) 77 (+54) 100 (+56) 120 (+65) 170 (+105) 190 (+119) 200 (+117) 209 (+122)
GET search_advisory 900 (+300) 1,000 (+300) 1,000 (+100) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (0) 7 (+1) 7 (0) 7 (0) 9 (0) 13 (+2) 52 (-4) 64 (+7)
GET search_purls 12,000 (+10,000) 21,000 (+18,000) 22,000 (+11,000) 22,000 (+9,000) 23,000 (+9,000) 23,000 (+9,000) 23,000 (+8,065) 23,000 (+8,065)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+170) 600 (+110) 700 (+200) 800 (+200) 800 (+100) 900 (+200) 1,000 (+10) 1,000 (+10)
Aggregated 320 (+150) 420 (+100) 600 (+190) 1,000 (+500) 2,000 (+1,300) 2,000 (0) 22,000 (+9,000) 23,000 (+8,065)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 65 [200]
GET get_analysis_latest_cpe 67 [200]
GET get_analysis_status 67 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 67 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 67 [200]
GET list_advisory 67 [200]
GET list_advisory_paginated 66 [200]
GET list_importer 65 [200]
GET list_organizations 67 [200]
GET list_packages 65 [200]
GET list_packages_paginated 65 [200]
GET list_products 70 [200]
GET list_sboms 70 [200]
GET list_sboms_paginated 69 [200]
GET list_vulnerabilities 65 [200]
GET list_vulnerabilities_paginated 65 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 67 [200]
GET search_advisory 65 [200]
GET search_exact_purl 70 [200]
GET search_purls 70 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 67 [200]
Aggregated 1,406 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 67 (-70) 0 (0) 13.60 (-0.24) 7 (0) 18 (-14) 0.22 (-0.23) 0.00 (+0.00)
1.1 list_organizations 67 (-70) 0 (0) 10.94 (+2.10) 2 (+1) 50 (-4) 0.22 (-0.23) 0.00 (+0.00)
1.2 list_advisory 67 (-70) 0 (0) 442.82 (-59.33) 194 (-39) 799 (-123) 0.22 (-0.23) 0.00 (+0.00)
1.3 list_advisory_paginated 66 (-69) 0 (0) 389.47 (-9.64) 123 (-13) 605 (-362) 0.22 (-0.23) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 65 (-70) 0 (0) 9.91 (-1.13) 3 (0) 59 (-3) 0.22 (-0.23) 0.00 (+0.00)
1.5 search_advisory 65 (-70) 0 (0) 1083.62 (+279.41) 333 (+33) 2163 (+94) 0.22 (-0.23) 0.00 (+0.00)
1.6 list_vulnerabilities 65 (-68) 0 (0) 283.65 (+27.71) 141 (+41) 430 (+10) 0.22 (-0.23) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 65 (-68) 0 (0) 181.72 (-7.04) 116 (+30) 257 (-54) 0.22 (-0.23) 0.00 (+0.00)
1.8 list_importer 65 (-68) 0 (0) 5.15 (+0.88) 1 (0) 52 (-6) 0.22 (-0.23) 0.00 (+0.00)
1.9 list_packages 65 (-68) 0 (0) 423.17 (-0.17) 220 (+66) 909 (-20) 0.22 (-0.23) 0.00 (+0.00)
1.10 list_packages_paginated 65 (-68) 0 (0) 364.82 (-5.47) 115 (+7) 588 (-70) 0.22 (-0.23) 0.00 (+0.00)
1.11 search_purls 70 (-68) 0 (0) 12178.16 (+5964.50) 1695 (+312) 23400 (+8465) 0.23 (-0.23) 0.00 (+0.00)
1.12 search_exact_purl 70 (-68) 0 (0) 8.31 (+0.53) 3 (+1) 64 (+7) 0.23 (-0.23) 0.00 (+0.00)
1.13 list_products 70 (-68) 0 (0) 10.49 (+2.70) 2 (-1) 55 (-4) 0.23 (-0.23) 0.00 (+0.00)
1.14 list_sboms 70 (-68) 0 (0) 1471.49 (+840.78) 820 (+414) 2096 (+1125) 0.23 (-0.23) 0.00 (+0.00)
1.15 list_sboms_paginated 69 (-69) 0 (0) 2192.93 (+1628.84) 608 (+206) 3702 (+2611) 0.23 (-0.23) 0.00 (+0.00)
1.16 get_analysis_status 67 (-71) 0 (0) 7.04 (+2.28) 1 (0) 66 (+18) 0.22 (-0.24) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 67 (-71) 0 (0) 141.09 (+38.74) 29 (-6) 332 (+140) 0.22 (-0.24) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 67 0 1177.07 333 2405 0.22 0.00
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 67 (-71) 0 (0) 76.64 (+44.06) 13 (+1) 209 (+122) 0.22 (-0.24) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 67 0 870.48 389 1222 0.22 0.00
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 67 (-71) 0 (0) 632.97 (+149.94) 228 (-19) 1234 (+244) 0.22 (-0.24) 0.00 (+0.00)
Aggregated 1,473 (-1,526) 0 (0) 1026.25 (+522.63) 1 (0) 23400 (+8465) 4.91 (-5.09) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 67 (-70) 22255.69 (+11252.50) 10587 (+4590) 34343 (+14235) 0.22 (-0.23) 13.40 (-14.00)
Aggregated 5 (0) 67 (-70) 22255.69 (+11252.50) 10587 (+4590) 34343 (+14235) 0.22 (-0.23) 13.40 (-14.00)

User Metrics