Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-07-21 03:48:2125-07-21 03:48:2600:00:050 → 5
Maintaining25-07-21 03:48:2625-07-21 03:53:2600:05:005
Decreasing25-07-21 03:53:2625-07-21 03:53:2700:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 103 (+9) 0 10.99 (-1.30) 3 (0) 59 (-3) 0.34 (+0.03) 0.00 (+0.00)
GET get_analysis_latest_cpe 104 (+9) 0 126.99 (+9.29) 40 (+1) 292 (-17) 0.35 (+0.03) 0.00 (+0.00)
GET get_analysis_status 104 (+9) 0 6.88 (+1.65) 1 (0) 58 (-2) 0.35 (+0.03) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 104 (+9) 0 1312.13 (-302.59) 513 (+130) 2903 (-1783) 0.35 (+0.03) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 104 (+10) 0 907.55 (-42.65) 426 (-200) 1291 (-195) 0.35 (+0.03) 0.00 (+0.00)
GET list_advisory 104 (+10) 0 444.12 (-12.99) 302 (+100) 802 (-50) 0.35 (+0.03) 0.00 (+0.00)
GET list_advisory_paginated 103 (+9) 0 379.22 (-7.09) 210 (+71) 605 (-4) 0.34 (+0.03) 0.00 (+0.00)
GET list_importer 101 (+8) 0 2.89 (-2.32) 1 (0) 46 (-8) 0.34 (+0.03) 0.00 (+0.00)
GET list_organizations 104 (+10) 0 11.83 (-1.58) 1 (0) 50 (-2) 0.35 (+0.03) 0.00 (+0.00)
GET list_packages 101 (+8) 0 396.39 (+34.16) 204 (+99) 934 (-17) 0.34 (+0.03) 0.00 (+0.00)
GET list_packages_paginated 101 (+8) 0 354.68 (+18.44) 118 (+20) 502 (-65) 0.34 (+0.03) 0.00 (+0.00)
GET list_products 104 (+6) 0 12.15 (+0.96) 3 (0) 66 (+7) 0.35 (+0.02) 0.00 (+0.00)
GET list_sboms 104 (+6) 0 1392.05 (-48.86) 794 (+12) 2147 (-19) 0.35 (+0.02) 0.00 (+0.00)
GET list_sboms_paginated 104 (+7) 0 2281.20 (-1422.42) 589 (+34) 4526 (-4952) 0.35 (+0.02) 0.00 (+0.00)
GET list_vulnerabilities 103 (+10) 0 239.16 (-8.31) 102 (+46) 463 (-150) 0.34 (+0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 101 (+8) 0 184.70 (+2.26) 103 (+60) 282 (-21) 0.34 (+0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 104 (+10) 0 85.82 (+9.46) 14 (0) 199 (-7) 0.35 (+0.03) 0.00 (+0.00)
GET search_advisory 103 (+9) 0 920.22 (+25.43) 335 (+161) 2204 (+214) 0.34 (+0.03) 0.00 (+0.00)
GET search_exact_purl 104 (+6) 0 7.76 (-3.86) 2 (0) 54 (-8) 0.35 (+0.02) 0.00 (+0.00)
GET search_purls 106 (+8) 0 4678.89 (+455.50) 1799 (+335) 12380 (-1929) 0.35 (+0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 104 (+10) 0 720.94 (+34.88) 339 (-61) 1030 (-186) 0.35 (+0.03) 0.00 (+0.00)
Aggregated 2170 (+179) 0 696.11 (-64.26) 1 (0) 12380 (-1929) 7.23 (+0.60) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (0) 8 (-1) 10 (-1) 15 (-27) 51 (-5) 59 (+1) 59 (-3)
GET get_analysis_latest_cpe 110 (+10) 120 (0) 140 (+10) 170 (+10) 190 (+10) 260 (+70) 290 (+30) 290 (-19)
GET get_analysis_status 2 (0) 3 (0) 4 (+1) 5 (+1) 9 (+1) 50 (+17) 56 (+1) 58 (-2)
GET get_sbom[sha256:720e4451…a939656247164447] 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (-1,000) 2,000 (-2,000) 2,000 (-2,000) 2,903 (-1,097) 2,903 (-1,783)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 420 (-20) 440 (-20) 470 (-20) 500 (0) 600 (0) 600 (0) 800 (0) 800 (-52)
GET list_advisory_paginated 390 (0) 400 (0) 410 (0) 440 (-20) 470 (-30) 490 (-10) 600 (0) 600 (0)
GET list_importer 2 (0) 2 (0) 3 (0) 3 (0) 4 (-3) 5 (-29) 33 (-21) 46 (-8)
GET list_organizations 4 (0) 5 (0) 7 (-1) 34 (+1) 41 (-1) 44 (0) 47 (-3) 50 (-2)
GET list_packages 380 (+20) 390 (+20) 400 (+20) 450 (+60) 490 (+60) 500 (+10) 800 (+100) 900 (-51)
GET list_packages_paginated 370 (+40) 380 (+20) 390 (+10) 410 (+20) 420 (0) 470 (+50) 500 (0) 500 (-67)
GET list_products 7 (0) 8 (0) 10 (+2) 10 (0) 49 (+34) 57 (+1) 65 (+7) 66 (+7)
GET list_sboms 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET list_sboms_paginated 2,000 (-2,000) 2,000 (-2,000) 3,000 (-2,000) 3,000 (-2,000) 4,000 (-1,000) 4,000 (-3,000) 4,000 (-5,000) 4,526 (-4,474)
GET list_vulnerabilities 220 (-10) 240 (-30) 260 (-20) 280 (-10) 310 (-10) 320 (-40) 380 (-220) 460 (-140)
GET list_vulnerabilities_paginated 190 (+10) 200 (+10) 200 (0) 210 (0) 230 (-30) 260 (-10) 280 (-10) 280 (-20)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 73 (+1) 84 (+7) 98 (-12) 130 (+10) 170 (0) 180 (0) 190 (-10) 199 (-7)
GET search_advisory 700 (-100) 800 (-100) 1,000 (0) 1,000 (0) 2,000 (+10) 2,000 (+10) 2,000 (+10) 2,000 (+10)
GET search_exact_purl 6 (0) 6 (0) 7 (0) 8 (0) 9 (-35) 12 (-43) 53 (-4) 54 (-8)
GET search_purls 2,000 (0) 3,000 (+1,000) 6,000 (+1,000) 8,000 (0) 12,000 (+2,000) 12,000 (-1,000) 12,000 (-2,000) 12,000 (-2,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (0) 800 (+100) 800 (+100) 900 (+100) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0)
Aggregated 310 (0) 410 (+10) 600 (0) 1,000 (0) 2,000 (0) 2,000 (-2,000) 7,000 (-1,000) 12,000 (-2,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 103 [200]
GET get_analysis_latest_cpe 104 [200]
GET get_analysis_status 104 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 104 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 104 [200]
GET list_advisory 104 [200]
GET list_advisory_paginated 103 [200]
GET list_importer 101 [200]
GET list_organizations 104 [200]
GET list_packages 101 [200]
GET list_packages_paginated 101 [200]
GET list_products 104 [200]
GET list_sboms 104 [200]
GET list_sboms_paginated 104 [200]
GET list_vulnerabilities 103 [200]
GET list_vulnerabilities_paginated 101 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 104 [200]
GET search_advisory 103 [200]
GET search_exact_purl 104 [200]
GET search_purls 106 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 104 [200]
Aggregated 2,170 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 104 (+10) 0 (0) 14.05 (+0.59) 6 (-1) 21 (0) 0.35 (+0.03) 0.00 (+0.00)
1.1 list_organizations 104 (+10) 0 (0) 12.02 (-1.59) 1 (0) 50 (-2) 0.35 (+0.03) 0.00 (+0.00)
1.2 list_advisory 104 (+10) 0 (0) 444.23 (-12.98) 302 (+100) 802 (-50) 0.35 (+0.03) 0.00 (+0.00)
1.3 list_advisory_paginated 103 (+9) 0 (0) 379.28 (-7.12) 210 (+71) 605 (-4) 0.34 (+0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 103 (+9) 0 (0) 11.05 (-1.26) 3 (0) 60 (-2) 0.34 (+0.03) 0.00 (+0.00)
1.5 search_advisory 103 (+9) 0 (0) 920.31 (+25.47) 335 (+161) 2204 (+214) 0.34 (+0.03) 0.00 (+0.00)
1.6 list_vulnerabilities 103 (+10) 0 (0) 239.23 (-8.26) 102 (+46) 464 (-149) 0.34 (+0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 101 (+8) 0 (0) 184.76 (+2.21) 103 (+60) 282 (-21) 0.34 (+0.03) 0.00 (+0.00)
1.8 list_importer 101 (+8) 0 (0) 2.91 (-2.35) 1 (0) 46 (-8) 0.34 (+0.03) 0.00 (+0.00)
1.9 list_packages 101 (+8) 0 (0) 396.45 (+34.13) 205 (+100) 934 (-17) 0.34 (+0.03) 0.00 (+0.00)
1.10 list_packages_paginated 101 (+8) 0 (0) 354.80 (+18.49) 118 (+19) 502 (-65) 0.34 (+0.03) 0.00 (+0.00)
1.11 search_purls 106 (+8) 0 (0) 4678.92 (+455.44) 1799 (+335) 12380 (-1929) 0.35 (+0.03) 0.00 (+0.00)
1.12 search_exact_purl 104 (+6) 0 (0) 7.81 (-3.91) 2 (0) 54 (-8) 0.35 (+0.02) 0.00 (+0.00)
1.13 list_products 104 (+6) 0 (0) 12.17 (+0.96) 3 (0) 66 (+7) 0.35 (+0.02) 0.00 (+0.00)
1.14 list_sboms 104 (+6) 0 (0) 1392.12 (-48.88) 794 (+12) 2147 (-19) 0.35 (+0.02) 0.00 (+0.00)
1.15 list_sboms_paginated 104 (+7) 0 (0) 2281.36 (-1422.43) 589 (+34) 4526 (-4952) 0.35 (+0.02) 0.00 (+0.00)
1.16 get_analysis_status 104 (+9) 0 (0) 6.94 (+1.70) 1 (0) 58 (-2) 0.35 (+0.03) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 104 (+9) 0 (0) 127.05 (+9.28) 40 (+1) 292 (-17) 0.35 (+0.03) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 104 (+9) 0 (0) 1312.21 (-302.58) 513 (+130) 2903 (-1783) 0.35 (+0.03) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 104 (+10) 0 (0) 85.88 (+9.39) 14 (0) 199 (-7) 0.35 (+0.03) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 104 (+10) 0 (0) 907.63 (-42.71) 426 (-200) 1291 (-195) 0.35 (+0.03) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 104 (+10) 0 (0) 721.07 (+34.94) 339 (-61) 1030 (-186) 0.35 (+0.03) 0.00 (+0.00)
Aggregated 2,274 (+189) 0 (0) 664.27 (-61.81) 1 (0) 12380 (-1929) 7.58 (+0.63) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 104 (+10) 14445.49 (-1300.34) 9366 (-74) 22396 (-3333) 0.35 (+0.03) 20.80 (+2.00)
Aggregated 5 (0) 104 (+10) 14445.49 (-1300.34) 9366 (-74) 22396 (-3333) 0.35 (+0.03) 20.80 (+2.00)

User Metrics