Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-07-30 03:44:5525-07-30 03:45:0000:00:050 → 5
Maintaining25-07-30 03:45:0025-07-30 03:50:0000:05:005
Decreasing25-07-30 03:50:0025-07-30 03:50:0700:00:070 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 75 (-50) 0 12.52 (+1.21) 3 (+1) 78 (+2) 0.25 (-0.17) 0.00 (+0.00)
GET get_analysis_latest_cpe 75 (-50) 0 138.17 (+17.68) 34 (-3) 263 (-126) 0.25 (-0.17) 0.00 (+0.00)
GET get_analysis_status 75 (-50) 0 5.65 (+0.45) 1 (0) 53 (+1) 0.25 (-0.17) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 75 (-50) 0 771.93 (-1.43) 213 (+10) 1925 (-72) 0.25 (-0.17) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 75 (-50) 0 889.40 (+49.06) 596 (+91) 1161 (-57) 0.25 (-0.17) 0.00 (+0.00)
GET list_advisory 75 (-50) 0 513.33 (+50.81) 286 (+23) 912 (+10) 0.25 (-0.17) 0.00 (+0.00)
GET list_advisory_paginated 75 (-50) 0 426.24 (+33.12) 128 (0) 807 (+140) 0.25 (-0.17) 0.00 (+0.00)
GET list_importer 75 (-50) 0 5.81 (+1.46) 1 (0) 47 (-1) 0.25 (-0.17) 0.00 (+0.00)
GET list_organizations 75 (-50) 0 8.23 (-0.33) 1 (0) 47 (-8) 0.25 (-0.17) 0.00 (+0.00)
GET list_packages 75 (-50) 0 480.45 (+76.40) 83 (-4) 894 (+86) 0.25 (-0.17) 0.00 (+0.00)
GET list_packages_paginated 75 (-50) 0 403.67 (+50.19) 139 (+26) 563 (-49) 0.25 (-0.17) 0.00 (+0.00)
GET list_products 75 (-54) 0 5.75 (-2.01) 3 (+1) 9 (-51) 0.25 (-0.18) 0.00 (+0.00)
GET list_sboms 75 (-54) 0 1038.48 (-385.12) 570 (+38) 1414 (-870) 0.25 (-0.18) 0.00 (+0.00)
GET list_sboms_paginated 75 (-54) 0 1351.28 (-640.21) 448 (-35) 3410 (-602) 0.25 (-0.18) 0.00 (+0.00)
GET list_vulnerabilities 75 (-50) 0 224.36 (-4.77) 53 (-4) 319 (-89) 0.25 (-0.17) 0.00 (+0.00)
GET list_vulnerabilities_paginated 75 (-50) 0 189.87 (+9.54) 41 (-1) 296 (-7) 0.25 (-0.17) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 75 (-50) 0 57.33 (-25.66) 12 (+1) 201 (+1) 0.25 (-0.17) 0.00 (+0.00)
GET search_advisory 75 (-50) 0 969.57 (-32.83) 128 (-140) 2005 (-351) 0.25 (-0.17) 0.00 (+0.00)
GET search_exact_purl 75 (-54) 0 6.56 (-1.94) 5 (+3) 10 (-50) 0.25 (-0.18) 0.00 (+0.00)
GET search_purls 80 (-50) 0 11816.65 (+8852.96) 9426 (+8617) 14428 (+9765) 0.27 (-0.17) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 75 (-50) 0 492.23 (-107.09) 290 (-8) 1013 (-91) 0.25 (-0.17) 0.00 (+0.00)
Aggregated 1580 (-1066) 0 977.62 (+406.27) 1 (0) 14428 (+9765) 5.27 (-3.55) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (-1) 9 (-1) 11 (0) 45 (+17) 50 (0) 62 (0) 78 (+2)
GET get_analysis_latest_cpe 130 (+30) 160 (+50) 180 (+60) 190 (+30) 200 (+20) 210 (+10) 260 (-30) 260 (-129)
GET get_analysis_status 2 (0) 2 (-1) 3 (0) 4 (0) 7 (+1) 46 (+5) 50 (0) 53 (+1)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (+210) 800 (+200) 800 (-200) 900 (-100) 1,000 (-997) 1,925 (-72) 1,925 (-72) 1,925 (-72)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (0) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 490 (+30) 500 (+30) 500 (0) 600 (+100) 700 (+100) 700 (+100) 800 (+100) 900 (0)
GET list_advisory_paginated 440 (+50) 460 (+50) 480 (+50) 490 (+50) 500 (+10) 500 (0) 600 (0) 800 (+133)
GET list_importer 3 (+1) 3 (+1) 4 (+1) 6 (+2) 7 (0) 40 (+30) 47 (-1) 47 (-1)
GET list_organizations 3 (0) 5 (+1) 7 (+2) 10 (+3) 23 (-13) 33 (-8) 45 (-2) 47 (-8)
GET list_packages 480 (+90) 490 (+90) 500 (+70) 500 (+20) 700 (+100) 700 (0) 800 (0) 894 (+94)
GET list_packages_paginated 420 (+40) 440 (+50) 470 (+70) 480 (+30) 500 (+10) 500 (0) 500 (-100) 563 (-37)
GET list_products 5 (0) 6 (0) 7 (0) 7 (-1) 8 (-3) 8 (-8) 8 (-52) 9 (-51)
GET list_sboms 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000)
GET list_sboms_paginated 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 3,000 (-1,000) 3,000 (-1,000)
GET list_vulnerabilities 230 (0) 230 (-30) 260 (-20) 270 (-20) 290 (-10) 300 (-20) 310 (-90) 319 (-89)
GET list_vulnerabilities_paginated 190 (0) 200 (+10) 210 (+10) 230 (+30) 250 (+30) 260 (-10) 280 (-20) 296 (-4)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 60 (-17) 64 (-23) 76 (-34) 84 (-36) 110 (-60) 120 (-60) 170 (-20) 200 (0)
GET search_advisory 800 (0) 1,000 (0) 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (+3) 7 (+3) 7 (+2) 7 (+1) 8 (-21) 8 (-39) 9 (-50) 10 (-50)
GET search_purls 12,000 (+9,000) 12,000 (+9,000) 12,000 (+9,000) 12,000 (+8,000) 13,000 (+9,000) 13,000 (+9,000) 14,000 (+9,337) 14,000 (+9,337)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 440 (-160) 460 (-140) 500 (-200) 600 (-100) 700 (-100) 800 (-100) 900 (-100) 1,000 (0)
Aggregated 320 (+20) 450 (+50) 500 (0) 800 (-100) 1,000 (-1,000) 9,000 (+7,000) 12,000 (+8,000) 14,000 (+9,337)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 75 [200]
GET get_analysis_latest_cpe 75 [200]
GET get_analysis_status 75 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 75 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 75 [200]
GET list_advisory 75 [200]
GET list_advisory_paginated 75 [200]
GET list_importer 75 [200]
GET list_organizations 75 [200]
GET list_packages 75 [200]
GET list_packages_paginated 75 [200]
GET list_products 75 [200]
GET list_sboms 75 [200]
GET list_sboms_paginated 75 [200]
GET list_vulnerabilities 75 [200]
GET list_vulnerabilities_paginated 75 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 75 [200]
GET search_advisory 75 [200]
GET search_exact_purl 75 [200]
GET search_purls 80 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 75 [200]
Aggregated 1,580 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 75 (-50) 0 (0) 14.07 (+0.14) 7 (0) 21 (+1) 0.25 (-0.17) 0.00 (+0.00)
1.1 list_organizations 75 (-50) 0 (0) 8.35 (-0.41) 1 (0) 48 (-7) 0.25 (-0.17) 0.00 (+0.00)
1.2 list_advisory 75 (-50) 0 (0) 513.40 (+50.80) 286 (+23) 912 (+10) 0.25 (-0.17) 0.00 (+0.00)
1.3 list_advisory_paginated 75 (-50) 0 (0) 426.31 (+33.15) 128 (0) 807 (+140) 0.25 (-0.17) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 75 (-50) 0 (0) 12.63 (+1.26) 3 (+1) 78 (+2) 0.25 (-0.17) 0.00 (+0.00)
1.5 search_advisory 75 (-50) 0 (0) 969.68 (-32.76) 128 (-140) 2005 (-351) 0.25 (-0.17) 0.00 (+0.00)
1.6 list_vulnerabilities 75 (-50) 0 (0) 224.40 (-4.77) 53 (-4) 319 (-90) 0.25 (-0.17) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 75 (-50) 0 (0) 189.89 (+9.52) 41 (-1) 296 (-7) 0.25 (-0.17) 0.00 (+0.00)
1.8 list_importer 75 (-50) 0 (0) 5.84 (+1.45) 1 (0) 47 (-1) 0.25 (-0.17) 0.00 (+0.00)
1.9 list_packages 75 (-50) 0 (0) 480.49 (+76.41) 83 (-4) 894 (+86) 0.25 (-0.17) 0.00 (+0.00)
1.10 list_packages_paginated 75 (-50) 0 (0) 403.76 (+50.25) 139 (+26) 563 (-49) 0.25 (-0.17) 0.00 (+0.00)
1.11 search_purls 80 (-50) 0 (0) 11816.66 (+8852.88) 9426 (+8617) 14428 (+9765) 0.27 (-0.17) 0.00 (+0.00)
1.12 search_exact_purl 75 (-54) 0 (0) 6.59 (-1.94) 5 (+3) 10 (-50) 0.25 (-0.18) 0.00 (+0.00)
1.13 list_products 75 (-54) 0 (0) 5.79 (-2.02) 3 (+1) 9 (-51) 0.25 (-0.18) 0.00 (+0.00)
1.14 list_sboms 75 (-54) 0 (0) 1038.51 (-385.11) 570 (+38) 1414 (-870) 0.25 (-0.18) 0.00 (+0.00)
1.15 list_sboms_paginated 75 (-54) 0 (0) 1351.33 (-640.22) 448 (-35) 3410 (-602) 0.25 (-0.18) 0.00 (+0.00)
1.16 get_analysis_status 75 (-50) 0 (0) 5.69 (+0.39) 1 (0) 53 (+1) 0.25 (-0.17) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 75 (-50) 0 (0) 138.27 (+17.75) 34 (-3) 263 (-126) 0.25 (-0.17) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 75 (-50) 0 (0) 771.97 (-1.51) 213 (+10) 1925 (-72) 0.25 (-0.17) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 75 (-50) 0 (0) 57.41 (-25.66) 12 (+1) 201 (+1) 0.25 (-0.17) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 75 (-50) 0 (0) 889.45 (+49.01) 596 (+91) 1161 (-58) 0.25 (-0.17) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 75 (-50) 0 (0) 492.25 (-107.13) 290 (-8) 1013 (-91) 0.25 (-0.17) 0.00 (+0.00)
Aggregated 1,655 (-1,116) 0 (0) 933.32 (+387.74) 1 (0) 14428 (+9765) 5.52 (-3.72) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 75 (-50) 19656.09 (+7749.74) 14804 (+10230) 25570 (+10318) 0.25 (-0.17) 15.00 (-10.00)
Aggregated 5 (0) 75 (-50) 19656.09 (+7749.74) 14804 (+10230) 25570 (+10318) 0.25 (-0.17) 15.00 (-10.00)

User Metrics