Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-04 03:55:5025-08-04 03:55:5500:00:050 → 5
Maintaining25-08-04 03:55:5525-08-04 04:00:5500:05:005
Decreasing25-08-04 04:00:5525-08-04 04:00:5600:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 76 (-24) 0 13.46 (+0.86) 3 (0) 59 (-8) 0.25 (-0.08) 0.00 (+0.00)
GET get_analysis_latest_cpe 80 (-20) 0 123.29 (+7.62) 41 (+5) 223 (+12) 0.27 (-0.07) 0.00 (+0.00)
GET get_analysis_status 80 (-20) 0 6.35 (+0.69) 1 (0) 51 (-4) 0.27 (-0.07) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 80 (-20) 0 1096.01 (+491.03) 186 (+50) 3627 (+1759) 0.27 (-0.07) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 79 (-21) 0 954.27 (+119.34) 404 (-28) 1375 (+65) 0.26 (-0.07) 0.00 (+0.00)
GET list_advisory 76 (-24) 0 479.66 (-4.26) 139 (-153) 827 (+55) 0.25 (-0.08) 0.00 (+0.00)
GET list_advisory_paginated 76 (-24) 0 412.82 (-37.52) 207 (-37) 1201 (+319) 0.25 (-0.08) 0.00 (+0.00)
GET list_importer 76 (-24) 0 5.86 (+1.02) 1 (0) 55 (+8) 0.25 (-0.08) 0.00 (+0.00)
GET list_organizations 76 (-24) 0 12.24 (+3.64) 1 (0) 48 (-12) 0.25 (-0.08) 0.00 (+0.00)
GET list_packages 76 (-24) 0 350.66 (-111.11) 107 (+3) 845 (-100) 0.25 (-0.08) 0.00 (+0.00)
GET list_packages_paginated 76 (-24) 0 335.66 (-32.91) 104 (-7) 510 (-62) 0.25 (-0.08) 0.00 (+0.00)
GET list_products 81 (-19) 0 9.49 (+0.49) 2 (0) 59 (+6) 0.27 (-0.06) 0.00 (+0.00)
GET list_sboms 81 (-19) 0 1273.99 (+68.58) 592 (+4) 2156 (+253) 0.27 (-0.06) 0.00 (+0.00)
GET list_sboms_paginated 80 (-20) 0 2913.39 (+1396.34) 501 (+25) 7313 (+3780) 0.27 (-0.07) 0.00 (+0.00)
GET list_vulnerabilities 76 (-24) 0 250.55 (-27.81) 96 (+18) 476 (-10) 0.25 (-0.08) 0.00 (+0.00)
GET list_vulnerabilities_paginated 76 (-24) 0 176.55 (-26.63) 68 (0) 303 (+10) 0.25 (-0.08) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 79 (-21) 0 78.28 (+16.30) 10 (-1) 206 (+24) 0.26 (-0.07) 0.00 (+0.00)
GET search_advisory 76 (-24) 0 746.08 (-289.78) 271 (-95) 2386 (+110) 0.25 (-0.08) 0.00 (+0.00)
GET search_exact_purl 81 (-19) 0 8.63 (+1.41) 2 (0) 59 (+4) 0.27 (-0.06) 0.00 (+0.00)
GET search_purls 81 (-24) 0 9023.88 (+2452.00) 1802 (-2006) 21658 (+9256) 0.27 (-0.08) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 78 (-22) 0 658.72 (+60.04) 167 (-120) 1082 (+4) 0.26 (-0.07) 0.00 (+0.00)
Aggregated 1640 (-465) 0 921.47 (+200.85) 1 (0) 21658 (+9256) 5.47 (-1.55) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 8 (0) 10 (0) 13 (0) 50 (+3) 55 (+1) 55 (-9) 59 (-8)
GET get_analysis_latest_cpe 120 (+20) 120 (+10) 140 (+10) 170 (0) 180 (-20) 190 (-10) 200 (-10) 220 (+10)
GET get_analysis_status 2 (0) 3 (0) 4 (0) 5 (0) 10 (+4) 45 (0) 49 (-3) 51 (-4)
GET get_sbom[sha256:720e4451…a939656247164447] 420 (+30) 470 (+60) 600 (+100) 3,000 (+2,000) 3,000 (+2,000) 3,000 (+1,132) 3,000 (+1,132) 3,627 (+1,759)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 1,000 (+200) 1,000 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 480 (+10) 500 (+10) 500 (0) 600 (0) 600 (0) 700 (+100) 800 (+28) 800 (+28)
GET list_advisory_paginated 400 (-40) 410 (-70) 430 (-60) 480 (-20) 500 (-100) 600 (0) 700 (0) 1,000 (+118)
GET list_importer 2 (0) 3 (0) 3 (0) 4 (0) 7 (0) 39 (+9) 52 (+7) 55 (+8)
GET list_organizations 4 (+1) 5 (+1) 8 (+3) 32 (+22) 42 (+15) 45 (+3) 46 (-7) 48 (-12)
GET list_packages 350 (-110) 380 (-90) 390 (-100) 400 (-100) 410 (-190) 480 (-320) 700 (-100) 800 (-100)
GET list_packages_paginated 360 (-40) 380 (-30) 380 (-40) 390 (-80) 400 (-90) 430 (-70) 470 (-102) 500 (-72)
GET list_products 8 (+3) 9 (+3) 9 (+3) 10 (+1) 13 (+2) 19 (-26) 57 (+5) 59 (+6)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (+97) 2,000 (+97) 2,000 (+97) 2,000 (+97)
GET list_sboms_paginated 3,000 (+2,000) 3,000 (+1,000) 4,000 (+2,000) 4,000 (+2,000) 5,000 (+3,000) 6,000 (+4,000) 7,000 (+4,000) 7,000 (+3,467)
GET list_vulnerabilities 220 (-60) 220 (-90) 260 (-70) 320 (-60) 390 (-20) 430 (0) 470 (0) 476 (-10)
GET list_vulnerabilities_paginated 180 (-30) 190 (-20) 200 (-20) 210 (-20) 270 (0) 280 (0) 290 (0) 300 (+10)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 72 (+12) 74 (+7) 87 (+11) 150 (+40) 180 (+30) 190 (+20) 200 (+30) 206 (+26)
GET search_advisory 700 (-200) 700 (-300) 800 (-200) 800 (-1,200) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (0) 7 (+1) 7 (+1) 8 (+1) 9 (+1) 15 (+5) 57 (+2) 59 (+4)
GET search_purls 3,000 (-3,000) 10,000 (+4,000) 19,000 (+12,000) 20,000 (+13,000) 21,000 (+10,000) 21,658 (+10,658) 21,658 (+9,658) 21,658 (+9,658)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 700 (+100) 700 (0) 800 (+100) 900 (+100) 900 (0) 1,000 (0) 1,000 (0)
Aggregated 300 (-10) 400 (-30) 500 (0) 900 (+100) 2,000 (+1,000) 3,000 (-1,000) 20,000 (+13,000) 21,658 (+9,658)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 76 [200]
GET get_analysis_latest_cpe 80 [200]
GET get_analysis_status 80 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 80 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 79 [200]
GET list_advisory 76 [200]
GET list_advisory_paginated 76 [200]
GET list_importer 76 [200]
GET list_organizations 76 [200]
GET list_packages 76 [200]
GET list_packages_paginated 76 [200]
GET list_products 81 [200]
GET list_sboms 81 [200]
GET list_sboms_paginated 80 [200]
GET list_vulnerabilities 76 [200]
GET list_vulnerabilities_paginated 76 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 79 [200]
GET search_advisory 76 [200]
GET search_exact_purl 81 [200]
GET search_purls 81 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 78 [200]
Aggregated 1,640 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 77 (-23) 0 (0) 13.78 (-0.24) 7 (+1) 22 (0) 0.26 (-0.08) 0.00 (+0.00)
1.1 list_organizations 76 (-24) 0 (0) 12.37 (+3.63) 1 (0) 48 (-12) 0.25 (-0.08) 0.00 (+0.00)
1.2 list_advisory 76 (-24) 0 (0) 479.72 (-4.26) 139 (-153) 827 (+55) 0.25 (-0.08) 0.00 (+0.00)
1.3 list_advisory_paginated 76 (-24) 0 (0) 412.89 (-37.51) 207 (-37) 1201 (+319) 0.25 (-0.08) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 76 (-24) 0 (0) 13.51 (+0.82) 3 (0) 61 (-7) 0.25 (-0.08) 0.00 (+0.00)
1.5 search_advisory 76 (-24) 0 (0) 746.13 (-289.81) 271 (-95) 2386 (+110) 0.25 (-0.08) 0.00 (+0.00)
1.6 list_vulnerabilities 76 (-24) 0 (0) 250.62 (-27.81) 96 (+18) 476 (-10) 0.25 (-0.08) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 76 (-24) 0 (0) 176.61 (-26.60) 68 (0) 303 (+10) 0.25 (-0.08) 0.00 (+0.00)
1.8 list_importer 76 (-24) 0 (0) 5.87 (+0.96) 1 (0) 55 (+5) 0.25 (-0.08) 0.00 (+0.00)
1.9 list_packages 76 (-24) 0 (0) 350.70 (-111.13) 107 (+3) 845 (-100) 0.25 (-0.08) 0.00 (+0.00)
1.10 list_packages_paginated 76 (-24) 0 (0) 335.71 (-32.89) 104 (-7) 510 (-62) 0.25 (-0.08) 0.00 (+0.00)
1.11 search_purls 81 (-24) 0 (0) 9023.93 (+2451.99) 1802 (-2006) 21658 (+9256) 0.27 (-0.08) 0.00 (+0.00)
1.12 search_exact_purl 81 (-19) 0 (0) 8.70 (+1.46) 2 (-1) 59 (+4) 0.27 (-0.06) 0.00 (+0.00)
1.13 list_products 81 (-19) 0 (0) 9.49 (+0.47) 2 (0) 59 (+6) 0.27 (-0.06) 0.00 (+0.00)
1.14 list_sboms 81 (-19) 0 (0) 1274.01 (+68.54) 592 (+4) 2156 (+253) 0.27 (-0.06) 0.00 (+0.00)
1.15 list_sboms_paginated 80 (-20) 0 (0) 2913.45 (+1396.33) 501 (+25) 7313 (+3780) 0.27 (-0.07) 0.00 (+0.00)
1.16 get_analysis_status 80 (-20) 0 (0) 6.41 (+0.72) 1 (0) 51 (-4) 0.27 (-0.07) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 80 (-20) 0 (0) 123.34 (+7.62) 41 (+5) 223 (+12) 0.27 (-0.07) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 80 (-20) 0 (0) 1096.11 (+491.08) 186 (+50) 3627 (+1759) 0.27 (-0.07) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 79 (-21) 0 (0) 78.33 (+16.29) 10 (-1) 206 (+24) 0.26 (-0.07) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 79 (-21) 0 (0) 954.33 (+119.33) 404 (-28) 1375 (+65) 0.26 (-0.07) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 78 (-22) 0 (0) 658.78 (+60.03) 168 (-119) 1082 (+4) 0.26 (-0.07) 0.00 (+0.00)
Aggregated 1,717 (-488) 0 (0) 880.15 (+192.21) 1 (0) 21658 (+9256) 5.72 (-1.63) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 77 (-23) 19208.01 (+4392.79) 8888 (-1328) 32834 (+12902) 0.26 (-0.08) 15.40 (-4.60)
Aggregated 5 (0) 77 (-23) 19208.01 (+4392.79) 8888 (-1328) 32834 (+12902) 0.26 (-0.08) 15.40 (-4.60)

User Metrics