Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-05 03:47:3325-08-05 03:47:3800:00:050 → 5
Maintaining25-08-05 03:47:3825-08-05 03:52:3800:05:005
Decreasing25-08-05 03:52:3825-08-05 03:52:3900:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 130 (+54) 0 10.91 (-2.55) 2 (-1) 65 (+6) 0.43 (+0.18) 0.00 (+0.00)
GET get_analysis_latest_cpe 132 (+52) 0 123.77 (+0.49) 33 (-8) 301 (+78) 0.44 (+0.17) 0.00 (+0.00)
GET get_analysis_status 132 (+52) 0 7.42 (+1.07) 1 (0) 59 (+8) 0.44 (+0.17) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 132 (+52) 0 964.50 (-131.51) 248 (+62) 1963 (-1664) 0.44 (+0.17) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 132 (+53) 0 899.15 (-55.11) 456 (+52) 1506 (+131) 0.44 (+0.18) 0.00 (+0.00)
GET list_advisory 131 (+55) 0 472.55 (-7.11) 271 (+132) 967 (+140) 0.44 (+0.18) 0.00 (+0.00)
GET list_advisory_paginated 131 (+55) 0 394.71 (-18.11) 128 (-79) 629 (-572) 0.44 (+0.18) 0.00 (+0.00)
GET list_importer 129 (+53) 0 5.52 (-0.34) 1 (0) 51 (-4) 0.43 (+0.18) 0.00 (+0.00)
GET list_organizations 131 (+55) 0 11.33 (-0.91) 1 (0) 55 (+7) 0.44 (+0.18) 0.00 (+0.00)
GET list_packages 129 (+53) 0 413.16 (+62.50) 103 (-4) 932 (+87) 0.43 (+0.18) 0.00 (+0.00)
GET list_packages_paginated 129 (+53) 0 358.03 (+22.37) 105 (+1) 605 (+95) 0.43 (+0.18) 0.00 (+0.00)
GET list_products 134 (+53) 0 8.74 (-0.76) 2 (0) 59 (0) 0.45 (+0.18) 0.00 (+0.00)
GET list_sboms 134 (+53) 0 1456.89 (+182.90) 596 (+4) 2198 (+42) 0.45 (+0.18) 0.00 (+0.00)
GET list_sboms_paginated 132 (+52) 0 1936.24 (-977.15) 435 (-66) 3697 (-3616) 0.44 (+0.17) 0.00 (+0.00)
GET list_vulnerabilities 129 (+53) 0 227.22 (-23.34) 50 (-46) 328 (-148) 0.43 (+0.18) 0.00 (+0.00)
GET list_vulnerabilities_paginated 129 (+53) 0 178.29 (+1.73) 55 (-13) 280 (-23) 0.43 (+0.18) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 132 (+53) 0 72.22 (-6.06) 12 (+2) 209 (+3) 0.44 (+0.18) 0.00 (+0.00)
GET search_advisory 130 (+54) 0 998.21 (+252.13) 155 (-116) 2382 (-4) 0.43 (+0.18) 0.00 (+0.00)
GET search_exact_purl 134 (+53) 0 8.87 (+0.24) 1 (-1) 61 (+2) 0.45 (+0.18) 0.00 (+0.00)
GET search_purls 134 (+53) 0 2269.04 (-6754.84) 646 (-1156) 5488 (-16170) 0.45 (+0.18) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 131 (+53) 0 635.81 (-22.91) 254 (+87) 1124 (+42) 0.44 (+0.18) 0.00 (+0.00)
Aggregated 2757 (+1117) 0 548.48 (-373.00) 1 (0) 5488 (-16170) 9.19 (+3.72) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (-1) 8 (-2) 10 (-3) 18 (-32) 53 (-2) 63 (+8) 65 (+6)
GET get_analysis_latest_cpe 110 (-10) 130 (+10) 140 (0) 160 (-10) 180 (0) 210 (+20) 270 (+70) 300 (+80)
GET get_analysis_status 2 (0) 3 (0) 4 (0) 4 (-1) 35 (+25) 47 (+2) 55 (+6) 59 (+8)
GET get_sbom[sha256:720e4451…a939656247164447] 800 (+380) 1,000 (+530) 1,000 (+400) 1,963 (-1,037) 1,963 (-1,037) 1,963 (-1,037) 1,963 (-1,037) 1,963 (-1,664)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,506 (+506)
GET list_advisory 450 (-30) 480 (-20) 500 (0) 600 (0) 600 (0) 600 (-100) 800 (0) 967 (+167)
GET list_advisory_paginated 400 (0) 420 (+10) 440 (+10) 470 (-10) 480 (-20) 490 (-110) 500 (-200) 600 (-400)
GET list_importer 2 (0) 2 (-1) 3 (0) 4 (0) 7 (0) 47 (+8) 50 (-2) 51 (-4)
GET list_organizations 4 (0) 4 (-1) 6 (-2) 18 (-14) 39 (-3) 46 (+1) 52 (+6) 55 (+7)
GET list_packages 400 (+50) 410 (+30) 450 (+60) 470 (+70) 500 (+90) 700 (+220) 900 (+200) 900 (+100)
GET list_packages_paginated 380 (+20) 390 (+10) 410 (+30) 420 (+30) 480 (+80) 490 (+60) 600 (+130) 600 (+100)
GET list_products 6 (-2) 6 (-3) 8 (-1) 9 (-1) 12 (-1) 46 (+27) 56 (-1) 59 (0)
GET list_sboms 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET list_sboms_paginated 2,000 (-1,000) 2,000 (-1,000) 2,000 (-2,000) 3,000 (-1,000) 3,000 (-2,000) 3,000 (-3,000) 3,000 (-4,000) 3,697 (-3,303)
GET list_vulnerabilities 230 (+10) 250 (+30) 280 (+20) 290 (-30) 290 (-100) 300 (-130) 310 (-160) 328 (-148)
GET list_vulnerabilities_paginated 190 (+10) 190 (0) 200 (0) 210 (0) 220 (-50) 250 (-30) 270 (-20) 280 (-20)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 67 (-5) 74 (0) 88 (+1) 110 (-40) 160 (-20) 180 (-10) 190 (-10) 209 (+3)
GET search_advisory 800 (+100) 1,000 (+300) 1,000 (+200) 1,000 (+200) 2,000 (+1,000) 2,000 (+1,000) 2,000 (0) 2,000 (0)
GET search_exact_purl 4 (-2) 4 (-3) 5 (-2) 7 (-1) 42 (+33) 48 (+33) 57 (0) 61 (+2)
GET search_purls 2,000 (-1,000) 3,000 (-7,000) 3,000 (-16,000) 4,000 (-16,000) 4,000 (-17,000) 4,000 (-17,658) 5,000 (-16,658) 5,000 (-16,658)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 700 (0) 700 (0) 800 (0) 900 (0) 900 (0) 1,000 (0) 1,000 (0)
Aggregated 300 (0) 420 (+20) 600 (+100) 900 (0) 2,000 (0) 2,000 (-1,000) 4,000 (-16,000) 5,000 (-16,658)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 130 [200]
GET get_analysis_latest_cpe 132 [200]
GET get_analysis_status 132 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 132 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 132 [200]
GET list_advisory 131 [200]
GET list_advisory_paginated 131 [200]
GET list_importer 129 [200]
GET list_organizations 131 [200]
GET list_packages 129 [200]
GET list_packages_paginated 129 [200]
GET list_products 134 [200]
GET list_sboms 134 [200]
GET list_sboms_paginated 132 [200]
GET list_vulnerabilities 129 [200]
GET list_vulnerabilities_paginated 129 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 132 [200]
GET search_advisory 130 [200]
GET search_exact_purl 134 [200]
GET search_purls 134 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 131 [200]
Aggregated 2,757 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 131 (+54) 0 (0) 13.51 (-0.27) 8 (+1) 24 (+2) 0.44 (+0.18) 0.00 (+0.00)
1.1 list_organizations 131 (+55) 0 (0) 11.42 (-0.95) 1 (0) 55 (+7) 0.44 (+0.18) 0.00 (+0.00)
1.2 list_advisory 131 (+55) 0 (0) 472.63 (-7.09) 271 (+132) 967 (+140) 0.44 (+0.18) 0.00 (+0.00)
1.3 list_advisory_paginated 131 (+55) 0 (0) 394.77 (-18.12) 128 (-79) 629 (-572) 0.44 (+0.18) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 130 (+54) 0 (0) 10.98 (-2.53) 3 (0) 68 (+7) 0.43 (+0.18) 0.00 (+0.00)
1.5 search_advisory 130 (+54) 0 (0) 998.26 (+252.13) 155 (-116) 2382 (-4) 0.43 (+0.18) 0.00 (+0.00)
1.6 list_vulnerabilities 129 (+53) 0 (0) 227.28 (-23.34) 50 (-46) 328 (-148) 0.43 (+0.18) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 129 (+53) 0 (0) 178.35 (+1.74) 55 (-13) 280 (-23) 0.43 (+0.18) 0.00 (+0.00)
1.8 list_importer 129 (+53) 0 (0) 5.57 (-0.30) 1 (0) 51 (-4) 0.43 (+0.18) 0.00 (+0.00)
1.9 list_packages 129 (+53) 0 (0) 413.25 (+62.55) 103 (-4) 932 (+87) 0.43 (+0.18) 0.00 (+0.00)
1.10 list_packages_paginated 129 (+53) 0 (0) 358.13 (+22.42) 105 (+1) 605 (+95) 0.43 (+0.18) 0.00 (+0.00)
1.11 search_purls 134 (+53) 0 (0) 2269.07 (-6754.86) 646 (-1156) 5488 (-16170) 0.45 (+0.18) 0.00 (+0.00)
1.12 search_exact_purl 134 (+53) 0 (0) 8.90 (+0.19) 1 (-1) 61 (+2) 0.45 (+0.18) 0.00 (+0.00)
1.13 list_products 134 (+53) 0 (0) 8.78 (-0.71) 2 (0) 60 (+1) 0.45 (+0.18) 0.00 (+0.00)
1.14 list_sboms 134 (+53) 0 (0) 1456.93 (+182.91) 596 (+4) 2198 (+42) 0.45 (+0.18) 0.00 (+0.00)
1.15 list_sboms_paginated 132 (+52) 0 (0) 1936.30 (-977.15) 435 (-66) 3697 (-3616) 0.44 (+0.17) 0.00 (+0.00)
1.16 get_analysis_status 132 (+52) 0 (0) 7.45 (+1.03) 1 (0) 59 (+8) 0.44 (+0.17) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 132 (+52) 0 (0) 123.82 (+0.48) 33 (-8) 301 (+78) 0.44 (+0.17) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 132 (+52) 0 (0) 964.57 (-131.54) 248 (+62) 1963 (-1664) 0.44 (+0.17) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 132 (+53) 0 (0) 72.30 (-6.03) 12 (+2) 209 (+3) 0.44 (+0.18) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 132 (+53) 0 (0) 899.23 (-55.09) 456 (+52) 1506 (+131) 0.44 (+0.18) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 131 (+53) 0 (0) 635.88 (-22.90) 254 (+86) 1124 (+42) 0.44 (+0.18) 0.00 (+0.00)
Aggregated 2,888 (+1,171) 0 (0) 523.60 (-356.55) 1 (0) 5488 (-16170) 9.63 (+3.90) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 131 (+54) 11432.45 (-7775.56) 5807 (-3081) 16125 (-16709) 0.44 (+0.18) 26.20 (+10.80)
Aggregated 5 (0) 131 (+54) 11432.45 (-7775.56) 5807 (-3081) 16125 (-16709) 0.44 (+0.18) 26.20 (+10.80)

User Metrics