Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-06 03:46:1225-08-06 03:46:1700:00:050 → 5
Maintaining25-08-06 03:46:1725-08-06 03:51:1700:05:005
Decreasing25-08-06 03:51:1725-08-06 03:51:1800:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 50 (-80) 0 12.26 (+1.35) 3 (+1) 56 (-9) 0.17 (-0.27) 0.00 (+0.00)
GET get_analysis_latest_cpe 50 (-82) 0 152.84 (+29.07) 32 (-1) 315 (+14) 0.17 (-0.27) 0.00 (+0.00)
GET get_analysis_status 50 (-82) 0 7.30 (-0.12) 1 (0) 52 (-7) 0.17 (-0.27) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 50 (-82) 0 1355.28 (+390.78) 384 (+136) 3710 (+1747) 0.17 (-0.27) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 (-82) 0 842.28 (-56.87) 356 (-100) 1092 (-414) 0.17 (-0.27) 0.00 (+0.00)
GET list_advisory 50 (-81) 0 442.12 (-30.43) 117 (-154) 762 (-205) 0.17 (-0.27) 0.00 (+0.00)
GET list_advisory_paginated 50 (-81) 0 356.22 (-38.49) 105 (-23) 637 (+8) 0.17 (-0.27) 0.00 (+0.00)
GET list_importer 50 (-79) 0 2.18 (-3.34) 1 (0) 12 (-39) 0.17 (-0.26) 0.00 (+0.00)
GET list_organizations 50 (-81) 0 8.94 (-2.39) 1 (0) 43 (-12) 0.17 (-0.27) 0.00 (+0.00)
GET list_packages 50 (-79) 0 335.44 (-77.72) 75 (-28) 788 (-144) 0.17 (-0.26) 0.00 (+0.00)
GET list_packages_paginated 50 (-79) 0 301.98 (-56.05) 87 (-18) 483 (-122) 0.17 (-0.26) 0.00 (+0.00)
GET list_products 55 (-79) 0 8.04 (-0.70) 4 (+2) 14 (-45) 0.18 (-0.26) 0.00 (+0.00)
GET list_sboms 55 (-79) 0 1292.85 (-164.03) 588 (-8) 1672 (-526) 0.18 (-0.26) 0.00 (+0.00)
GET list_sboms_paginated 50 (-82) 0 2820.40 (+884.16) 463 (+28) 7595 (+3898) 0.17 (-0.27) 0.00 (+0.00)
GET list_vulnerabilities 50 (-79) 0 263.28 (+36.06) 49 (-1) 658 (+330) 0.17 (-0.26) 0.00 (+0.00)
GET list_vulnerabilities_paginated 50 (-79) 0 158.66 (-19.63) 41 (-14) 286 (+6) 0.17 (-0.26) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 (-82) 0 66.48 (-5.74) 13 (+1) 193 (-16) 0.17 (-0.27) 0.00 (+0.00)
GET search_advisory 50 (-80) 0 858.04 (-140.17) 120 (-35) 2227 (-155) 0.17 (-0.27) 0.00 (+0.00)
GET search_exact_purl 55 (-79) 0 7.60 (-1.27) 5 (+4) 12 (-49) 0.18 (-0.26) 0.00 (+0.00)
GET search_purls 55 (-79) 0 18319.14 (+16050.11) 14606 (+13960) 20411 (+14923) 0.18 (-0.26) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 (-81) 0 690.84 (+55.03) 153 (-101) 1186 (+62) 0.17 (-0.27) 0.00 (+0.00)
Aggregated 1070 (-1687) 0 1414.25 (+865.77) 1 (0) 20411 (+14923) 3.57 (-5.62) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (+1) 8 (+1) 9 (+1) 12 (+2) 42 (+24) 51 (-2) 56 (-7) 56 (-9)
GET get_analysis_latest_cpe 160 (+50) 170 (+40) 180 (+40) 200 (+40) 200 (+20) 220 (+10) 315 (+45) 315 (+15)
GET get_analysis_status 2 (0) 3 (0) 3 (-1) 4 (0) 30 (-5) 51 (+4) 52 (-3) 52 (-7)
GET get_sbom[sha256:720e4451…a939656247164447] 900 (+100) 1,000 (0) 1,000 (0) 1,000 (-963) 3,000 (+1,037) 3,000 (+1,037) 3,710 (+1,747) 3,710 (+1,747)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (-100) 900 (0) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-506)
GET list_advisory 450 (0) 470 (-10) 480 (-20) 490 (-110) 700 (+100) 700 (+100) 762 (-38) 762 (-205)
GET list_advisory_paginated 330 (-70) 380 (-40) 410 (-30) 460 (-10) 500 (+20) 500 (+10) 600 (+100) 600 (0)
GET list_importer 2 (0) 2 (0) 2 (-1) 3 (-1) 4 (-3) 5 (-42) 12 (-38) 12 (-39)
GET list_organizations 5 (+1) 6 (+2) 7 (+1) 14 (-4) 25 (-14) 32 (-14) 43 (-9) 43 (-12)
GET list_packages 380 (-20) 380 (-30) 390 (-60) 410 (-60) 440 (-60) 600 (-100) 788 (-112) 788 (-112)
GET list_packages_paginated 320 (-60) 360 (-30) 380 (-30) 410 (-10) 450 (-30) 480 (-10) 480 (-120) 480 (-120)
GET list_products 8 (+2) 9 (+3) 9 (+1) 10 (+1) 11 (-1) 12 (-34) 14 (-42) 14 (-45)
GET list_sboms 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,672 (-328) 1,672 (-328) 1,672 (-328) 1,672 (-328) 1,672 (-328)
GET list_sboms_paginated 3,000 (+1,000) 3,000 (+1,000) 3,000 (+1,000) 4,000 (+1,000) 4,000 (+1,000) 6,000 (+3,000) 7,595 (+4,595) 7,595 (+3,898)
GET list_vulnerabilities 230 (0) 240 (-10) 340 (+60) 430 (+140) 470 (+180) 600 (+300) 658 (+348) 658 (+330)
GET list_vulnerabilities_paginated 170 (-20) 200 (+10) 210 (+10) 210 (0) 230 (+10) 260 (+10) 286 (+16) 286 (+6)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 66 (-1) 74 (0) 80 (-8) 87 (-23) 130 (-30) 170 (-10) 190 (0) 190 (-19)
GET search_advisory 700 (-100) 800 (-200) 900 (-100) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 7 (+3) 7 (+3) 8 (+3) 9 (+2) 10 (-32) 10 (-38) 12 (-45) 12 (-49)
GET search_purls 19,000 (+17,000) 19,000 (+16,000) 19,000 (+16,000) 19,000 (+15,000) 20,000 (+16,000) 20,000 (+16,000) 20,000 (+15,000) 20,000 (+15,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (+100) 700 (0) 800 (+100) 900 (+100) 1,000 (+100) 1,000 (+100) 1,000 (0) 1,000 (0)
Aggregated 250 (-50) 400 (-20) 600 (0) 900 (0) 2,000 (0) 16,000 (+14,000) 19,000 (+15,000) 20,000 (+15,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 50 [200]
GET get_analysis_latest_cpe 50 [200]
GET get_analysis_status 50 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 50 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 [200]
GET list_advisory 50 [200]
GET list_advisory_paginated 50 [200]
GET list_importer 50 [200]
GET list_organizations 50 [200]
GET list_packages 50 [200]
GET list_packages_paginated 50 [200]
GET list_products 55 [200]
GET list_sboms 55 [200]
GET list_sboms_paginated 50 [200]
GET list_vulnerabilities 50 [200]
GET list_vulnerabilities_paginated 50 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 [200]
GET search_advisory 50 [200]
GET search_exact_purl 55 [200]
GET search_purls 55 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 [200]
Aggregated 1,070 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 50 (-81) 0 (0) 12.98 (-0.53) 6 (-2) 20 (-4) 0.17 (-0.27) 0.00 (+0.00)
1.1 list_organizations 50 (-81) 0 (0) 9.08 (-2.34) 1 (0) 43 (-12) 0.17 (-0.27) 0.00 (+0.00)
1.2 list_advisory 50 (-81) 0 (0) 442.16 (-30.47) 117 (-154) 762 (-205) 0.17 (-0.27) 0.00 (+0.00)
1.3 list_advisory_paginated 50 (-81) 0 (0) 356.28 (-38.49) 105 (-23) 638 (+9) 0.17 (-0.27) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 50 (-80) 0 (0) 12.28 (+1.30) 3 (0) 57 (-11) 0.17 (-0.27) 0.00 (+0.00)
1.5 search_advisory 50 (-80) 0 (0) 858.06 (-140.20) 120 (-35) 2227 (-155) 0.17 (-0.27) 0.00 (+0.00)
1.6 list_vulnerabilities 50 (-79) 0 (0) 263.32 (+36.04) 49 (-1) 658 (+330) 0.17 (-0.26) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 50 (-79) 0 (0) 158.70 (-19.65) 41 (-14) 286 (+6) 0.17 (-0.26) 0.00 (+0.00)
1.8 list_importer 50 (-79) 0 (0) 2.18 (-3.39) 1 (0) 12 (-39) 0.17 (-0.26) 0.00 (+0.00)
1.9 list_packages 50 (-79) 0 (0) 335.48 (-77.77) 75 (-28) 788 (-144) 0.17 (-0.26) 0.00 (+0.00)
1.10 list_packages_paginated 50 (-79) 0 (0) 302.00 (-56.13) 87 (-18) 483 (-122) 0.17 (-0.26) 0.00 (+0.00)
1.11 search_purls 55 (-79) 0 (0) 18319.18 (+16050.11) 14606 (+13960) 20411 (+14923) 0.18 (-0.26) 0.00 (+0.00)
1.12 search_exact_purl 55 (-79) 0 (0) 7.65 (-1.24) 5 (+4) 12 (-49) 0.18 (-0.26) 0.00 (+0.00)
1.13 list_products 55 (-79) 0 (0) 8.05 (-0.73) 4 (+2) 14 (-46) 0.18 (-0.26) 0.00 (+0.00)
1.14 list_sboms 55 (-79) 0 (0) 1292.87 (-164.05) 588 (-8) 1672 (-526) 0.18 (-0.26) 0.00 (+0.00)
1.15 list_sboms_paginated 50 (-82) 0 (0) 2820.52 (+884.22) 463 (+28) 7595 (+3898) 0.17 (-0.27) 0.00 (+0.00)
1.16 get_analysis_status 50 (-82) 0 (0) 7.36 (-0.09) 1 (0) 52 (-7) 0.17 (-0.27) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 50 (-82) 0 (0) 152.88 (+29.06) 32 (-1) 315 (+14) 0.17 (-0.27) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 50 (-82) 0 (0) 1355.32 (+390.75) 384 (+136) 3710 (+1747) 0.17 (-0.27) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 (-82) 0 (0) 66.52 (-5.78) 13 (+1) 193 (-16) 0.17 (-0.27) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 (-82) 0 (0) 842.30 (-56.93) 356 (-100) 1092 (-414) 0.17 (-0.27) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 (-81) 0 (0) 690.94 (+55.06) 153 (-101) 1186 (+62) 0.17 (-0.27) 0.00 (+0.00)
Aggregated 1,120 (-1,768) 0 (0) 1351.11 (+827.52) 1 (0) 20411 (+14923) 3.73 (-5.89) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 50 (-81) 28262.76 (+16830.31) 18552 (+12745) 33701 (+17576) 0.17 (-0.27) 10.00 (-16.20)
Aggregated 5 (0) 50 (-81) 28262.76 (+16830.31) 18552 (+12745) 33701 (+17576) 0.17 (-0.27) 10.00 (-16.20)

User Metrics