Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-08 03:45:4525-08-08 03:45:5000:00:050 → 5
Maintaining25-08-08 03:45:5025-08-08 03:50:5000:05:005
Decreasing25-08-08 03:50:5025-08-08 03:50:5600:00:060 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 65 (-45) 0 12.48 (-1.65) 3 (+1) 56 (-19) 0.22 (-0.15) 0.00 (+0.00)
GET get_analysis_latest_cpe 65 (-45) 0 134.78 (-2.67) 33 (+1) 299 (+4) 0.22 (-0.15) 0.00 (+0.00)
GET get_analysis_status 65 (-45) 0 6.18 (+0.21) 1 (0) 54 (+1) 0.22 (-0.15) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 65 (-45) 0 941.58 (+88.12) 240 (+33) 1863 (-118) 0.22 (-0.15) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (-45) 0 805.63 (+17.29) 355 (-61) 1227 (+44) 0.22 (-0.15) 0.00 (+0.00)
GET list_advisory 65 (-45) 0 486.88 (-22.00) 277 (+113) 880 (+26) 0.22 (-0.15) 0.00 (+0.00)
GET list_advisory_paginated 65 (-45) 0 408.57 (-30.34) 211 (+80) 725 (-68) 0.22 (-0.15) 0.00 (+0.00)
GET list_importer 65 (-45) 0 2.97 (-0.68) 1 (0) 47 (+2) 0.22 (-0.15) 0.00 (+0.00)
GET list_organizations 65 (-45) 0 7.88 (-0.79) 1 (0) 45 (-4) 0.22 (-0.15) 0.00 (+0.00)
GET list_packages 65 (-45) 0 436.57 (+8.70) 103 (+17) 943 (+52) 0.22 (-0.15) 0.00 (+0.00)
GET list_packages_paginated 65 (-45) 0 365.43 (+14.91) 91 (-2) 589 (-83) 0.22 (-0.15) 0.00 (+0.00)
GET list_products 65 (-50) 0 7.42 (-0.06) 4 (0) 12 (-5) 0.22 (-0.17) 0.00 (+0.00)
GET list_sboms 65 (-50) 0 1387.77 (+231.76) 571 (-6) 2118 (+539) 0.22 (-0.17) 0.00 (+0.00)
GET list_sboms_paginated 65 (-46) 0 1977.66 (+604.99) 484 (-1) 3917 (+1119) 0.22 (-0.15) 0.00 (+0.00)
GET list_vulnerabilities 65 (-45) 0 280.65 (+54.73) 41 (-11) 577 (+213) 0.22 (-0.15) 0.00 (+0.00)
GET list_vulnerabilities_paginated 65 (-45) 0 194.02 (+5.57) 41 (+1) 291 (-7) 0.22 (-0.15) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (-45) 0 77.26 (+19.04) 10 (-1) 205 (-60) 0.22 (-0.15) 0.00 (+0.00)
GET search_advisory 65 (-45) 0 920.05 (+71.89) 157 (+8) 2014 (-281) 0.22 (-0.15) 0.00 (+0.00)
GET search_exact_purl 65 (-50) 0 29.17 (+24.47) 9 (+7) 33 (-29) 0.22 (-0.17) 0.00 (+0.00)
GET search_purls 70 (-45) 0 13613.43 (+8188.79) 6325 (+4100) 15321 (+8961) 0.23 (-0.15) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (-45) 0 572.72 (-25.98) 251 (-30) 1112 (-206) 0.22 (-0.15) 0.00 (+0.00)
Aggregated 1370 (-961) 0 1125.22 (+477.07) 1 (0) 15321 (+8961) 4.57 (-3.20) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (-1) 8 (0) 9 (-1) 12 (-3) 46 (-3) 54 (-1) 55 (-3) 56 (-19)
GET get_analysis_latest_cpe 120 (-20) 140 (-20) 160 (-20) 200 (0) 220 (+10) 270 (+50) 290 (0) 299 (+4)
GET get_analysis_status 2 (0) 2 (0) 3 (0) 4 (0) 5 (-1) 49 (0) 50 (-3) 54 (+1)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (0) 1,000 (+200) 1,000 (+100) 1,863 (+863) 1,863 (-118) 1,863 (-118) 1,863 (-118) 1,863 (-118)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 900 (+100) 900 (0) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 480 (-10) 490 (-10) 500 (0) 500 (-100) 600 (-100) 700 (-100) 800 (0) 880 (+26)
GET list_advisory_paginated 400 (-60) 420 (-50) 450 (-40) 470 (-30) 490 (-10) 500 (-100) 700 (0) 700 (-93)
GET list_importer 2 (0) 2 (-1) 3 (0) 3 (-1) 4 (-2) 4 (-6) 18 (-26) 47 (+2)
GET list_organizations 3 (-1) 4 (0) 5 (-1) 10 (+2) 33 (+4) 36 (-4) 42 (-4) 45 (-4)
GET list_packages 410 (-10) 430 (+10) 440 (-40) 480 (-20) 700 (+100) 800 (+100) 900 (+9) 900 (+9)
GET list_packages_paginated 400 (+10) 410 (0) 420 (0) 460 (-10) 490 (0) 500 (0) 589 (+89) 589 (-83)
GET list_products 7 (+1) 8 (+2) 9 (+2) 10 (0) 11 (-2) 11 (-4) 12 (-5) 12 (-5)
GET list_sboms 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+421) 2,000 (+421) 2,000 (+421)
GET list_sboms_paginated 2,000 (+1,000) 2,000 (+1,000) 2,000 (0) 3,000 (+1,000) 3,000 (+1,000) 3,000 (+1,000) 3,917 (+1,119) 3,917 (+1,119)
GET list_vulnerabilities 290 (+50) 310 (+50) 340 (+70) 360 (+70) 390 (+90) 420 (+100) 577 (+227) 577 (+217)
GET list_vulnerabilities_paginated 200 (+10) 200 (0) 230 (+20) 250 (+30) 270 (0) 280 (0) 280 (-18) 290 (-8)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 74 (+33) 83 (+22) 99 (+29) 110 (+24) 160 (+50) 180 (+10) 200 (0) 205 (-60)
GET search_advisory 800 (+100) 900 (+100) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 31 (+27) 31 (+27) 32 (+27) 32 (+27) 33 (+28) 33 (+27) 33 (+25) 33 (-29)
GET search_purls 14,000 (+9,000) 14,000 (+8,000) 14,000 (+8,000) 14,000 (+8,000) 15,000 (+9,000) 15,000 (+9,000) 15,000 (+9,000) 15,000 (+9,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 600 (0) 600 (-100) 700 (0) 800 (0) 800 (0) 1,000 (+100) 1,000 (0)
Aggregated 330 (+30) 430 (-10) 600 (0) 900 (+100) 2,000 (+1,000) 7,000 (+4,000) 14,000 (+8,000) 15,000 (+9,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 65 [200]
GET get_analysis_latest_cpe 65 [200]
GET get_analysis_status 65 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 65 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 [200]
GET list_advisory 65 [200]
GET list_advisory_paginated 65 [200]
GET list_importer 65 [200]
GET list_organizations 65 [200]
GET list_packages 65 [200]
GET list_packages_paginated 65 [200]
GET list_products 65 [200]
GET list_sboms 65 [200]
GET list_sboms_paginated 65 [200]
GET list_vulnerabilities 65 [200]
GET list_vulnerabilities_paginated 65 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 [200]
GET search_advisory 65 [200]
GET search_exact_purl 65 [200]
GET search_purls 70 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 [200]
Aggregated 1,370 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 65 (-45) 0 (0) 14.02 (+0.21) 8 (+1) 21 (-5) 0.22 (-0.15) 0.00 (+0.00)
1.1 list_organizations 65 (-45) 0 (0) 8.05 (-0.85) 2 (+1) 45 (-4) 0.22 (-0.15) 0.00 (+0.00)
1.2 list_advisory 65 (-45) 0 (0) 486.94 (-22.03) 277 (+113) 880 (+26) 0.22 (-0.15) 0.00 (+0.00)
1.3 list_advisory_paginated 65 (-45) 0 (0) 408.62 (-30.32) 211 (+80) 725 (-68) 0.22 (-0.15) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 65 (-45) 0 (0) 12.52 (-1.67) 3 (+1) 56 (-19) 0.22 (-0.15) 0.00 (+0.00)
1.5 search_advisory 65 (-45) 0 (0) 920.05 (+71.87) 157 (+8) 2014 (-281) 0.22 (-0.15) 0.00 (+0.00)
1.6 list_vulnerabilities 65 (-45) 0 (0) 280.72 (+54.74) 41 (-11) 577 (+213) 0.22 (-0.15) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 65 (-45) 0 (0) 194.03 (+5.51) 41 (0) 291 (-7) 0.22 (-0.15) 0.00 (+0.00)
1.8 list_importer 65 (-45) 0 (0) 2.98 (-0.68) 1 (0) 47 (+2) 0.22 (-0.15) 0.00 (+0.00)
1.9 list_packages 65 (-45) 0 (0) 436.63 (+8.69) 103 (+17) 943 (+52) 0.22 (-0.15) 0.00 (+0.00)
1.10 list_packages_paginated 65 (-45) 0 (0) 365.46 (+14.87) 91 (-2) 590 (-82) 0.22 (-0.15) 0.00 (+0.00)
1.11 search_purls 70 (-45) 0 (0) 13613.51 (+8188.85) 6325 (+4100) 15321 (+8961) 0.23 (-0.15) 0.00 (+0.00)
1.12 search_exact_purl 65 (-50) 0 (0) 29.20 (+24.47) 9 (+7) 33 (-29) 0.22 (-0.17) 0.00 (+0.00)
1.13 list_products 65 (-50) 0 (0) 7.43 (-0.06) 4 (0) 12 (-5) 0.22 (-0.17) 0.00 (+0.00)
1.14 list_sboms 65 (-50) 0 (0) 1387.78 (+231.75) 571 (-6) 2118 (+538) 0.22 (-0.17) 0.00 (+0.00)
1.15 list_sboms_paginated 65 (-46) 0 (0) 1977.71 (+605.03) 484 (-1) 3917 (+1119) 0.22 (-0.15) 0.00 (+0.00)
1.16 get_analysis_status 65 (-45) 0 (0) 6.23 (+0.19) 1 (0) 54 (+1) 0.22 (-0.15) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 65 (-45) 0 (0) 134.82 (-2.72) 33 (+1) 299 (+4) 0.22 (-0.15) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 65 (-45) 0 (0) 941.62 (+88.09) 240 (+33) 1863 (-118) 0.22 (-0.15) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (-45) 0 (0) 77.29 (+19.02) 10 (-1) 205 (-61) 0.22 (-0.15) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (-45) 0 (0) 805.68 (+17.26) 355 (-61) 1227 (+44) 0.22 (-0.15) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (-45) 0 (0) 572.86 (-25.89) 251 (-30) 1112 (-206) 0.22 (-0.15) 0.00 (+0.00)
Aggregated 1,435 (-1,006) 0 (0) 1074.26 (+455.31) 1 (0) 15321 (+8961) 4.78 (-3.35) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 65 (-45) 22463.17 (+9129.63) 10052 (+3937) 25831 (+8471) 0.22 (-0.15) 13.00 (-9.00)
Aggregated 5 (0) 65 (-45) 22463.17 (+9129.63) 10052 (+3937) 25831 (+8471) 0.22 (-0.15) 13.00 (-9.00)

User Metrics