Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-09 03:31:1325-08-09 03:31:1800:00:050 → 5
Maintaining25-08-09 03:31:1825-08-09 03:36:1800:05:005
Decreasing25-08-09 03:36:1825-08-09 03:36:1800:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 60 (-5) 0 14.12 (+1.64) 3 (0) 64 (+8) 0.20 (-0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 60 (-5) 0 125.18 (-9.60) 29 (-4) 225 (-74) 0.20 (-0.02) 0.00 (+0.00)
GET get_analysis_status 60 (-5) 0 5.37 (-0.82) 1 (0) 48 (-6) 0.20 (-0.02) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 60 (-5) 0 761.35 (-180.23) 232 (-8) 1773 (-90) 0.20 (-0.02) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 60 (-5) 0 776.08 (-29.55) 376 (+21) 1030 (-197) 0.20 (-0.02) 0.00 (+0.00)
GET list_advisory 60 (-5) 0 517.88 (+31.01) 380 (+103) 893 (+13) 0.20 (-0.02) 0.00 (+0.00)
GET list_advisory_paginated 60 (-5) 0 452.55 (+43.98) 190 (-21) 630 (-95) 0.20 (-0.02) 0.00 (+0.00)
GET list_importer 55 (-10) 0 3.42 (+0.45) 1 (0) 37 (-10) 0.18 (-0.03) 0.00 (+0.00)
GET list_organizations 60 (-5) 0 6.73 (-1.14) 1 (0) 52 (+7) 0.20 (-0.02) 0.00 (+0.00)
GET list_packages 55 (-10) 0 485.29 (+48.72) 142 (+39) 906 (-37) 0.18 (-0.03) 0.00 (+0.00)
GET list_packages_paginated 55 (-10) 0 384.11 (+18.68) 102 (+11) 536 (-53) 0.18 (-0.03) 0.00 (+0.00)
GET list_products 60 (-5) 0 8.68 (+1.27) 4 (0) 49 (+37) 0.20 (-0.02) 0.00 (+0.00)
GET list_sboms 60 (-5) 0 1068.08 (-319.69) 533 (-38) 1546 (-572) 0.20 (-0.02) 0.00 (+0.00)
GET list_sboms_paginated 60 (-5) 0 1285.95 (-691.71) 519 (+35) 2997 (-920) 0.20 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities 60 (-5) 0 240.87 (-39.78) 60 (+19) 402 (-175) 0.20 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities_paginated 60 (-5) 0 178.83 (-15.18) 51 (+10) 283 (-8) 0.20 (-0.02) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 60 (-5) 0 65.47 (-11.79) 11 (+1) 271 (+66) 0.20 (-0.02) 0.00 (+0.00)
GET search_advisory 60 (-5) 0 1278.18 (+358.14) 168 (+11) 1956 (-58) 0.20 (-0.02) 0.00 (+0.00)
GET search_exact_purl 60 (-5) 0 8.88 (-20.29) 5 (-4) 51 (+18) 0.20 (-0.02) 0.00 (+0.00)
GET search_purls 60 (-10) 0 17041.15 (+3427.72) 7331 (+1006) 19382 (+4061) 0.20 (-0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 60 (-5) 0 550.98 (-21.74) 238 (-13) 881 (-231) 0.20 (-0.02) 0.00 (+0.00)
Aggregated 1245 (-125) 0 1213.80 (+88.58) 1 (0) 19382 (+4061) 4.15 (-0.42) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (+1) 8 (0) 9 (0) 12 (0) 45 (-1) 50 (-4) 56 (+1) 64 (+8)
GET get_analysis_latest_cpe 120 (0) 130 (-10) 150 (-10) 180 (-20) 190 (-30) 220 (-50) 220 (-70) 225 (-74)
GET get_analysis_status 2 (0) 2 (0) 2 (-1) 4 (0) 7 (+2) 34 (-15) 47 (-3) 48 (-6)
GET get_sbom[sha256:720e4451…a939656247164447] 600 (-100) 700 (-300) 800 (-200) 1,000 (-863) 1,773 (-90) 1,773 (-90) 1,773 (-90) 1,773 (-90)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 900 (0) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 490 (+10) 500 (+10) 500 (0) 600 (+100) 600 (0) 700 (0) 800 (0) 893 (+13)
GET list_advisory_paginated 480 (+80) 480 (+60) 500 (+50) 500 (+30) 600 (+110) 600 (+100) 600 (-100) 600 (-100)
GET list_importer 2 (0) 2 (0) 3 (0) 4 (+1) 6 (+2) 8 (+4) 8 (-10) 37 (-10)
GET list_organizations 3 (0) 3 (-1) 4 (-1) 6 (-4) 12 (-21) 40 (+4) 49 (+7) 52 (+7)
GET list_packages 460 (+50) 470 (+40) 500 (+60) 600 (+120) 700 (0) 800 (0) 900 (0) 900 (0)
GET list_packages_paginated 410 (+10) 420 (+10) 440 (+20) 480 (+20) 500 (+10) 500 (0) 500 (-89) 500 (-89)
GET list_products 7 (0) 7 (-1) 8 (-1) 10 (0) 11 (0) 12 (+1) 47 (+35) 49 (+37)
GET list_sboms 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,546 (-454)
GET list_sboms_paginated 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,917) 2,997 (-920)
GET list_vulnerabilities 250 (-40) 260 (-50) 290 (-50) 300 (-60) 320 (-70) 350 (-70) 370 (-207) 400 (-177)
GET list_vulnerabilities_paginated 180 (-20) 180 (-20) 190 (-40) 200 (-50) 220 (-50) 250 (-30) 270 (-10) 280 (-10)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 42 (-32) 60 (-23) 75 (-24) 110 (0) 150 (-10) 170 (-10) 200 (0) 270 (+65)
GET search_advisory 1,000 (+200) 1,000 (+100) 1,956 (+956) 1,956 (+956) 1,956 (-44) 1,956 (-44) 1,956 (-44) 1,956 (-44)
GET search_exact_purl 7 (-24) 7 (-24) 7 (-25) 8 (-24) 8 (-25) 11 (-22) 50 (+17) 51 (+18)
GET search_purls 17,000 (+3,000) 18,000 (+4,000) 18,000 (+4,000) 19,000 (+5,000) 19,000 (+4,000) 19,000 (+4,000) 19,000 (+4,000) 19,000 (+4,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 500 (-100) 600 (0) 600 (0) 700 (0) 700 (-100) 800 (0) 881 (-119) 881 (-119)
Aggregated 320 (-10) 460 (+30) 600 (0) 900 (0) 1,000 (-1,000) 2,000 (-5,000) 19,000 (+5,000) 19,000 (+4,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 60 [200]
GET get_analysis_latest_cpe 60 [200]
GET get_analysis_status 60 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 60 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 60 [200]
GET list_advisory 60 [200]
GET list_advisory_paginated 60 [200]
GET list_importer 55 [200]
GET list_organizations 60 [200]
GET list_packages 55 [200]
GET list_packages_paginated 55 [200]
GET list_products 60 [200]
GET list_sboms 60 [200]
GET list_sboms_paginated 60 [200]
GET list_vulnerabilities 60 [200]
GET list_vulnerabilities_paginated 60 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 60 [200]
GET search_advisory 60 [200]
GET search_exact_purl 60 [200]
GET search_purls 60 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 60 [200]
Aggregated 1,245 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 60 (-5) 0 (0) 13.82 (-0.20) 8 (0) 19 (-2) 0.20 (-0.02) 0.00 (+0.00)
1.1 list_organizations 60 (-5) 0 (0) 6.90 (-1.15) 1 (-1) 52 (+7) 0.20 (-0.02) 0.00 (+0.00)
1.2 list_advisory 60 (-5) 0 (0) 518.00 (+31.06) 380 (+103) 893 (+13) 0.20 (-0.02) 0.00 (+0.00)
1.3 list_advisory_paginated 60 (-5) 0 (0) 452.67 (+44.05) 191 (-20) 631 (-94) 0.20 (-0.02) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 60 (-5) 0 (0) 14.12 (+1.59) 3 (0) 64 (+8) 0.20 (-0.02) 0.00 (+0.00)
1.5 search_advisory 60 (-5) 0 (0) 1278.30 (+358.25) 168 (+11) 1956 (-58) 0.20 (-0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 60 (-5) 0 (0) 240.95 (-39.77) 60 (+19) 402 (-175) 0.20 (-0.02) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 60 (-5) 0 (0) 178.88 (-15.15) 51 (+10) 283 (-8) 0.20 (-0.02) 0.00 (+0.00)
1.8 list_importer 55 (-10) 0 (0) 3.47 (+0.49) 1 (0) 37 (-10) 0.18 (-0.03) 0.00 (+0.00)
1.9 list_packages 55 (-10) 0 (0) 485.31 (+48.68) 142 (+39) 906 (-37) 0.18 (-0.03) 0.00 (+0.00)
1.10 list_packages_paginated 55 (-10) 0 (0) 384.13 (+18.67) 102 (+11) 536 (-54) 0.18 (-0.03) 0.00 (+0.00)
1.11 search_purls 60 (-10) 0 (0) 17041.15 (+3427.64) 7331 (+1006) 19382 (+4061) 0.20 (-0.03) 0.00 (+0.00)
1.12 search_exact_purl 60 (-5) 0 (0) 8.90 (-20.30) 5 (-4) 51 (+18) 0.20 (-0.02) 0.00 (+0.00)
1.13 list_products 60 (-5) 0 (0) 8.72 (+1.29) 4 (0) 49 (+37) 0.20 (-0.02) 0.00 (+0.00)
1.14 list_sboms 60 (-5) 0 (0) 1068.12 (-319.67) 533 (-38) 1546 (-572) 0.20 (-0.02) 0.00 (+0.00)
1.15 list_sboms_paginated 60 (-5) 0 (0) 1286.02 (-691.69) 519 (+35) 2997 (-920) 0.20 (-0.02) 0.00 (+0.00)
1.16 get_analysis_status 60 (-5) 0 (0) 5.38 (-0.85) 1 (0) 48 (-6) 0.20 (-0.02) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 60 (-5) 0 (0) 125.20 (-9.62) 29 (-4) 225 (-74) 0.20 (-0.02) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 60 (-5) 0 (0) 761.42 (-180.20) 232 (-8) 1773 (-90) 0.20 (-0.02) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 60 (-5) 0 (0) 65.55 (-11.74) 11 (+1) 272 (+67) 0.20 (-0.02) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 60 (-5) 0 (0) 776.13 (-29.54) 376 (+21) 1030 (-197) 0.20 (-0.02) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 60 (-5) 0 (0) 551.12 (-21.74) 238 (-13) 881 (-231) 0.20 (-0.02) 0.00 (+0.00)
Aggregated 1,305 (-130) 0 (0) 1158.00 (+83.74) 1 (0) 19382 (+4061) 4.35 (-0.43) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 60 (-5) 25099.20 (+2636.03) 11250 (+1198) 28983 (+3152) 0.20 (-0.02) 12.00 (-1.00)
Aggregated 5 (0) 60 (-5) 25099.20 (+2636.03) 11250 (+1198) 28983 (+3152) 0.20 (-0.02) 12.00 (-1.00)

User Metrics