Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-10 03:47:0925-08-10 03:47:1400:00:050 → 5
Maintaining25-08-10 03:47:1425-08-10 03:52:1400:05:005
Decreasing25-08-10 03:52:1425-08-10 03:52:1500:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 70 (+10) 0 11.00 (-3.12) 3 (0) 58 (-6) 0.23 (+0.03) 0.00 (+0.00)
GET get_analysis_latest_cpe 70 (+10) 0 125.33 (+0.15) 39 (+10) 300 (+75) 0.23 (+0.03) 0.00 (+0.00)
GET get_analysis_status 70 (+10) 0 3.70 (-1.67) 1 (0) 37 (-11) 0.23 (+0.03) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 70 (+10) 0 888.31 (+126.96) 216 (-16) 2028 (+255) 0.23 (+0.03) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 (+10) 0 840.59 (+64.50) 491 (+115) 1067 (+37) 0.23 (+0.03) 0.00 (+0.00)
GET list_advisory 70 (+10) 0 464.16 (-53.73) 220 (-160) 784 (-109) 0.23 (+0.03) 0.00 (+0.00)
GET list_advisory_paginated 70 (+10) 0 399.16 (-53.39) 195 (+5) 695 (+65) 0.23 (+0.03) 0.00 (+0.00)
GET list_importer 70 (+15) 0 5.86 (+2.44) 1 (0) 57 (+20) 0.23 (+0.05) 0.00 (+0.00)
GET list_organizations 70 (+10) 0 7.57 (+0.84) 1 (0) 46 (-6) 0.23 (+0.03) 0.00 (+0.00)
GET list_packages 70 (+15) 0 360.03 (-125.26) 84 (-58) 828 (-78) 0.23 (+0.05) 0.00 (+0.00)
GET list_packages_paginated 70 (+15) 0 321.29 (-62.82) 97 (-5) 499 (-37) 0.23 (+0.05) 0.00 (+0.00)
GET list_products 75 (+15) 0 7.57 (-1.11) 4 (0) 23 (-26) 0.25 (+0.05) 0.00 (+0.00)
GET list_sboms 75 (+15) 0 1204.48 (+136.40) 545 (+12) 1796 (+250) 0.25 (+0.05) 0.00 (+0.00)
GET list_sboms_paginated 72 (+12) 0 1510.07 (+224.12) 423 (-96) 3006 (+9) 0.24 (+0.04) 0.00 (+0.00)
GET list_vulnerabilities 70 (+10) 0 214.30 (-26.57) 39 (-21) 378 (-24) 0.23 (+0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 70 (+10) 0 161.19 (-17.65) 34 (-17) 286 (+3) 0.23 (+0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (+10) 0 61.71 (-3.75) 11 (0) 178 (-93) 0.23 (+0.03) 0.00 (+0.00)
GET search_advisory 70 (+10) 0 896.04 (-382.14) 146 (-22) 2181 (+225) 0.23 (+0.03) 0.00 (+0.00)
GET search_exact_purl 75 (+15) 0 21.83 (+12.94) 19 (+14) 28 (-23) 0.25 (+0.05) 0.00 (+0.00)
GET search_purls 75 (+15) 0 12461.73 (-4579.42) 10192 (+2861) 15076 (-4306) 0.25 (+0.05) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 (+10) 0 605.66 (+54.67) 364 (+126) 1039 (+158) 0.23 (+0.03) 0.00 (+0.00)
Aggregated 1492 (+247) 0 1013.08 (-200.73) 1 (0) 15076 (-4306) 4.97 (+0.82) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 5 (-2) 6 (-2) 8 (-1) 11 (-1) 26 (-19) 50 (0) 58 (+2) 58 (-6)
GET get_analysis_latest_cpe 110 (-10) 120 (-10) 150 (0) 170 (-10) 180 (-10) 190 (-30) 210 (-10) 300 (+75)
GET get_analysis_status 2 (0) 3 (+1) 3 (+1) 4 (0) 6 (-1) 7 (-27) 35 (-12) 37 (-11)
GET get_sbom[sha256:720e4451…a939656247164447] 600 (0) 800 (+100) 1,000 (+200) 2,000 (+1,000) 2,000 (+227) 2,000 (+227) 2,000 (+227) 2,000 (+227)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (+100) 900 (0) 900 (0) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 470 (-20) 480 (-20) 490 (-10) 500 (-100) 600 (0) 600 (-100) 700 (-100) 784 (-109)
GET list_advisory_paginated 400 (-80) 410 (-70) 440 (-60) 450 (-50) 500 (-100) 500 (-100) 600 (0) 695 (+95)
GET list_importer 2 (0) 2 (0) 3 (0) 3 (-1) 6 (0) 42 (+34) 49 (+41) 57 (+20)
GET list_organizations 4 (+1) 4 (+1) 6 (+2) 7 (+1) 17 (+5) 38 (-2) 43 (-6) 46 (-6)
GET list_packages 400 (-60) 410 (-60) 420 (-80) 460 (-140) 490 (-210) 500 (-300) 600 (-300) 800 (-100)
GET list_packages_paginated 380 (-30) 390 (-30) 400 (-40) 410 (-70) 420 (-80) 470 (-30) 480 (-20) 499 (-1)
GET list_products 6 (-1) 7 (0) 8 (0) 9 (-1) 10 (-1) 21 (+9) 23 (-24) 23 (-26)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,796 (+796) 1,796 (+796) 1,796 (+796) 1,796 (+250)
GET list_sboms_paginated 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 3,000 (+1,000) 3,000 (+1,000) 3,000 (+3)
GET list_vulnerabilities 220 (-30) 230 (-30) 250 (-40) 270 (-30) 300 (-20) 310 (-40) 320 (-50) 378 (-22)
GET list_vulnerabilities_paginated 170 (-10) 180 (0) 190 (0) 210 (+10) 240 (+20) 270 (+20) 280 (+10) 286 (+6)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 68 (+26) 72 (+12) 78 (+3) 88 (-22) 96 (-54) 120 (-50) 170 (-30) 178 (-92)
GET search_advisory 800 (-200) 900 (-100) 1,000 (-956) 1,000 (-956) 2,000 (+44) 2,000 (+44) 2,000 (+44) 2,000 (+44)
GET search_exact_purl 21 (+14) 21 (+14) 23 (+16) 24 (+16) 26 (+18) 26 (+15) 28 (-22) 28 (-23)
GET search_purls 12,000 (-5,000) 12,000 (-6,000) 13,000 (-5,000) 14,000 (-5,000) 14,000 (-5,000) 15,000 (-4,000) 15,000 (-4,000) 15,000 (-4,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+100) 600 (0) 700 (+100) 700 (0) 800 (+100) 900 (+100) 1,000 (+119) 1,000 (+119)
Aggregated 280 (-40) 410 (-50) 500 (-100) 900 (0) 1,000 (0) 3,000 (+1,000) 14,000 (-5,000) 15,000 (-4,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 70 [200]
GET get_analysis_latest_cpe 70 [200]
GET get_analysis_status 70 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 70 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 [200]
GET list_advisory 70 [200]
GET list_advisory_paginated 70 [200]
GET list_importer 70 [200]
GET list_organizations 70 [200]
GET list_packages 70 [200]
GET list_packages_paginated 70 [200]
GET list_products 75 [200]
GET list_sboms 75 [200]
GET list_sboms_paginated 72 [200]
GET list_vulnerabilities 70 [200]
GET list_vulnerabilities_paginated 70 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 [200]
GET search_advisory 70 [200]
GET search_exact_purl 75 [200]
GET search_purls 75 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 [200]
Aggregated 1,492 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 70 (+10) 0 (0) 14.66 (+0.84) 8 (0) 25 (+6) 0.23 (+0.03) 0.00 (+0.00)
1.1 list_organizations 70 (+10) 0 (0) 7.83 (+0.93) 1 (0) 49 (-3) 0.23 (+0.03) 0.00 (+0.00)
1.2 list_advisory 70 (+10) 0 (0) 464.26 (-53.74) 220 (-160) 784 (-109) 0.23 (+0.03) 0.00 (+0.00)
1.3 list_advisory_paginated 70 (+10) 0 (0) 399.24 (-53.42) 195 (+4) 695 (+64) 0.23 (+0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 70 (+10) 0 (0) 11.06 (-3.06) 3 (0) 58 (-6) 0.23 (+0.03) 0.00 (+0.00)
1.5 search_advisory 70 (+10) 0 (0) 896.10 (-382.20) 146 (-22) 2181 (+225) 0.23 (+0.03) 0.00 (+0.00)
1.6 list_vulnerabilities 70 (+10) 0 (0) 214.30 (-26.65) 39 (-21) 378 (-24) 0.23 (+0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 70 (+10) 0 (0) 161.19 (-17.70) 34 (-17) 286 (+3) 0.23 (+0.03) 0.00 (+0.00)
1.8 list_importer 70 (+15) 0 (0) 5.87 (+2.40) 1 (0) 57 (+20) 0.23 (+0.05) 0.00 (+0.00)
1.9 list_packages 70 (+15) 0 (0) 360.10 (-125.21) 84 (-58) 828 (-78) 0.23 (+0.05) 0.00 (+0.00)
1.10 list_packages_paginated 70 (+15) 0 (0) 321.36 (-62.77) 97 (-5) 499 (-37) 0.23 (+0.05) 0.00 (+0.00)
1.11 search_purls 75 (+15) 0 (0) 12461.81 (-4579.34) 10192 (+2861) 15077 (-4305) 0.25 (+0.05) 0.00 (+0.00)
1.12 search_exact_purl 75 (+15) 0 (0) 21.87 (+12.97) 19 (+14) 28 (-23) 0.25 (+0.05) 0.00 (+0.00)
1.13 list_products 75 (+15) 0 (0) 7.61 (-1.10) 4 (0) 23 (-26) 0.25 (+0.05) 0.00 (+0.00)
1.14 list_sboms 75 (+15) 0 (0) 1204.52 (+136.40) 545 (+12) 1796 (+250) 0.25 (+0.05) 0.00 (+0.00)
1.15 list_sboms_paginated 72 (+12) 0 (0) 1510.11 (+224.09) 423 (-96) 3006 (+9) 0.24 (+0.04) 0.00 (+0.00)
1.16 get_analysis_status 70 (+10) 0 (0) 3.73 (-1.65) 1 (0) 37 (-11) 0.23 (+0.03) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 70 (+10) 0 (0) 125.37 (+0.17) 39 (+10) 300 (+75) 0.23 (+0.03) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 70 (+10) 0 (0) 888.40 (+126.98) 216 (-16) 2028 (+255) 0.23 (+0.03) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (+10) 0 (0) 61.80 (-3.75) 11 (0) 178 (-94) 0.23 (+0.03) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 (+10) 0 (0) 840.63 (+64.50) 491 (+115) 1067 (+37) 0.23 (+0.03) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 (+10) 0 (0) 605.79 (+54.67) 364 (+126) 1039 (+158) 0.23 (+0.03) 0.00 (+0.00)
Aggregated 1,562 (+257) 0 (0) 967.67 (-190.32) 1 (0) 15077 (-4305) 5.21 (+0.86) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 70 (+10) 20604.46 (-4494.74) 14889 (+3639) 24737 (-4246) 0.23 (+0.03) 14.00 (+2.00)
Aggregated 5 (0) 70 (+10) 20604.46 (-4494.74) 14889 (+3639) 24737 (-4246) 0.23 (+0.03) 14.00 (+2.00)

User Metrics