Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-15 03:32:4025-08-15 03:32:4500:00:050 → 5
Maintaining25-08-15 03:32:4525-08-15 03:37:4500:05:005
Decreasing25-08-15 03:37:4525-08-15 03:37:4600:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 99 (-60) 0 12.05 (-5.56) 3 (0) 67 (-2) 0.33 (-0.20) 0.00 (+0.00)
GET get_analysis_latest_cpe 100 (-61) 0 114.74 (-13.56) 35 (-1) 218 (-180) 0.33 (-0.20) 0.00 (+0.00)
GET get_analysis_status 100 (-61) 0 6.32 (+0.13) 1 (0) 57 (-2) 0.33 (-0.20) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 100 (-61) 0 1134.73 (+425.00) 208 (+27) 3371 (+1493) 0.33 (-0.20) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 100 (-61) 0 909.02 (+14.76) 296 (+8) 1454 (-131) 0.33 (-0.20) 0.00 (+0.00)
GET list_advisory 99 (-61) 0 400.98 (-89.17) 115 (-184) 896 (-192) 0.33 (-0.20) 0.00 (+0.00)
GET list_advisory_paginated 99 (-61) 0 342.25 (-69.87) 97 (-138) 574 (-273) 0.33 (-0.20) 0.00 (+0.00)
GET list_importer 96 (-63) 0 2.99 (-1.09) 1 (0) 48 (-4) 0.32 (-0.21) 0.00 (+0.00)
GET list_organizations 99 (-61) 0 10.06 (-1.41) 1 (0) 48 (-4) 0.33 (-0.20) 0.00 (+0.00)
GET list_packages 96 (-63) 0 321.00 (-44.02) 104 (+7) 793 (-97) 0.32 (-0.21) 0.00 (+0.00)
GET list_packages_paginated 96 (-63) 0 290.98 (-57.03) 108 (+14) 471 (-95) 0.32 (-0.21) 0.00 (+0.00)
GET list_products 101 (-61) 0 8.24 (-1.94) 2 (0) 63 (-7) 0.34 (-0.20) 0.00 (+0.00)
GET list_sboms 101 (-61) 0 1189.98 (+85.42) 530 (+27) 1859 (+158) 0.34 (-0.20) 0.00 (+0.00)
GET list_sboms_paginated 101 (-61) 0 2752.01 (+1361.00) 449 (+120) 6094 (+2450) 0.34 (-0.20) 0.00 (+0.00)
GET list_vulnerabilities 96 (-63) 0 203.20 (-31.17) 49 (-3) 372 (-222) 0.32 (-0.21) 0.00 (+0.00)
GET list_vulnerabilities_paginated 96 (-63) 0 142.51 (-37.77) 33 (-17) 227 (-71) 0.32 (-0.21) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 100 (-61) 0 49.84 (-8.23) 10 (0) 181 (-111) 0.33 (-0.20) 0.00 (+0.00)
GET search_advisory 99 (-60) 0 712.52 (-230.89) 141 (-148) 1714 (-680) 0.33 (-0.20) 0.00 (+0.00)
GET search_exact_purl 101 (-61) 0 29.87 (+19.20) 2 (0) 55 (-18) 0.34 (-0.20) 0.00 (+0.00)
GET search_purls 101 (-63) 0 5783.70 (+4462.84) 1495 (+1112) 12073 (+4112) 0.34 (-0.21) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 100 (-61) 0 651.06 (-71.75) 197 (-111) 1261 (-26) 0.33 (-0.20) 0.00 (+0.00)
Aggregated 2080 (-1291) 0 726.56 (+278.96) 1 (0) 12073 (+4112) 6.93 (-4.30) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (-1) 6 (-3) 7 (-4) 10 (-26) 50 (-5) 52 (-9) 62 (-5) 67 (-2)
GET get_analysis_latest_cpe 110 (0) 110 (-10) 120 (-40) 160 (-10) 180 (-20) 190 (-40) 210 (-120) 218 (-180)
GET get_analysis_status 2 (0) 2 (-1) 3 (-1) 4 (-1) 7 (0) 48 (+2) 56 (+5) 57 (-2)
GET get_sbom[sha256:720e4451…a939656247164447] 400 (-20) 460 (-20) 1,000 (0) 3,000 (+2,000) 3,000 (+1,122) 3,000 (+1,122) 3,000 (+1,122) 3,000 (+1,122)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-585)
GET list_advisory 400 (-80) 420 (-80) 450 (-50) 480 (-120) 500 (-100) 600 (-100) 700 (-200) 896 (-104)
GET list_advisory_paginated 370 (-30) 380 (-30) 390 (-50) 410 (-70) 460 (-40) 490 (-110) 574 (-226) 574 (-226)
GET list_importer 1 (-1) 2 (0) 2 (-1) 3 (-1) 5 (-1) 6 (-1) 46 (0) 48 (-4)
GET list_organizations 3 (-1) 4 (-1) 6 (-2) 15 (-6) 37 (-4) 46 (+1) 48 (-3) 48 (-4)
GET list_packages 320 (-50) 370 (-10) 380 (-20) 390 (-20) 420 (-50) 480 (-20) 480 (-220) 793 (-97)
GET list_packages_paginated 300 (-40) 310 (-60) 330 (-60) 390 (-20) 400 (-60) 410 (-70) 450 (-50) 470 (-96)
GET list_products 6 (-1) 7 (0) 8 (0) 8 (-2) 9 (-4) 12 (-39) 58 (0) 63 (-7)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,859 (+859) 1,859 (+158) 1,859 (+158) 1,859 (+158)
GET list_sboms_paginated 3,000 (+2,000) 3,000 (+2,000) 4,000 (+2,000) 4,000 (+2,000) 5,000 (+3,000) 5,000 (+3,000) 6,000 (+3,000) 6,000 (+2,356)
GET list_vulnerabilities 210 (-20) 220 (-20) 230 (-30) 280 (0) 280 (-20) 290 (-20) 370 (0) 370 (-224)
GET list_vulnerabilities_paginated 160 (-30) 180 (-10) 180 (-20) 190 (-10) 200 (-30) 200 (-60) 210 (-80) 227 (-71)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 28 (-25) 56 (-11) 69 (-5) 80 (-4) 110 (+10) 120 (-50) 180 (-10) 180 (-110)
GET search_advisory 700 (-100) 700 (-200) 800 (-200) 900 (-100) 1,000 (-1,000) 1,000 (-1,000) 1,714 (-286) 1,714 (-286)
GET search_exact_purl 41 (+36) 43 (+37) 44 (+37) 45 (+36) 52 (+10) 53 (+2) 55 (-2) 55 (-18)
GET search_purls 5,000 (+4,000) 7,000 (+6,000) 8,000 (+7,000) 9,000 (+7,000) 10,000 (+8,000) 11,000 (+8,000) 11,000 (+4,000) 12,000 (+4,039)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (-100) 700 (-100) 700 (-100) 800 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0)
Aggregated 230 (-70) 360 (-40) 480 (-20) 800 (0) 2,000 (+1,000) 3,000 (+2,000) 9,000 (+7,000) 12,000 (+4,039)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 99 [200]
GET get_analysis_latest_cpe 100 [200]
GET get_analysis_status 100 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 100 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 100 [200]
GET list_advisory 99 [200]
GET list_advisory_paginated 99 [200]
GET list_importer 96 [200]
GET list_organizations 99 [200]
GET list_packages 96 [200]
GET list_packages_paginated 96 [200]
GET list_products 101 [200]
GET list_sboms 101 [200]
GET list_sboms_paginated 101 [200]
GET list_vulnerabilities 96 [200]
GET list_vulnerabilities_paginated 96 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 100 [200]
GET search_advisory 99 [200]
GET search_exact_purl 101 [200]
GET search_purls 101 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 100 [200]
Aggregated 2,080 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 99 (-61) 0 (0) 13.38 (-0.41) 7 (0) 22 (0) 0.33 (-0.20) 0.00 (+0.00)
1.1 list_organizations 99 (-61) 0 (0) 10.18 (-1.39) 1 (0) 48 (-4) 0.33 (-0.20) 0.00 (+0.00)
1.2 list_advisory 99 (-61) 0 (0) 401.03 (-89.17) 115 (-184) 896 (-192) 0.33 (-0.20) 0.00 (+0.00)
1.3 list_advisory_paginated 99 (-61) 0 (0) 342.34 (-69.85) 97 (-141) 574 (-273) 0.33 (-0.20) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 99 (-60) 0 (0) 12.11 (-5.54) 3 (0) 67 (-2) 0.33 (-0.20) 0.00 (+0.00)
1.5 search_advisory 99 (-60) 0 (0) 712.55 (-230.87) 141 (-148) 1714 (-680) 0.33 (-0.20) 0.00 (+0.00)
1.6 list_vulnerabilities 96 (-63) 0 (0) 203.23 (-31.24) 49 (-3) 372 (-222) 0.32 (-0.21) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 96 (-63) 0 (0) 142.57 (-37.75) 33 (-17) 227 (-71) 0.32 (-0.21) 0.00 (+0.00)
1.8 list_importer 96 (-63) 0 (0) 3.03 (-1.10) 1 (0) 48 (-4) 0.32 (-0.21) 0.00 (+0.00)
1.9 list_packages 96 (-63) 0 (0) 321.05 (-44.05) 104 (+7) 793 (-97) 0.32 (-0.21) 0.00 (+0.00)
1.10 list_packages_paginated 96 (-63) 0 (0) 291.04 (-57.01) 108 (+14) 471 (-95) 0.32 (-0.21) 0.00 (+0.00)
1.11 search_purls 101 (-63) 0 (0) 5783.75 (+4462.81) 1495 (+1112) 12073 (+4112) 0.34 (-0.21) 0.00 (+0.00)
1.12 search_exact_purl 101 (-61) 0 (0) 29.90 (+19.16) 2 (0) 55 (-18) 0.34 (-0.20) 0.00 (+0.00)
1.13 list_products 101 (-61) 0 (0) 8.26 (-1.95) 2 (0) 63 (-7) 0.34 (-0.20) 0.00 (+0.00)
1.14 list_sboms 101 (-61) 0 (0) 1190.00 (+85.41) 530 (+27) 1859 (+158) 0.34 (-0.20) 0.00 (+0.00)
1.15 list_sboms_paginated 101 (-61) 0 (0) 2752.04 (+1360.99) 449 (+120) 6094 (+2450) 0.34 (-0.20) 0.00 (+0.00)
1.16 get_analysis_status 100 (-61) 0 (0) 6.35 (+0.14) 1 (0) 57 (-2) 0.33 (-0.20) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 100 (-61) 0 (0) 114.85 (-13.52) 35 (-1) 218 (-180) 0.33 (-0.20) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 100 (-61) 0 (0) 1134.82 (+425.04) 208 (+27) 3371 (+1493) 0.33 (-0.20) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 100 (-61) 0 (0) 49.92 (-8.23) 10 (0) 181 (-112) 0.33 (-0.20) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 100 (-61) 0 (0) 909.07 (+14.72) 296 (+8) 1454 (-131) 0.33 (-0.20) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 100 (-61) 0 (0) 651.15 (-71.74) 198 (-110) 1261 (-26) 0.33 (-0.20) 0.00 (+0.00)
Aggregated 2,179 (-1,352) 0 (0) 693.55 (+266.24) 1 (0) 12073 (+4112) 7.26 (-4.51) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 99 (-61) 15035.58 (+5683.30) 8317 (+1414) 22917 (+9873) 0.33 (-0.20) 19.80 (-12.20)
Aggregated 5 (0) 99 (-61) 15035.58 (+5683.30) 8317 (+1414) 22917 (+9873) 0.33 (-0.20) 19.80 (-12.20)

User Metrics