Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-16 03:25:2325-08-16 03:25:2800:00:050 → 5
Maintaining25-08-16 03:25:2825-08-16 03:30:2800:05:005
Decreasing25-08-16 03:30:2825-08-16 03:30:2800:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 120 (+21) 0 11.38 (-0.68) 3 (0) 56 (-11) 0.40 (+0.07) 0.00 (+0.00)
GET get_analysis_latest_cpe 125 (+25) 0 138.15 (+23.41) 30 (-5) 283 (+65) 0.42 (+0.08) 0.00 (+0.00)
GET get_analysis_status 125 (+25) 0 6.18 (-0.14) 1 (0) 53 (-4) 0.42 (+0.08) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 125 (+25) 0 1036.61 (-98.12) 394 (+186) 2025 (-1346) 0.42 (+0.08) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 125 (+25) 0 771.42 (-137.60) 455 (+159) 1063 (-391) 0.42 (+0.08) 0.00 (+0.00)
GET list_advisory 123 (+24) 0 477.74 (+76.76) 248 (+133) 904 (+8) 0.41 (+0.08) 0.00 (+0.00)
GET list_advisory_paginated 120 (+21) 0 411.80 (+69.55) 171 (+74) 648 (+74) 0.40 (+0.07) 0.00 (+0.00)
GET list_importer 120 (+24) 0 4.21 (+1.22) 1 (0) 56 (+8) 0.40 (+0.08) 0.00 (+0.00)
GET list_organizations 123 (+24) 0 8.63 (-1.43) 1 (0) 49 (+1) 0.41 (+0.08) 0.00 (+0.00)
GET list_packages 120 (+24) 0 442.10 (+121.10) 113 (+9) 909 (+116) 0.40 (+0.08) 0.00 (+0.00)
GET list_packages_paginated 120 (+24) 0 365.70 (+74.72) 108 (0) 772 (+301) 0.40 (+0.08) 0.00 (+0.00)
GET list_products 125 (+24) 0 7.23 (-1.01) 2 (0) 57 (-6) 0.42 (+0.08) 0.00 (+0.00)
GET list_sboms 125 (+24) 0 1206.28 (+16.30) 509 (-21) 1627 (-232) 0.42 (+0.08) 0.00 (+0.00)
GET list_sboms_paginated 125 (+24) 0 1513.79 (-1238.22) 492 (+43) 3089 (-3005) 0.42 (+0.08) 0.00 (+0.00)
GET list_vulnerabilities 120 (+24) 0 256.32 (+53.12) 56 (+7) 509 (+137) 0.40 (+0.08) 0.00 (+0.00)
GET list_vulnerabilities_paginated 120 (+24) 0 169.60 (+27.09) 40 (+7) 275 (+48) 0.40 (+0.08) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 125 (+25) 0 59.40 (+9.56) 10 (0) 176 (-5) 0.42 (+0.08) 0.00 (+0.00)
GET search_advisory 120 (+21) 0 984.98 (+272.47) 147 (+6) 2109 (+395) 0.40 (+0.07) 0.00 (+0.00)
GET search_exact_purl 125 (+24) 0 8.34 (-21.54) 1 (-1) 59 (+4) 0.42 (+0.08) 0.00 (+0.00)
GET search_purls 125 (+24) 0 3768.62 (-2015.08) 1291 (-204) 5011 (-7062) 0.42 (+0.08) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 125 (+25) 0 556.78 (-94.28) 237 (+40) 946 (-315) 0.42 (+0.08) 0.00 (+0.00)
Aggregated 2581 (+501) 0 585.61 (-140.95) 1 (0) 5011 (-7062) 8.60 (+1.67) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 5 (-1) 7 (+1) 8 (+1) 13 (+3) 39 (-11) 45 (-7) 56 (-6) 56 (-11)
GET get_analysis_latest_cpe 120 (+10) 140 (+30) 170 (+50) 190 (+30) 210 (+30) 260 (+70) 280 (+70) 280 (+62)
GET get_analysis_status 2 (0) 3 (+1) 4 (+1) 4 (0) 6 (-1) 50 (+2) 53 (-3) 53 (-4)
GET get_sbom[sha256:720e4451…a939656247164447] 900 (+500) 1,000 (+540) 1,000 (0) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (-100) 800 (-200) 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 470 (+70) 470 (+50) 490 (+40) 500 (+20) 600 (+100) 700 (+100) 900 (+200) 900 (+4)
GET list_advisory_paginated 410 (+40) 440 (+60) 470 (+80) 480 (+70) 500 (+40) 600 (+110) 600 (+26) 600 (+26)
GET list_importer 2 (+1) 2 (0) 3 (+1) 4 (+1) 6 (+1) 10 (+4) 46 (0) 56 (+8)
GET list_organizations 3 (0) 4 (0) 6 (0) 11 (-4) 31 (-6) 35 (-11) 47 (-1) 49 (+1)
GET list_packages 410 (+90) 420 (+50) 460 (+80) 500 (+110) 600 (+180) 800 (+320) 900 (+420) 900 (+107)
GET list_packages_paginated 390 (+90) 400 (+90) 420 (+90) 460 (+70) 490 (+90) 500 (+90) 600 (+150) 772 (+302)
GET list_products 6 (0) 6 (-1) 8 (0) 9 (+1) 11 (+2) 15 (+3) 40 (-18) 57 (-6)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-859) 1,627 (-232) 1,627 (-232) 1,627 (-232)
GET list_sboms_paginated 1,000 (-2,000) 2,000 (-1,000) 2,000 (-2,000) 2,000 (-2,000) 2,000 (-3,000) 2,000 (-3,000) 3,000 (-3,000) 3,000 (-3,000)
GET list_vulnerabilities 260 (+50) 270 (+50) 300 (+70) 330 (+50) 360 (+80) 410 (+120) 500 (+130) 500 (+130)
GET list_vulnerabilities_paginated 170 (+10) 190 (+10) 190 (+10) 200 (+10) 210 (+10) 230 (+30) 260 (+50) 275 (+48)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 67 (+39) 70 (+14) 78 (+9) 92 (+12) 100 (-10) 110 (-10) 176 (-4) 176 (-4)
GET search_advisory 900 (+200) 1,000 (+300) 1,000 (+200) 2,000 (+1,100) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+286) 2,000 (+286)
GET search_exact_purl 4 (-37) 4 (-39) 5 (-39) 6 (-39) 31 (-21) 50 (-3) 58 (+3) 59 (+4)
GET search_purls 4,000 (-1,000) 4,000 (-3,000) 4,000 (-4,000) 4,000 (-5,000) 4,000 (-6,000) 4,000 (-7,000) 5,000 (-6,000) 5,000 (-7,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 500 (-100) 600 (-100) 600 (-100) 700 (-100) 800 (-100) 800 (-200) 900 (-100) 900 (-100)
Aggregated 330 (+100) 440 (+80) 600 (+120) 900 (+100) 1,000 (-1,000) 2,000 (-1,000) 4,000 (-5,000) 5,000 (-7,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 120 [200]
GET get_analysis_latest_cpe 125 [200]
GET get_analysis_status 125 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 125 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 125 [200]
GET list_advisory 123 [200]
GET list_advisory_paginated 120 [200]
GET list_importer 120 [200]
GET list_organizations 123 [200]
GET list_packages 120 [200]
GET list_packages_paginated 120 [200]
GET list_products 125 [200]
GET list_sboms 125 [200]
GET list_sboms_paginated 125 [200]
GET list_vulnerabilities 120 [200]
GET list_vulnerabilities_paginated 120 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 125 [200]
GET search_advisory 120 [200]
GET search_exact_purl 125 [200]
GET search_purls 125 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 125 [200]
Aggregated 2,581 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 123 (+24) 0 (0) 13.58 (+0.19) 7 (0) 21 (-1) 0.41 (+0.08) 0.00 (+0.00)
1.1 list_organizations 123 (+24) 0 (0) 8.71 (-1.47) 1 (0) 49 (+1) 0.41 (+0.08) 0.00 (+0.00)
1.2 list_advisory 123 (+24) 0 (0) 477.77 (+76.74) 248 (+133) 905 (+9) 0.41 (+0.08) 0.00 (+0.00)
1.3 list_advisory_paginated 120 (+21) 0 (0) 411.84 (+69.50) 171 (+74) 648 (+74) 0.40 (+0.07) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 120 (+21) 0 (0) 11.43 (-0.69) 3 (0) 56 (-11) 0.40 (+0.07) 0.00 (+0.00)
1.5 search_advisory 120 (+21) 0 (0) 984.99 (+272.45) 147 (+6) 2109 (+395) 0.40 (+0.07) 0.00 (+0.00)
1.6 list_vulnerabilities 120 (+24) 0 (0) 256.38 (+53.15) 56 (+7) 509 (+137) 0.40 (+0.08) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 120 (+24) 0 (0) 169.62 (+27.04) 40 (+7) 275 (+48) 0.40 (+0.08) 0.00 (+0.00)
1.8 list_importer 120 (+24) 0 (0) 4.24 (+1.21) 1 (0) 56 (+8) 0.40 (+0.08) 0.00 (+0.00)
1.9 list_packages 120 (+24) 0 (0) 442.12 (+121.06) 113 (+9) 909 (+116) 0.40 (+0.08) 0.00 (+0.00)
1.10 list_packages_paginated 120 (+24) 0 (0) 365.74 (+74.70) 108 (0) 772 (+301) 0.40 (+0.08) 0.00 (+0.00)
1.11 search_purls 125 (+24) 0 (0) 3768.70 (-2015.06) 1291 (-204) 5011 (-7062) 0.42 (+0.08) 0.00 (+0.00)
1.12 search_exact_purl 125 (+24) 0 (0) 8.35 (-21.55) 1 (-1) 59 (+4) 0.42 (+0.08) 0.00 (+0.00)
1.13 list_products 125 (+24) 0 (0) 7.26 (-1.00) 2 (0) 57 (-6) 0.42 (+0.08) 0.00 (+0.00)
1.14 list_sboms 125 (+24) 0 (0) 1206.36 (+16.36) 509 (-21) 1628 (-231) 0.42 (+0.08) 0.00 (+0.00)
1.15 list_sboms_paginated 125 (+24) 0 (0) 1513.86 (-1238.18) 492 (+43) 3089 (-3005) 0.42 (+0.08) 0.00 (+0.00)
1.16 get_analysis_status 125 (+25) 0 (0) 6.18 (-0.17) 1 (0) 53 (-4) 0.42 (+0.08) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 125 (+25) 0 (0) 138.20 (+23.35) 30 (-5) 283 (+65) 0.42 (+0.08) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 125 (+25) 0 (0) 1036.67 (-98.15) 394 (+186) 2025 (-1346) 0.42 (+0.08) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 125 (+25) 0 (0) 59.43 (+9.51) 10 (0) 176 (-5) 0.42 (+0.08) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 125 (+25) 0 (0) 771.50 (-137.57) 455 (+159) 1063 (-391) 0.42 (+0.08) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 125 (+25) 0 (0) 556.82 (-94.33) 237 (+39) 946 (-315) 0.42 (+0.08) 0.00 (+0.00)
Aggregated 2,704 (+525) 0 (0) 558.97 (-134.58) 1 (0) 5011 (-7062) 9.01 (+1.75) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 123 (+24) 12127.04 (-2908.54) 5174 (-3143) 15076 (-7841) 0.41 (+0.08) 24.60 (+4.80)
Aggregated 5 (0) 123 (+24) 12127.04 (-2908.54) 5174 (-3143) 15076 (-7841) 0.41 (+0.08) 24.60 (+4.80)

User Metrics