Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-18 03:40:1425-08-18 03:40:1900:00:050 → 5
Maintaining25-08-18 03:40:1925-08-18 03:45:1900:05:005
Decreasing25-08-18 03:45:1925-08-18 03:45:2000:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 93 (-2) 0 10.20 (-2.22) 3 (0) 61 (-5) 0.31 (-0.01) 0.00 (+0.00)
GET get_analysis_latest_cpe 95 (0) 0 116.28 (-24.69) 36 (+6) 264 (-30) 0.32 (+0.00) 0.00 (+0.00)
GET get_analysis_status 95 (0) 0 4.78 (-0.25) 1 (0) 49 (-4) 0.32 (+0.00) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 95 (0) 0 683.08 (-114.05) 192 (-41) 1958 (+58) 0.32 (+0.00) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 94 (-1) 0 805.76 (+19.97) 344 (-101) 1200 (+124) 0.31 (-0.00) 0.00 (+0.00)
GET list_advisory 94 (-1) 0 482.79 (+29.33) 291 (+16) 852 (+40) 0.31 (-0.00) 0.00 (+0.00)
GET list_advisory_paginated 94 (-1) 0 428.78 (+30.50) 129 (-93) 762 (+177) 0.31 (-0.00) 0.00 (+0.00)
GET list_importer 91 (-4) 0 4.25 (-0.37) 1 (0) 55 (+3) 0.30 (-0.01) 0.00 (+0.00)
GET list_organizations 94 (-1) 0 6.60 (-2.73) 1 (0) 45 (-6) 0.31 (-0.00) 0.00 (+0.00)
GET list_packages 91 (-4) 0 385.86 (-21.40) 96 (0) 875 (-36) 0.30 (-0.01) 0.00 (+0.00)
GET list_packages_paginated 91 (-4) 0 353.60 (+7.93) 102 (+3) 613 (+93) 0.30 (-0.01) 0.00 (+0.00)
GET list_products 95 (0) 0 6.77 (+0.56) 3 (0) 14 (+2) 0.32 (+0.00) 0.00 (+0.00)
GET list_sboms 95 (0) 0 1231.31 (+147.05) 581 (-12) 1809 (+277) 0.32 (+0.00) 0.00 (+0.00)
GET list_sboms_paginated 95 (0) 0 1490.62 (+124.64) 491 (+18) 3381 (+367) 0.32 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities 91 (-4) 0 220.68 (-13.43) 47 (-9) 403 (+21) 0.30 (-0.01) 0.00 (+0.00)
GET list_vulnerabilities_paginated 91 (-4) 0 171.93 (-0.19) 29 (-4) 322 (+29) 0.30 (-0.01) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 94 (-1) 0 52.49 (-5.19) 10 (0) 172 (-12) 0.31 (-0.00) 0.00 (+0.00)
GET search_advisory 93 (-2) 0 935.52 (-36.20) 134 (-112) 2101 (-277) 0.31 (-0.01) 0.00 (+0.00)
GET search_exact_purl 95 (0) 0 9.67 (-23.64) 3 (0) 57 (+10) 0.32 (+0.00) 0.00 (+0.00)
GET search_purls 96 (-4) 0 7891.67 (+270.37) 1235 (-2849) 14839 (+5612) 0.32 (-0.01) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 94 (-1) 0 623.68 (+15.18) 255 (-57) 1205 (+173) 0.31 (-0.00) 0.00 (+0.00)
Aggregated 1966 (-34) 0 768.62 (+12.60) 1 (0) 14839 (+5612) 6.55 (-0.11) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 5 (-2) 6 (-2) 8 (-1) 10 (-2) 15 (-27) 47 (-4) 58 (-2) 61 (-5)
GET get_analysis_latest_cpe 100 (-30) 120 (-40) 130 (-50) 180 (-20) 190 (-20) 200 (-20) 220 (-50) 260 (-30)
GET get_analysis_status 2 (0) 2 (-1) 3 (-1) 4 (0) 7 (+1) 9 (+2) 49 (-1) 49 (-4)
GET get_sbom[sha256:720e4451…a939656247164447] 430 (-270) 500 (-200) 800 (-100) 1,000 (0) 1,000 (-900) 1,958 (+58) 1,958 (+58) 1,958 (+58)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 800 (0) 900 (0) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 470 (+30) 470 (0) 500 (0) 500 (0) 600 (0) 700 (+100) 800 (+100) 852 (+52)
GET list_advisory_paginated 420 (+20) 440 (+30) 480 (+60) 490 (+60) 500 (+40) 600 (+100) 700 (+115) 762 (+177)
GET list_importer 2 (0) 2 (0) 3 (0) 3 (-1) 5 (-1) 9 (-3) 49 (+1) 55 (+3)
GET list_organizations 3 (-1) 4 (-1) 5 (-2) 8 (-4) 16 (-21) 27 (-10) 44 (-2) 45 (-6)
GET list_packages 390 (-10) 410 (0) 420 (-30) 460 (-20) 490 (-110) 600 (-100) 800 (0) 875 (-25)
GET list_packages_paginated 380 (+20) 390 (0) 410 (+10) 460 (+40) 490 (+20) 490 (+10) 500 (0) 600 (+100)
GET list_products 6 (0) 7 (+1) 8 (+1) 9 (+1) 10 (+1) 11 (+1) 14 (+3) 14 (+2)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,809 (+809) 1,809 (+809) 1,809 (+277)
GET list_sboms_paginated 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 3,000 (+1,000) 3,000 (0) 3,000 (0)
GET list_vulnerabilities 220 (-10) 230 (-30) 250 (-20) 280 (-10) 300 (0) 340 (+30) 390 (+20) 400 (+20)
GET list_vulnerabilities_paginated 180 (0) 190 (0) 200 (0) 210 (+10) 230 (-10) 270 (+10) 300 (+10) 320 (+30)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 33 (-25) 57 (-8) 71 (-5) 95 (+1) 110 (-10) 120 (-10) 160 (-20) 170 (-10)
GET search_advisory 800 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (-36) 7 (-35) 7 (-36) 8 (-36) 9 (-36) 50 (+5) 56 (+9) 57 (+10)
GET search_purls 7,000 (-1,000) 8,000 (0) 11,000 (+3,000) 13,000 (+5,000) 14,000 (+5,000) 14,000 (+5,000) 14,839 (+5,839) 14,839 (+5,839)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 600 (-100) 700 (0) 700 (0) 900 (+100) 1,000 (+200) 1,000 (+100) 1,000 (0)
Aggregated 290 (-10) 410 (0) 500 (0) 800 (0) 1,000 (0) 2,000 (-1,000) 13,000 (+5,000) 14,839 (+5,839)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 93 [200]
GET get_analysis_latest_cpe 95 [200]
GET get_analysis_status 95 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 95 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 94 [200]
GET list_advisory 94 [200]
GET list_advisory_paginated 94 [200]
GET list_importer 91 [200]
GET list_organizations 94 [200]
GET list_packages 91 [200]
GET list_packages_paginated 91 [200]
GET list_products 95 [200]
GET list_sboms 95 [200]
GET list_sboms_paginated 95 [200]
GET list_vulnerabilities 91 [200]
GET list_vulnerabilities_paginated 91 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 94 [200]
GET search_advisory 93 [200]
GET search_exact_purl 95 [200]
GET search_purls 96 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 94 [200]
Aggregated 1,966 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 94 (-1) 0 (0) 13.80 (-0.09) 7 (0) 20 (-5) 0.31 (-0.00) 0.00 (+0.00)
1.1 list_organizations 94 (-1) 0 (0) 6.71 (-2.76) 1 (0) 45 (-6) 0.31 (-0.00) 0.00 (+0.00)
1.2 list_advisory 94 (-1) 0 (0) 482.88 (+29.38) 291 (+16) 852 (+40) 0.31 (-0.00) 0.00 (+0.00)
1.3 list_advisory_paginated 94 (-1) 0 (0) 428.88 (+30.57) 129 (-93) 762 (+177) 0.31 (-0.00) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 93 (-2) 0 (0) 10.24 (-2.23) 3 (0) 61 (-5) 0.31 (-0.01) 0.00 (+0.00)
1.5 search_advisory 93 (-2) 0 (0) 935.56 (-36.22) 134 (-112) 2101 (-277) 0.31 (-0.01) 0.00 (+0.00)
1.6 list_vulnerabilities 91 (-4) 0 (0) 220.77 (-13.39) 47 (-9) 403 (+21) 0.30 (-0.01) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 91 (-4) 0 (0) 172.05 (-0.15) 29 (-4) 322 (+29) 0.30 (-0.01) 0.00 (+0.00)
1.8 list_importer 91 (-4) 0 (0) 4.31 (-0.37) 1 (0) 55 (+3) 0.30 (-0.01) 0.00 (+0.00)
1.9 list_packages 91 (-4) 0 (0) 385.87 (-21.50) 96 (0) 875 (-36) 0.30 (-0.01) 0.00 (+0.00)
1.10 list_packages_paginated 91 (-4) 0 (0) 353.64 (+7.91) 102 (+3) 613 (+93) 0.30 (-0.01) 0.00 (+0.00)
1.11 search_purls 96 (-4) 0 (0) 7891.73 (+270.42) 1235 (-2849) 14839 (+5612) 0.32 (-0.01) 0.00 (+0.00)
1.12 search_exact_purl 95 (0) 0 (0) 9.69 (-23.67) 3 (0) 57 (+10) 0.32 (+0.00) 0.00 (+0.00)
1.13 list_products 95 (0) 0 (0) 6.82 (+0.59) 3 (0) 15 (+3) 0.32 (+0.00) 0.00 (+0.00)
1.14 list_sboms 95 (0) 0 (0) 1231.32 (+147.00) 581 (-12) 1809 (+277) 0.32 (+0.00) 0.00 (+0.00)
1.15 list_sboms_paginated 95 (0) 0 (0) 1490.66 (+124.62) 491 (+18) 3381 (+367) 0.32 (+0.00) 0.00 (+0.00)
1.16 get_analysis_status 95 (0) 0 (0) 4.83 (-0.28) 1 (0) 50 (-3) 0.32 (+0.00) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 95 (0) 0 (0) 116.33 (-24.72) 36 (+6) 264 (-30) 0.32 (+0.00) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 95 (0) 0 (0) 683.15 (-114.06) 192 (-41) 1958 (+58) 0.32 (+0.00) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 94 (-1) 0 (0) 52.62 (-5.14) 10 (0) 172 (-12) 0.31 (-0.00) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 94 (-1) 0 (0) 805.84 (+19.96) 344 (-101) 1200 (+124) 0.31 (-0.00) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 94 (-1) 0 (0) 623.78 (+15.23) 255 (-57) 1205 (+172) 0.31 (-0.00) 0.00 (+0.00)
Aggregated 2,060 (-35) 0 (0) 733.55 (+11.81) 1 (0) 14839 (+5612) 6.87 (-0.12) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 94 (-1) 15932.05 (+524.15) 8496 (+699) 24495 (+5261) 0.31 (-0.00) 18.80 (-0.20)
Aggregated 5 (0) 94 (-1) 15932.05 (+524.15) 8496 (+699) 24495 (+5261) 0.31 (-0.00) 18.80 (-0.20)

User Metrics