Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-20 03:12:5725-08-20 03:13:0200:00:050 → 5
Maintaining25-08-20 03:13:0225-08-20 03:18:0300:05:015
Decreasing25-08-20 03:18:0325-08-20 03:18:0300:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 105 (+45) 0 13.33 (+1.18) 3 (+1) 71 (-1) 0.35 (+0.15) 0.00 (+0.00)
GET get_analysis_latest_cpe 109 (+49) 0 123.51 (-7.92) 34 (-1) 312 (+9) 0.36 (+0.16) 0.00 (+0.00)
GET get_analysis_status 109 (+49) 0 7.02 (+1.47) 1 (0) 53 (-3) 0.36 (+0.16) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 109 (+49) 0 700.08 (-262.20) 199 (+62) 1709 (-1705) 0.36 (+0.16) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 108 (+48) 0 804.26 (-101.52) 504 (+7) 1104 (-337) 0.36 (+0.16) 0.00 (+0.00)
GET list_advisory 105 (+45) 0 481.20 (+22.27) 287 (+165) 866 (+125) 0.35 (+0.15) 0.00 (+0.00)
GET list_advisory_paginated 105 (+45) 0 406.03 (+4.60) 122 (+12) 619 (-199) 0.35 (+0.15) 0.00 (+0.00)
GET list_importer 105 (+45) 0 2.98 (-0.30) 1 (0) 45 (+12) 0.35 (+0.15) 0.00 (+0.00)
GET list_organizations 105 (+45) 0 8.54 (+0.09) 1 (0) 50 (-4) 0.35 (+0.15) 0.00 (+0.00)
GET list_packages 105 (+45) 0 409.71 (+81.48) 102 (+25) 799 (+103) 0.35 (+0.15) 0.00 (+0.00)
GET list_packages_paginated 105 (+45) 0 373.09 (+60.79) 96 (-4) 665 (+93) 0.35 (+0.15) 0.00 (+0.00)
GET list_products 110 (+45) 0 5.85 (-2.57) 3 (-1) 12 (-42) 0.37 (+0.15) 0.00 (+0.00)
GET list_sboms 110 (+45) 0 1090.94 (-130.76) 584 (-47) 1680 (-101) 0.37 (+0.15) 0.00 (+0.00)
GET list_sboms_paginated 110 (+50) 0 1387.88 (-1276.48) 457 (+7) 2755 (-2728) 0.37 (+0.17) 0.00 (+0.00)
GET list_vulnerabilities 105 (+45) 0 234.78 (+45.91) 56 (+6) 405 (+81) 0.35 (+0.15) 0.00 (+0.00)
GET list_vulnerabilities_paginated 105 (+45) 0 170.74 (+17.81) 42 (+2) 300 (+26) 0.35 (+0.15) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 108 (+48) 0 57.66 (-20.96) 10 (-2) 251 (+51) 0.36 (+0.16) 0.00 (+0.00)
GET search_advisory 105 (+45) 0 862.73 (-90.15) 139 (+22) 2142 (+32) 0.35 (+0.15) 0.00 (+0.00)
GET search_exact_purl 110 (+45) 0 32.52 (-18.20) 2 (-1) 56 (-29) 0.37 (+0.15) 0.00 (+0.00)
GET search_purls 110 (+45) 0 6150.54 (-8252.57) 3061 (-5236) 8163 (-10973) 0.37 (+0.15) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 105 (+45) 0 594.95 (-31.90) 327 (+97) 1008 (-122) 0.35 (+0.15) 0.00 (+0.00)
Aggregated 2248 (+968) 0 672.01 (-508.55) 1 (0) 8163 (-10973) 7.49 (+3.23) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 8 (+1) 10 (+2) 16 (+2) 45 (+24) 49 (-7) 61 (-1) 71 (-1)
GET get_analysis_latest_cpe 100 (-10) 120 (-40) 140 (-40) 170 (-10) 200 (-20) 210 (-60) 290 (0) 310 (+10)
GET get_analysis_status 3 (+1) 3 (0) 4 (+1) 5 (+1) 12 (+5) 48 (+14) 52 (+1) 53 (-3)
GET get_sbom[sha256:720e4451…a939656247164447] 600 (+180) 700 (+220) 800 (+100) 1,000 (-1,000) 1,000 (-2,000) 1,709 (-1,291) 1,709 (-1,291) 1,709 (-1,291)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (-100) 900 (0) 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 470 (0) 490 (-10) 500 (0) 500 (-100) 600 (0) 700 (0) 800 (+100) 866 (+166)
GET list_advisory_paginated 410 (+10) 420 (-30) 450 (-30) 470 (-30) 490 (-10) 600 (+100) 600 (-100) 600 (-200)
GET list_importer 2 (0) 2 (0) 3 (0) 3 (-1) 5 (0) 5 (-2) 24 (-8) 45 (+12)
GET list_organizations 3 (-1) 5 (+1) 7 (+2) 10 (+3) 32 (+3) 39 (+1) 43 (-5) 50 (-4)
GET list_packages 410 (+60) 430 (+40) 460 (+60) 470 (+60) 500 (+80) 600 (+100) 799 (+199) 799 (+103)
GET list_packages_paginated 380 (+60) 410 (+30) 420 (+30) 470 (+60) 500 (+50) 500 (+30) 600 (+100) 665 (+93)
GET list_products 5 (-2) 6 (-2) 6 (-3) 8 (-2) 9 (-2) 9 (-4) 10 (-3) 12 (-42)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-781) 1,680 (-101) 1,680 (-101)
GET list_sboms_paginated 1,000 (-2,000) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-3,000) 2,000 (-3,000) 2,755 (-2,245) 2,755 (-2,245)
GET list_vulnerabilities 230 (+40) 260 (+40) 270 (+40) 280 (+10) 300 (0) 340 (+40) 400 (+90) 405 (+85)
GET list_vulnerabilities_paginated 180 (+20) 190 (0) 200 (0) 210 (+10) 220 (0) 270 (+50) 300 (+40) 300 (+30)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 47 (-22) 64 (-23) 68 (-32) 80 (-40) 120 (-50) 170 (-20) 190 (-10) 250 (+50)
GET search_advisory 800 (+100) 800 (-100) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 46 (-24) 47 (-24) 50 (-22) 51 (-22) 54 (-26) 55 (-26) 55 (-28) 56 (-29)
GET search_purls 7,000 (-9,000) 7,000 (-10,000) 7,000 (-10,000) 7,000 (-11,000) 8,000 (-10,000) 8,000 (-11,000) 8,000 (-11,000) 8,000 (-11,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 600 (-100) 700 (0) 800 (0) 800 (-100) 900 (0) 1,000 (0) 1,000 (0)
Aggregated 300 (+70) 420 (+20) 500 (0) 800 (-100) 1,000 (-1,000) 3,000 (-5,000) 7,000 (-11,000) 8,000 (-11,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 105 [200]
GET get_analysis_latest_cpe 109 [200]
GET get_analysis_status 109 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 109 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 108 [200]
GET list_advisory 105 [200]
GET list_advisory_paginated 105 [200]
GET list_importer 105 [200]
GET list_organizations 105 [200]
GET list_packages 105 [200]
GET list_packages_paginated 105 [200]
GET list_products 110 [200]
GET list_sboms 110 [200]
GET list_sboms_paginated 110 [200]
GET list_vulnerabilities 105 [200]
GET list_vulnerabilities_paginated 105 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 108 [200]
GET search_advisory 105 [200]
GET search_exact_purl 110 [200]
GET search_purls 110 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 105 [200]
Aggregated 2,248 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 105 (+45) 0 (0) 14.36 (+1.10) 8 (+1) 25 (+5) 0.35 (+0.15) 0.00 (+0.00)
1.1 list_organizations 105 (+45) 0 (0) 8.67 (+0.12) 1 (0) 50 (-4) 0.35 (+0.15) 0.00 (+0.00)
1.2 list_advisory 105 (+45) 0 (0) 481.27 (+22.20) 287 (+165) 866 (+125) 0.35 (+0.15) 0.00 (+0.00)
1.3 list_advisory_paginated 105 (+45) 0 (0) 406.09 (+4.57) 122 (+12) 619 (-199) 0.35 (+0.15) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 105 (+45) 0 (0) 13.37 (+1.19) 3 (+1) 71 (-1) 0.35 (+0.15) 0.00 (+0.00)
1.5 search_advisory 105 (+45) 0 (0) 862.78 (-90.12) 139 (+22) 2142 (+32) 0.35 (+0.15) 0.00 (+0.00)
1.6 list_vulnerabilities 105 (+45) 0 (0) 234.83 (+45.93) 56 (+6) 405 (+81) 0.35 (+0.15) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 105 (+45) 0 (0) 170.79 (+17.79) 42 (+2) 302 (+28) 0.35 (+0.15) 0.00 (+0.00)
1.8 list_importer 105 (+45) 0 (0) 3.01 (-0.29) 1 (0) 45 (+12) 0.35 (+0.15) 0.00 (+0.00)
1.9 list_packages 105 (+45) 0 (0) 409.76 (+81.50) 102 (+25) 799 (+103) 0.35 (+0.15) 0.00 (+0.00)
1.10 list_packages_paginated 105 (+45) 0 (0) 373.16 (+60.81) 96 (-4) 665 (+93) 0.35 (+0.15) 0.00 (+0.00)
1.11 search_purls 110 (+45) 0 (0) 6150.58 (-8252.56) 3061 (-5236) 8163 (-10973) 0.37 (+0.15) 0.00 (+0.00)
1.12 search_exact_purl 110 (+45) 0 (0) 32.54 (-18.22) 2 (-1) 56 (-29) 0.37 (+0.15) 0.00 (+0.00)
1.13 list_products 110 (+45) 0 (0) 5.86 (-2.63) 3 (-1) 12 (-42) 0.37 (+0.15) 0.00 (+0.00)
1.14 list_sboms 110 (+45) 0 (0) 1090.98 (-130.76) 584 (-47) 1680 (-101) 0.37 (+0.15) 0.00 (+0.00)
1.15 list_sboms_paginated 110 (+50) 0 (0) 1387.95 (-1276.50) 457 (+7) 2755 (-2728) 0.37 (+0.17) 0.00 (+0.00)
1.16 get_analysis_status 109 (+49) 0 (0) 7.10 (+1.45) 1 (0) 53 (-3) 0.36 (+0.16) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 109 (+49) 0 (0) 123.59 (-7.95) 34 (-1) 312 (+9) 0.36 (+0.16) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 109 (+49) 0 (0) 700.17 (-262.16) 199 (+62) 1709 (-1705) 0.36 (+0.16) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 108 (+48) 0 (0) 57.71 (-20.92) 10 (-2) 251 (+51) 0.36 (+0.16) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 108 (+48) 0 (0) 804.31 (-101.59) 504 (+7) 1104 (-337) 0.36 (+0.16) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 105 (+45) 0 (0) 595.04 (-32.01) 327 (+96) 1008 (-122) 0.35 (+0.15) 0.00 (+0.00)
Aggregated 2,353 (+1,013) 0 (0) 642.02 (-485.68) 1 (0) 8163 (-10973) 7.84 (+3.38) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 105 (+45) 13788.12 (-9737.86) 6782 (-5320) 17186 (-14768) 0.35 (+0.15) 21.00 (+9.00)
Aggregated 5 (0) 105 (+45) 13788.12 (-9737.86) 6782 (-5320) 17186 (-14768) 0.35 (+0.15) 21.00 (+9.00)

User Metrics