Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-24 03:30:5425-08-24 03:30:5900:00:050 → 5
Maintaining25-08-24 03:30:5925-08-24 03:35:5900:05:005
Decreasing25-08-24 03:35:5925-08-24 03:36:0200:00:030 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 55 (-40) 0 12.53 (-2.73) 3 (0) 59 (-9) 0.18 (-0.13) 0.00 (+0.00)
GET get_analysis_latest_cpe 55 (-40) 0 153.45 (+11.28) 34 (-1) 308 (+6) 0.18 (-0.13) 0.00 (+0.00)
GET get_analysis_status 55 (-40) 0 6.31 (+1.69) 1 (0) 54 (-2) 0.18 (-0.13) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 55 (-40) 0 737.80 (-99.14) 219 (+10) 1503 (-496) 0.18 (-0.13) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 (-40) 0 795.60 (-34.98) 484 (-2) 1096 (-100) 0.18 (-0.13) 0.00 (+0.00)
GET list_advisory 55 (-40) 0 482.60 (+5.38) 280 (+83) 1017 (+44) 0.18 (-0.13) 0.00 (+0.00)
GET list_advisory_paginated 55 (-40) 0 401.58 (+0.58) 151 (-4) 600 (-60) 0.18 (-0.13) 0.00 (+0.00)
GET list_importer 55 (-40) 0 3.89 (-0.58) 1 (0) 49 (-6) 0.18 (-0.13) 0.00 (+0.00)
GET list_organizations 55 (-40) 0 7.02 (-3.08) 1 (0) 39 (-16) 0.18 (-0.13) 0.00 (+0.00)
GET list_packages 55 (-40) 0 423.31 (+27.14) 67 (-43) 911 (-11) 0.18 (-0.13) 0.00 (+0.00)
GET list_packages_paginated 55 (-40) 0 369.22 (+22.78) 102 (-6) 551 (-28) 0.18 (-0.13) 0.00 (+0.00)
GET list_products 55 (-40) 0 9.09 (+3.16) 5 (+2) 22 (+11) 0.18 (-0.13) 0.00 (+0.00)
GET list_sboms 55 (-40) 0 1068.09 (-104.09) 648 (+126) 1570 (-110) 0.18 (-0.13) 0.00 (+0.00)
GET list_sboms_paginated 55 (-40) 0 1213.78 (-431.45) 437 (-48) 2678 (-837) 0.18 (-0.13) 0.00 (+0.00)
GET list_vulnerabilities 55 (-40) 0 318.71 (+102.59) 40 (-23) 592 (+198) 0.18 (-0.13) 0.00 (+0.00)
GET list_vulnerabilities_paginated 55 (-40) 0 194.62 (+23.47) 36 (-5) 348 (+25) 0.18 (-0.13) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 (-40) 0 55.87 (-5.45) 11 (+1) 190 (-1) 0.18 (-0.13) 0.00 (+0.00)
GET search_advisory 55 (-40) 0 951.58 (+13.10) 167 (+28) 1744 (-573) 0.18 (-0.13) 0.00 (+0.00)
GET search_exact_purl 55 (-40) 0 7.11 (-29.28) 5 (+2) 13 (-39) 0.18 (-0.13) 0.00 (+0.00)
GET search_purls 60 (-40) 0 18229.77 (+10974.07) 15182 (+11297) 22086 (+11998) 0.20 (-0.13) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 (-40) 0 594.11 (-27.44) 249 (-11) 877 (-236) 0.18 (-0.13) 0.00 (+0.00)
Aggregated 1160 (-840) 0 1313.04 (+554.43) 1 (0) 22086 (+11998) 3.87 (-2.80) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (-1) 8 (0) 11 (0) 14 (0) 33 (-19) 39 (-16) 59 (-3) 59 (-9)
GET get_analysis_latest_cpe 160 (+30) 170 (+10) 180 (-10) 190 (0) 220 (+20) 280 (+60) 300 (+10) 308 (+8)
GET get_analysis_status 2 (0) 3 (+1) 4 (+1) 4 (+1) 7 (+1) 50 (+42) 52 (0) 54 (-2)
GET get_sbom[sha256:720e4451…a939656247164447] 600 (-100) 700 (-100) 1,000 (0) 1,000 (0) 1,000 (-999) 1,000 (-999) 1,000 (-999) 1,503 (-496)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 900 (0) 900 (0) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 470 (+20) 490 (+10) 500 (0) 500 (0) 600 (0) 700 (0) 800 (0) 1,000 (+27)
GET list_advisory_paginated 410 (0) 420 (0) 460 (+10) 490 (+10) 500 (0) 500 (0) 600 (0) 600 (-60)
GET list_importer 2 (0) 3 (+1) 3 (0) 3 (0) 5 (0) 5 (-3) 32 (-17) 49 (-6)
GET list_organizations 3 (-1) 5 (+1) 6 (0) 7 (-5) 18 (-19) 22 (-18) 39 (-11) 39 (-16)
GET list_packages 400 (0) 440 (+30) 440 (+10) 500 (+20) 600 (+100) 700 (+100) 800 (-100) 900 (0)
GET list_packages_paginated 400 (+50) 410 (+20) 420 (+20) 460 (+40) 490 (+20) 490 (+10) 500 (-79) 551 (-28)
GET list_products 7 (+2) 8 (+3) 9 (+2) 11 (+3) 15 (+6) 22 (+13) 22 (+12) 22 (+11)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-680) 1,000 (-680) 1,570 (-110)
GET list_sboms_paginated 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 2,678 (-837)
GET list_vulnerabilities 330 (+120) 370 (+140) 390 (+150) 400 (+140) 500 (+210) 500 (+210) 592 (+202) 592 (+202)
GET list_vulnerabilities_paginated 200 (+20) 210 (+20) 220 (+30) 230 (+30) 250 (+30) 310 (+60) 320 (+50) 348 (+28)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 35 (-28) 58 (-10) 74 (-2) 83 (-6) 110 (-20) 170 (+10) 190 (+10) 190 (0)
GET search_advisory 900 (+200) 1,000 (+100) 1,000 (0) 1,000 (0) 1,744 (-256) 1,744 (-256) 1,744 (-256) 1,744 (-256)
GET search_exact_purl 7 (-39) 7 (-40) 7 (-40) 8 (-39) 9 (-39) 10 (-40) 11 (-41) 13 (-39)
GET search_purls 18,000 (+11,000) 18,000 (+10,000) 20,000 (+12,000) 21,000 (+12,000) 21,000 (+12,000) 22,000 (+13,000) 22,000 (+12,000) 22,000 (+12,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 600 (-100) 700 (0) 800 (0) 877 (-23) 877 (-23) 877 (-123) 877 (-123)
Aggregated 330 (+40) 430 (+20) 500 (0) 800 (-100) 1,000 (0) 15,000 (+11,000) 21,000 (+12,000) 22,000 (+12,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 55 [200]
GET get_analysis_latest_cpe 55 [200]
GET get_analysis_status 55 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 55 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 [200]
GET list_advisory 55 [200]
GET list_advisory_paginated 55 [200]
GET list_importer 55 [200]
GET list_organizations 55 [200]
GET list_packages 55 [200]
GET list_packages_paginated 55 [200]
GET list_products 55 [200]
GET list_sboms 55 [200]
GET list_sboms_paginated 55 [200]
GET list_vulnerabilities 55 [200]
GET list_vulnerabilities_paginated 55 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 [200]
GET search_advisory 55 [200]
GET search_exact_purl 55 [200]
GET search_purls 60 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 [200]
Aggregated 1,160 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 55 (-40) 0 (0) 15.25 (+0.98) 8 (+1) 25 (0) 0.18 (-0.13) 0.00 (+0.00)
1.1 list_organizations 55 (-40) 0 (0) 7.20 (-3.12) 1 (0) 40 (-16) 0.18 (-0.13) 0.00 (+0.00)
1.2 list_advisory 55 (-40) 0 (0) 482.69 (+5.45) 280 (+83) 1017 (+44) 0.18 (-0.13) 0.00 (+0.00)
1.3 list_advisory_paginated 55 (-40) 0 (0) 401.62 (+0.56) 151 (-4) 600 (-60) 0.18 (-0.13) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 55 (-40) 0 (0) 12.58 (-2.69) 3 (0) 59 (-9) 0.18 (-0.13) 0.00 (+0.00)
1.5 search_advisory 55 (-40) 0 (0) 951.64 (+13.06) 167 (+28) 1745 (-572) 0.18 (-0.13) 0.00 (+0.00)
1.6 list_vulnerabilities 55 (-40) 0 (0) 318.78 (+102.60) 40 (-23) 592 (+198) 0.18 (-0.13) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 55 (-40) 0 (0) 194.67 (+23.49) 36 (-5) 348 (+25) 0.18 (-0.13) 0.00 (+0.00)
1.8 list_importer 55 (-40) 0 (0) 3.95 (-0.54) 1 (0) 50 (-5) 0.18 (-0.13) 0.00 (+0.00)
1.9 list_packages 55 (-40) 0 (0) 423.31 (+27.08) 67 (-43) 911 (-11) 0.18 (-0.13) 0.00 (+0.00)
1.10 list_packages_paginated 55 (-40) 0 (0) 369.27 (+22.79) 102 (-6) 551 (-28) 0.18 (-0.13) 0.00 (+0.00)
1.11 search_purls 60 (-40) 0 (0) 18229.80 (+10974.05) 15182 (+11297) 22086 (+11998) 0.20 (-0.13) 0.00 (+0.00)
1.12 search_exact_purl 55 (-40) 0 (0) 7.16 (-29.25) 5 (+2) 13 (-39) 0.18 (-0.13) 0.00 (+0.00)
1.13 list_products 55 (-40) 0 (0) 9.13 (+3.14) 5 (+2) 22 (+11) 0.18 (-0.13) 0.00 (+0.00)
1.14 list_sboms 55 (-40) 0 (0) 1068.15 (-104.08) 648 (+126) 1570 (-110) 0.18 (-0.13) 0.00 (+0.00)
1.15 list_sboms_paginated 55 (-40) 0 (0) 1213.84 (-431.47) 437 (-48) 2678 (-837) 0.18 (-0.13) 0.00 (+0.00)
1.16 get_analysis_status 55 (-40) 0 (0) 6.33 (+1.65) 1 (0) 54 (-2) 0.18 (-0.13) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 55 (-40) 0 (0) 153.51 (+11.29) 34 (-1) 308 (+6) 0.18 (-0.13) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 55 (-40) 0 (0) 737.82 (-99.15) 219 (+10) 1503 (-496) 0.18 (-0.13) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 (-40) 0 (0) 55.91 (-5.50) 11 (+1) 190 (-1) 0.18 (-0.13) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 (-40) 0 (0) 795.65 (-35.04) 484 (-2) 1096 (-100) 0.18 (-0.13) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 (-40) 0 (0) 594.15 (-27.45) 249 (-11) 877 (-236) 0.18 (-0.13) 0.00 (+0.00)
Aggregated 1,215 (-880) 0 (0) 1253.61 (+529.39) 1 (0) 22086 (+11998) 4.05 (-2.93) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 55 (-40) 26131.07 (+10600.60) 22434 (+14704) 30047 (+8739) 0.18 (-0.13) 11.00 (-8.00)
Aggregated 5 (0) 55 (-40) 26131.07 (+10600.60) 22434 (+14704) 30047 (+8739) 0.18 (-0.13) 11.00 (-8.00)

User Metrics