Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-26 03:14:5425-08-26 03:14:5900:00:050 → 5
Maintaining25-08-26 03:14:5925-08-26 03:19:5900:05:005
Decreasing25-08-26 03:19:5925-08-26 03:20:0300:00:040 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 115 (+50) 0 11.54 (-0.38) 3 (0) 62 (+2) 0.38 (+0.17) 0.00 (+0.00)
GET get_analysis_latest_cpe 115 (+50) 0 108.02 (-37.47) 37 (+2) 309 (+25) 0.38 (+0.17) 0.00 (+0.00)
GET get_analysis_status 115 (+50) 0 5.55 (+2.02) 1 (0) 56 (+6) 0.38 (+0.17) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 115 (+50) 0 630.37 (-389.80) 214 (-121) 1718 (-168) 0.38 (+0.17) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 115 (+50) 0 807.52 (-4.94) 448 (-24) 1106 (-212) 0.38 (+0.17) 0.00 (+0.00)
GET list_advisory 115 (+50) 0 440.01 (-46.79) 231 (-28) 1267 (+421) 0.38 (+0.17) 0.00 (+0.00)
GET list_advisory_paginated 115 (+50) 0 399.43 (-46.63) 150 (-27) 700 (-530) 0.38 (+0.17) 0.00 (+0.00)
GET list_importer 115 (+50) 0 3.92 (+1.11) 1 (0) 53 (+5) 0.38 (+0.17) 0.00 (+0.00)
GET list_organizations 115 (+50) 0 8.55 (+1.12) 1 (0) 57 (+8) 0.38 (+0.17) 0.00 (+0.00)
GET list_packages 115 (+50) 0 390.02 (-42.17) 73 (-22) 925 (+80) 0.38 (+0.17) 0.00 (+0.00)
GET list_packages_paginated 115 (+50) 0 321.72 (-81.20) 102 (-1) 583 (-4) 0.38 (+0.17) 0.00 (+0.00)
GET list_products 115 (+50) 0 7.89 (+0.19) 2 (-2) 70 (+57) 0.38 (+0.17) 0.00 (+0.00)
GET list_sboms 115 (+50) 0 1208.14 (+105.39) 590 (+16) 1686 (-74) 0.38 (+0.17) 0.00 (+0.00)
GET list_sboms_paginated 115 (+50) 0 1497.42 (+135.68) 496 (+10) 3113 (-297) 0.38 (+0.17) 0.00 (+0.00)
GET list_vulnerabilities 115 (+50) 0 261.98 (-25.88) 50 (+1) 495 (-52) 0.38 (+0.17) 0.00 (+0.00)
GET list_vulnerabilities_paginated 115 (+50) 0 189.16 (+0.23) 38 (+9) 332 (+37) 0.38 (+0.17) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 115 (+50) 0 65.38 (+16.84) 11 (+1) 210 (+55) 0.38 (+0.17) 0.00 (+0.00)
GET search_advisory 115 (+50) 0 939.24 (+68.38) 367 (+248) 2118 (+111) 0.38 (+0.17) 0.00 (+0.00)
GET search_exact_purl 115 (+50) 0 5.57 (-0.90) 2 (-3) 60 (+50) 0.38 (+0.17) 0.00 (+0.00)
GET search_purls 120 (+50) 0 5162.22 (-9531.85) 2972 (-4341) 6997 (-9995) 0.40 (+0.17) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 115 (+50) 0 595.77 (+46.02) 286 (+50) 982 (-117) 0.38 (+0.17) 0.00 (+0.00)
Aggregated 2420 (+1050) 0 631.26 (-508.41) 1 (0) 6997 (-9995) 8.07 (+3.50) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 6 (-1) 8 (0) 12 (+1) 40 (-1) 48 (-4) 55 (-2) 62 (+2)
GET get_analysis_latest_cpe 99 (-31) 110 (-50) 110 (-90) 130 (-70) 170 (-60) 180 (-80) 200 (-80) 309 (+29)
GET get_analysis_status 2 (0) 3 (0) 3 (0) 4 (0) 7 (+2) 42 (+36) 55 (+46) 56 (+6)
GET get_sbom[sha256:720e4451…a939656247164447] 390 (-510) 450 (-550) 600 (-400) 1,000 (-886) 1,000 (-886) 1,718 (-168) 1,718 (-168) 1,718 (-168)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 800 (-100) 900 (0) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 440 (-40) 460 (-30) 480 (-20) 500 (0) 600 (-100) 600 (-100) 700 (-100) 1,000 (+200)
GET list_advisory_paginated 400 (-40) 410 (-60) 440 (-40) 460 (-40) 490 (-110) 600 (0) 700 (+100) 700 (-300)
GET list_importer 2 (0) 2 (0) 2 (0) 3 (0) 5 (+1) 8 (+4) 50 (+44) 53 (+5)
GET list_organizations 4 (+1) 4 (0) 6 (0) 8 (-1) 29 (+11) 36 (0) 51 (+5) 57 (+8)
GET list_packages 390 (-40) 410 (-40) 450 (-20) 470 (-20) 500 (-100) 600 (0) 900 (+100) 900 (+100)
GET list_packages_paginated 340 (-80) 380 (-80) 400 (-70) 410 (-70) 460 (-30) 480 (-20) 500 (0) 583 (-4)
GET list_products 6 (-1) 7 (-1) 8 (-1) 9 (-1) 11 (0) 13 (0) 65 (+52) 70 (+57)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,686 (+686) 1,686 (-74) 1,686 (-74)
GET list_sboms_paginated 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (-1,000) 3,000 (0) 3,000 (0)
GET list_vulnerabilities 260 (-40) 280 (-30) 310 (-30) 350 (-30) 410 (-50) 410 (-90) 460 (-40) 495 (-5)
GET list_vulnerabilities_paginated 200 (0) 200 (-10) 210 (0) 240 (0) 280 (+40) 280 (+30) 300 (+40) 330 (+35)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 63 (+34) 74 (+12) 87 (+18) 110 (+24) 120 (+20) 160 (+50) 190 (+70) 210 (+55)
GET search_advisory 800 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 4 (-2) 4 (-3) 5 (-2) 6 (-1) 8 (0) 10 (+2) 40 (+31) 60 (+50)
GET search_purls 5,000 (-10,000) 5,000 (-11,000) 5,000 (-11,000) 6,000 (-10,000) 6,000 (-10,000) 6,000 (-10,992) 6,997 (-9,995) 6,997 (-9,995)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+100) 600 (+100) 700 (+100) 700 (0) 800 (0) 900 (+100) 982 (-18) 982 (-18)
Aggregated 290 (-60) 400 (-60) 500 (0) 800 (0) 1,000 (0) 3,000 (-5,000) 6,000 (-10,000) 6,997 (-9,995)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 115 [200]
GET get_analysis_latest_cpe 115 [200]
GET get_analysis_status 115 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 115 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 115 [200]
GET list_advisory 115 [200]
GET list_advisory_paginated 115 [200]
GET list_importer 115 [200]
GET list_organizations 115 [200]
GET list_packages 115 [200]
GET list_packages_paginated 115 [200]
GET list_products 115 [200]
GET list_sboms 115 [200]
GET list_sboms_paginated 115 [200]
GET list_vulnerabilities 115 [200]
GET list_vulnerabilities_paginated 115 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 115 [200]
GET search_advisory 115 [200]
GET search_exact_purl 115 [200]
GET search_purls 120 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 115 [200]
Aggregated 2,420 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 115 (+50) 0 (0) 14.44 (+0.60) 7 (+1) 29 (+8) 0.38 (+0.17) 0.00 (+0.00)
1.1 list_organizations 115 (+50) 0 (0) 8.71 (+1.13) 1 (0) 57 (+7) 0.38 (+0.17) 0.00 (+0.00)
1.2 list_advisory 115 (+50) 0 (0) 440.05 (-46.76) 231 (-28) 1267 (+421) 0.38 (+0.17) 0.00 (+0.00)
1.3 list_advisory_paginated 115 (+50) 0 (0) 399.56 (-46.61) 151 (-26) 701 (-529) 0.38 (+0.17) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 115 (+50) 0 (0) 11.63 (-0.33) 3 (0) 62 (+2) 0.38 (+0.17) 0.00 (+0.00)
1.5 search_advisory 115 (+50) 0 (0) 939.31 (+68.42) 367 (+248) 2118 (+111) 0.38 (+0.17) 0.00 (+0.00)
1.6 list_vulnerabilities 115 (+50) 0 (0) 262.05 (-25.84) 50 (+1) 495 (-52) 0.38 (+0.17) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 115 (+50) 0 (0) 189.18 (+0.26) 38 (+9) 332 (+37) 0.38 (+0.17) 0.00 (+0.00)
1.8 list_importer 115 (+50) 0 (0) 3.96 (+1.08) 1 (0) 53 (+5) 0.38 (+0.17) 0.00 (+0.00)
1.9 list_packages 115 (+50) 0 (0) 390.06 (-42.15) 73 (-22) 925 (+80) 0.38 (+0.17) 0.00 (+0.00)
1.10 list_packages_paginated 115 (+50) 0 (0) 321.77 (-81.17) 102 (-1) 583 (-4) 0.38 (+0.17) 0.00 (+0.00)
1.11 search_purls 120 (+50) 0 (0) 5162.27 (-9531.82) 2972 (-4341) 6997 (-9995) 0.40 (+0.17) 0.00 (+0.00)
1.12 search_exact_purl 115 (+50) 0 (0) 5.60 (-0.89) 2 (-3) 60 (+50) 0.38 (+0.17) 0.00 (+0.00)
1.13 list_products 115 (+50) 0 (0) 7.92 (+0.21) 2 (-2) 70 (+57) 0.38 (+0.17) 0.00 (+0.00)
1.14 list_sboms 115 (+50) 0 (0) 1208.18 (+105.40) 590 (+16) 1686 (-74) 0.38 (+0.17) 0.00 (+0.00)
1.15 list_sboms_paginated 115 (+50) 0 (0) 1497.53 (+135.70) 496 (+10) 3113 (-297) 0.38 (+0.17) 0.00 (+0.00)
1.16 get_analysis_status 115 (+50) 0 (0) 5.60 (+2.03) 1 (0) 56 (+6) 0.38 (+0.17) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 115 (+50) 0 (0) 108.07 (-37.45) 37 (+2) 309 (+25) 0.38 (+0.17) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 115 (+50) 0 (0) 630.44 (-389.85) 214 (-121) 1718 (-168) 0.38 (+0.17) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 115 (+50) 0 (0) 65.49 (+16.90) 11 (+1) 211 (+55) 0.38 (+0.17) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 115 (+50) 0 (0) 807.59 (-4.92) 449 (-23) 1106 (-212) 0.38 (+0.17) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 115 (+50) 0 (0) 595.90 (+46.10) 286 (+50) 982 (-117) 0.38 (+0.17) 0.00 (+0.00)
Aggregated 2,535 (+1,100) 0 (0) 602.62 (-485.43) 1 (0) 6997 (-9995) 8.45 (+3.67) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 115 (+50) 12969.63 (-10026.09) 6684 (-4559) 15912 (-11388) 0.38 (+0.17) 23.00 (+10.00)
Aggregated 5 (0) 115 (+50) 12969.63 (-10026.09) 6684 (-4559) 15912 (-11388) 0.38 (+0.17) 23.00 (+10.00)

User Metrics