Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-27 03:09:3525-08-27 03:09:4000:00:050 → 5
Maintaining25-08-27 03:09:4025-08-27 03:14:4000:05:005
Decreasing25-08-27 03:14:4025-08-27 03:14:4000:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 70 (-45) 0 16.56 (+5.02) 3 (0) 74 (+12) 0.23 (-0.15) 0.00 (+0.00)
GET get_analysis_latest_cpe 75 (-40) 0 139.85 (+31.84) 34 (-3) 282 (-27) 0.25 (-0.13) 0.00 (+0.00)
GET get_analysis_status 75 (-40) 0 4.88 (-0.67) 1 (0) 51 (-5) 0.25 (-0.13) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 75 (-40) 0 976.71 (+346.34) 276 (+62) 2007 (+289) 0.25 (-0.13) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 74 (-41) 0 790.03 (-17.49) 406 (-42) 1006 (-100) 0.25 (-0.14) 0.00 (+0.00)
GET list_advisory 70 (-45) 0 484.51 (+44.51) 291 (+60) 1123 (-144) 0.23 (-0.15) 0.00 (+0.00)
GET list_advisory_paginated 70 (-45) 0 397.91 (-1.52) 173 (+23) 589 (-111) 0.23 (-0.15) 0.00 (+0.00)
GET list_importer 70 (-45) 0 5.47 (+1.55) 1 (0) 57 (+4) 0.23 (-0.15) 0.00 (+0.00)
GET list_organizations 70 (-45) 0 8.39 (-0.16) 1 (0) 53 (-4) 0.23 (-0.15) 0.00 (+0.00)
GET list_packages 70 (-45) 0 390.14 (+0.13) 82 (+9) 760 (-165) 0.23 (-0.15) 0.00 (+0.00)
GET list_packages_paginated 70 (-45) 0 347.29 (+25.56) 105 (+3) 879 (+296) 0.23 (-0.15) 0.00 (+0.00)
GET list_products 75 (-40) 0 8.57 (+0.69) 3 (+1) 32 (-38) 0.25 (-0.13) 0.00 (+0.00)
GET list_sboms 75 (-40) 0 1166.59 (-41.55) 529 (-61) 1609 (-77) 0.25 (-0.13) 0.00 (+0.00)
GET list_sboms_paginated 75 (-40) 0 1516.97 (+19.56) 484 (-12) 2823 (-290) 0.25 (-0.13) 0.00 (+0.00)
GET list_vulnerabilities 70 (-45) 0 234.57 (-27.41) 43 (-7) 391 (-104) 0.23 (-0.15) 0.00 (+0.00)
GET list_vulnerabilities_paginated 70 (-45) 0 171.71 (-17.44) 39 (+1) 382 (+50) 0.23 (-0.15) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 74 (-41) 0 56.88 (-8.50) 9 (-2) 184 (-26) 0.25 (-0.14) 0.00 (+0.00)
GET search_advisory 70 (-45) 0 1031.43 (+92.19) 225 (-142) 2087 (-31) 0.23 (-0.15) 0.00 (+0.00)
GET search_exact_purl 75 (-40) 0 47.36 (+41.79) 3 (+1) 66 (+6) 0.25 (-0.13) 0.00 (+0.00)
GET search_purls 75 (-45) 0 12051.91 (+6889.69) 5866 (+2894) 14207 (+7210) 0.25 (-0.15) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 73 (-42) 0 539.19 (-56.58) 257 (-29) 1123 (+141) 0.24 (-0.14) 0.00 (+0.00)
Aggregated 1521 (-899) 0 993.86 (+362.60) 1 (0) 14207 (+7210) 5.07 (-3.00) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (+1) 8 (+2) 14 (+6) 33 (+21) 45 (+5) 62 (+14) 64 (+9) 74 (+12)
GET get_analysis_latest_cpe 130 (+31) 160 (+50) 180 (+70) 190 (+60) 220 (+50) 230 (+50) 280 (+80) 280 (-29)
GET get_analysis_status 2 (0) 3 (0) 3 (0) 4 (0) 7 (0) 9 (-33) 43 (-12) 51 (-5)
GET get_sbom[sha256:720e4451…a939656247164447] 900 (+510) 1,000 (+550) 1,000 (+400) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+282) 2,000 (+282) 2,000 (+282)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 800 (0) 900 (0) 900 (0) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 480 (+40) 480 (+20) 500 (+20) 500 (0) 600 (0) 700 (+100) 800 (+100) 1,000 (0)
GET list_advisory_paginated 400 (0) 410 (0) 430 (-10) 470 (+10) 500 (+10) 500 (-100) 589 (-111) 589 (-111)
GET list_importer 2 (0) 3 (+1) 3 (+1) 4 (+1) 6 (+1) 38 (+30) 47 (-3) 57 (+4)
GET list_organizations 3 (-1) 3 (-1) 5 (-1) 6 (-2) 31 (+2) 45 (+9) 51 (0) 53 (-4)
GET list_packages 380 (-10) 400 (-10) 420 (-30) 470 (0) 500 (0) 700 (+100) 700 (-200) 760 (-140)
GET list_packages_paginated 340 (0) 380 (0) 400 (0) 410 (0) 490 (+30) 490 (+10) 600 (+100) 879 (+296)
GET list_products 7 (+1) 7 (0) 8 (0) 9 (0) 11 (0) 29 (+16) 31 (-34) 32 (-38)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-686) 1,609 (-77) 1,609 (-77)
GET list_sboms_paginated 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,823 (+823) 2,823 (-177) 2,823 (-177)
GET list_vulnerabilities 230 (-30) 260 (-20) 280 (-30) 290 (-60) 310 (-100) 330 (-80) 370 (-90) 390 (-105)
GET list_vulnerabilities_paginated 180 (-20) 190 (-10) 190 (-20) 200 (-40) 240 (-40) 280 (0) 290 (-10) 380 (+50)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 60 (-3) 65 (-9) 73 (-14) 78 (-32) 110 (-10) 150 (-10) 170 (-20) 180 (-30)
GET search_advisory 900 (+100) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 53 (+49) 53 (+49) 54 (+49) 55 (+49) 56 (+48) 63 (+53) 65 (+25) 66 (+6)
GET search_purls 13,000 (+8,000) 13,000 (+8,000) 13,000 (+8,000) 14,000 (+8,000) 14,000 (+8,000) 14,000 (+8,000) 14,000 (+7,003) 14,000 (+7,003)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 490 (-110) 500 (-100) 600 (-100) 600 (-100) 700 (-100) 900 (0) 1,000 (+18) 1,000 (+18)
Aggregated 300 (+10) 420 (+20) 500 (0) 900 (+100) 1,000 (0) 3,000 (0) 14,000 (+8,000) 14,000 (+7,003)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 70 [200]
GET get_analysis_latest_cpe 75 [200]
GET get_analysis_status 75 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 75 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 74 [200]
GET list_advisory 70 [200]
GET list_advisory_paginated 70 [200]
GET list_importer 70 [200]
GET list_organizations 70 [200]
GET list_packages 70 [200]
GET list_packages_paginated 70 [200]
GET list_products 75 [200]
GET list_sboms 75 [200]
GET list_sboms_paginated 75 [200]
GET list_vulnerabilities 70 [200]
GET list_vulnerabilities_paginated 70 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 74 [200]
GET search_advisory 70 [200]
GET search_exact_purl 75 [200]
GET search_purls 75 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 73 [200]
Aggregated 1,521 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 70 (-45) 0 (0) 13.06 (-1.39) 7 (0) 21 (-8) 0.23 (-0.15) 0.00 (+0.00)
1.1 list_organizations 70 (-45) 0 (0) 8.56 (-0.16) 1 (0) 53 (-4) 0.23 (-0.15) 0.00 (+0.00)
1.2 list_advisory 70 (-45) 0 (0) 484.53 (+44.48) 291 (+60) 1123 (-144) 0.23 (-0.15) 0.00 (+0.00)
1.3 list_advisory_paginated 70 (-45) 0 (0) 397.99 (-1.57) 173 (+22) 589 (-112) 0.23 (-0.15) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 70 (-45) 0 (0) 16.63 (+5.00) 3 (0) 74 (+12) 0.23 (-0.15) 0.00 (+0.00)
1.5 search_advisory 70 (-45) 0 (0) 1031.49 (+92.17) 225 (-142) 2087 (-31) 0.23 (-0.15) 0.00 (+0.00)
1.6 list_vulnerabilities 70 (-45) 0 (0) 234.61 (-27.44) 43 (-7) 391 (-104) 0.23 (-0.15) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 70 (-45) 0 (0) 171.83 (-17.35) 39 (+1) 382 (+50) 0.23 (-0.15) 0.00 (+0.00)
1.8 list_importer 70 (-45) 0 (0) 5.47 (+1.51) 1 (0) 57 (+4) 0.23 (-0.15) 0.00 (+0.00)
1.9 list_packages 70 (-45) 0 (0) 390.19 (+0.12) 82 (+9) 760 (-165) 0.23 (-0.15) 0.00 (+0.00)
1.10 list_packages_paginated 70 (-45) 0 (0) 347.37 (+25.61) 105 (+3) 880 (+297) 0.23 (-0.15) 0.00 (+0.00)
1.11 search_purls 75 (-45) 0 (0) 12051.93 (+6889.66) 5866 (+2894) 14207 (+7210) 0.25 (-0.15) 0.00 (+0.00)
1.12 search_exact_purl 75 (-40) 0 (0) 47.40 (+41.80) 3 (+1) 66 (+6) 0.25 (-0.13) 0.00 (+0.00)
1.13 list_products 75 (-40) 0 (0) 8.59 (+0.66) 3 (+1) 32 (-38) 0.25 (-0.13) 0.00 (+0.00)
1.14 list_sboms 75 (-40) 0 (0) 1166.60 (-41.58) 529 (-61) 1609 (-77) 0.25 (-0.13) 0.00 (+0.00)
1.15 list_sboms_paginated 75 (-40) 0 (0) 1517.01 (+19.48) 484 (-12) 2823 (-290) 0.25 (-0.13) 0.00 (+0.00)
1.16 get_analysis_status 75 (-40) 0 (0) 4.91 (-0.69) 1 (0) 51 (-5) 0.25 (-0.13) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 75 (-40) 0 (0) 139.87 (+31.80) 34 (-3) 282 (-27) 0.25 (-0.13) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 75 (-40) 0 (0) 976.77 (+346.33) 276 (+62) 2007 (+289) 0.25 (-0.13) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 74 (-41) 0 (0) 56.96 (-8.53) 9 (-2) 184 (-27) 0.25 (-0.14) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 74 (-41) 0 (0) 790.07 (-17.52) 406 (-43) 1006 (-100) 0.25 (-0.14) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 73 (-42) 0 (0) 539.26 (-56.64) 257 (-29) 1123 (+141) 0.24 (-0.14) 0.00 (+0.00)
Aggregated 1,591 (-944) 0 (0) 950.13 (+347.51) 1 (0) 14207 (+7210) 5.30 (-3.15) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 70 (-45) 20116.73 (+7147.09) 9682 (+2998) 23739 (+7827) 0.23 (-0.15) 14.00 (-9.00)
Aggregated 5 (0) 70 (-45) 20116.73 (+7147.09) 9682 (+2998) 23739 (+7827) 0.23 (-0.15) 14.00 (-9.00)

User Metrics