Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-08-30 03:02:3925-08-30 03:02:4400:00:050 → 5
Maintaining25-08-30 03:02:4425-08-30 03:07:4400:05:005
Decreasing25-08-30 03:07:4425-08-30 03:07:4700:00:030 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 50 (-10) 0 9.88 (-3.95) 2 (0) 58 (-10) 0.17 (-0.03) 0.00 (+0.00)
GET get_analysis_latest_cpe 50 (-10) 0 119.52 (-14.45) 36 (+1) 315 (+47) 0.17 (-0.03) 0.00 (+0.00)
GET get_analysis_status 50 (-10) 0 6.36 (+0.51) 1 (0) 51 (0) 0.17 (-0.03) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 50 (-10) 0 1058.78 (+359.65) 295 (+50) 3477 (+1844) 0.17 (-0.03) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 (-10) 0 821.82 (+68.95) 318 (-60) 1283 (+281) 0.17 (-0.03) 0.00 (+0.00)
GET list_advisory 50 (-10) 0 439.96 (-37.77) 108 (-78) 922 (+168) 0.17 (-0.03) 0.00 (+0.00)
GET list_advisory_paginated 50 (-10) 0 359.24 (-45.18) 90 (-54) 555 (-42) 0.17 (-0.03) 0.00 (+0.00)
GET list_importer 50 (-10) 0 2.30 (+0.20) 1 (0) 12 (0) 0.17 (-0.03) 0.00 (+0.00)
GET list_organizations 50 (-10) 0 7.74 (-2.04) 1 (0) 50 (0) 0.17 (-0.03) 0.00 (+0.00)
GET list_packages 50 (-10) 0 313.58 (-141.42) 86 (-12) 506 (-382) 0.17 (-0.03) 0.00 (+0.00)
GET list_packages_paginated 50 (-10) 0 297.10 (-71.12) 89 (-16) 463 (-227) 0.17 (-0.03) 0.00 (+0.00)
GET list_products 50 (-10) 0 8.10 (+0.57) 5 (+1) 14 (-1) 0.17 (-0.03) 0.00 (+0.00)
GET list_sboms 50 (-10) 0 1215.20 (+148.92) 650 (+60) 1665 (+124) 0.17 (-0.03) 0.00 (+0.00)
GET list_sboms_paginated 50 (-10) 0 2786.20 (+1604.57) 525 (+51) 6608 (+4056) 0.17 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities 50 (-10) 0 273.44 (-43.08) 48 (-63) 590 (+55) 0.17 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 50 (-10) 0 181.48 (-2.82) 26 (-24) 315 (+32) 0.17 (-0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 (-10) 0 68.02 (+24.44) 12 (+3) 174 (-12) 0.17 (-0.03) 0.00 (+0.00)
GET search_advisory 50 (-10) 0 803.18 (-104.20) 120 (-136) 1749 (-313) 0.17 (-0.03) 0.00 (+0.00)
GET search_exact_purl 50 (-10) 0 7.08 (+0.18) 5 (0) 12 (+1) 0.17 (-0.03) 0.00 (+0.00)
GET search_purls 55 (-10) 0 19111.20 (+2843.83) 14054 (+1625) 23040 (+5321) 0.18 (-0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 (-10) 0 651.28 (+78.01) 242 (-7) 1493 (+663) 0.17 (-0.03) 0.00 (+0.00)
Aggregated 1055 (-210) 0 1443.25 (+246.41) 1 (0) 23040 (+5321) 3.52 (-0.70) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (-1) 6 (-2) 7 (-5) 10 (-3) 13 (-35) 49 (-6) 58 (0) 58 (-10)
GET get_analysis_latest_cpe 110 (-30) 120 (-30) 120 (-50) 160 (-20) 170 (-20) 190 (-20) 315 (+65) 315 (+47)
GET get_analysis_status 3 (+1) 3 (+1) 4 (+1) 5 (+1) 6 (+1) 47 (+6) 51 (+3) 51 (0)
GET get_sbom[sha256:720e4451…a939656247164447] 600 (0) 700 (+100) 800 (+100) 2,000 (+1,200) 3,000 (+2,000) 3,000 (+1,367) 3,000 (+1,367) 3,000 (+1,367)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 900 (+100) 900 (0) 900 (0) 1,000 (+100) 1,000 (+100) 1,000 (0) 1,000 (0)
GET list_advisory 440 (-20) 460 (-20) 480 (-20) 500 (0) 600 (0) 700 (0) 900 (+200) 900 (+146)
GET list_advisory_paginated 390 (-10) 410 (-10) 430 (-30) 460 (-30) 480 (-20) 500 (-97) 555 (-42) 555 (-42)
GET list_importer 2 (0) 2 (0) 3 (+1) 3 (+1) 3 (0) 4 (0) 12 (+7) 12 (0)
GET list_organizations 3 (0) 4 (-1) 6 (0) 8 (-1) 23 (-14) 36 (-7) 50 (0) 50 (0)
GET list_packages 370 (-40) 380 (-70) 390 (-80) 430 (-50) 450 (-250) 460 (-428) 500 (-388) 500 (-388)
GET list_packages_paginated 320 (-70) 370 (-40) 390 (-30) 400 (-70) 420 (-60) 430 (-70) 460 (-40) 460 (-230)
GET list_products 7 (0) 8 (0) 10 (+1) 11 (+2) 12 (+2) 13 (-1) 14 (0) 14 (-1)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,665 (+665) 1,665 (+665) 1,665 (+124) 1,665 (+124)
GET list_sboms_paginated 3,000 (+2,000) 3,000 (+2,000) 3,000 (+2,000) 4,000 (+2,000) 5,000 (+3,000) 5,000 (+3,000) 6,608 (+4,608) 6,608 (+4,056)
GET list_vulnerabilities 280 (-20) 300 (-50) 320 (-40) 360 (-40) 470 (+30) 500 (0) 590 (+90) 590 (+90)
GET list_vulnerabilities_paginated 180 (0) 200 (+10) 250 (+50) 270 (+60) 290 (+60) 300 (+60) 315 (+55) 315 (+35)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (+39) 78 (+46) 91 (+29) 100 (+34) 120 (+21) 130 (+20) 170 (+10) 170 (-16)
GET search_advisory 600 (-200) 800 (-100) 900 (0) 1,000 (0) 1,749 (-251) 1,749 (-251) 1,749 (-251) 1,749 (-251)
GET search_exact_purl 7 (0) 7 (0) 7 (0) 8 (0) 8 (-1) 9 (0) 12 (+2) 12 (+1)
GET search_purls 19,000 (+2,000) 20,000 (+3,000) 21,000 (+4,000) 22,000 (+5,000) 22,000 (+5,000) 23,000 (+5,281) 23,000 (+5,281) 23,000 (+5,281)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 600 (0) 700 (+100) 700 (0) 1,000 (+200) 1,000 (+200) 1,000 (+200) 1,000 (+200)
Aggregated 280 (-50) 400 (-30) 500 (0) 800 (0) 2,000 (+1,000) 14,000 (+2,000) 22,000 (+5,000) 23,000 (+5,281)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 50 [200]
GET get_analysis_latest_cpe 50 [200]
GET get_analysis_status 50 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 50 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 [200]
GET list_advisory 50 [200]
GET list_advisory_paginated 50 [200]
GET list_importer 50 [200]
GET list_organizations 50 [200]
GET list_packages 50 [200]
GET list_packages_paginated 50 [200]
GET list_products 50 [200]
GET list_sboms 50 [200]
GET list_sboms_paginated 50 [200]
GET list_vulnerabilities 50 [200]
GET list_vulnerabilities_paginated 50 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 [200]
GET search_advisory 50 [200]
GET search_exact_purl 50 [200]
GET search_purls 55 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 [200]
Aggregated 1,055 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 50 (-10) 0 (0) 12.92 (-0.36) 7 (0) 22 (-2) 0.17 (-0.03) 0.00 (+0.00)
1.1 list_organizations 50 (-10) 0 (0) 7.84 (-2.11) 1 (0) 50 (0) 0.17 (-0.03) 0.00 (+0.00)
1.2 list_advisory 50 (-10) 0 (0) 439.98 (-37.80) 108 (-78) 922 (+168) 0.17 (-0.03) 0.00 (+0.00)
1.3 list_advisory_paginated 50 (-10) 0 (0) 359.28 (-45.17) 90 (-54) 555 (-42) 0.17 (-0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 50 (-10) 0 (0) 9.90 (-3.98) 2 (0) 58 (-10) 0.17 (-0.03) 0.00 (+0.00)
1.5 search_advisory 50 (-10) 0 (0) 803.22 (-104.23) 120 (-136) 1749 (-313) 0.17 (-0.03) 0.00 (+0.00)
1.6 list_vulnerabilities 50 (-10) 0 (0) 273.52 (-43.08) 48 (-63) 590 (+55) 0.17 (-0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 50 (-10) 0 (0) 181.52 (-2.80) 26 (-24) 315 (+32) 0.17 (-0.03) 0.00 (+0.00)
1.8 list_importer 50 (-10) 0 (0) 2.32 (+0.20) 1 (0) 12 (0) 0.17 (-0.03) 0.00 (+0.00)
1.9 list_packages 50 (-10) 0 (0) 313.64 (-141.43) 86 (-12) 506 (-382) 0.17 (-0.03) 0.00 (+0.00)
1.10 list_packages_paginated 50 (-10) 0 (0) 297.14 (-71.16) 89 (-16) 463 (-227) 0.17 (-0.03) 0.00 (+0.00)
1.11 search_purls 55 (-10) 0 (0) 19111.22 (+2843.82) 14054 (+1625) 23040 (+5321) 0.18 (-0.03) 0.00 (+0.00)
1.12 search_exact_purl 50 (-10) 0 (0) 7.10 (+0.17) 5 (0) 12 (+1) 0.17 (-0.03) 0.00 (+0.00)
1.13 list_products 50 (-10) 0 (0) 8.12 (+0.55) 5 (+1) 14 (-1) 0.17 (-0.03) 0.00 (+0.00)
1.14 list_sboms 50 (-10) 0 (0) 1215.22 (+148.89) 650 (+60) 1665 (+124) 0.17 (-0.03) 0.00 (+0.00)
1.15 list_sboms_paginated 50 (-10) 0 (0) 2786.24 (+1604.59) 525 (+51) 6608 (+4056) 0.17 (-0.03) 0.00 (+0.00)
1.16 get_analysis_status 50 (-10) 0 (0) 6.38 (+0.50) 1 (0) 51 (0) 0.17 (-0.03) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 50 (-10) 0 (0) 119.54 (-14.46) 36 (+1) 315 (+46) 0.17 (-0.03) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 50 (-10) 0 (0) 1058.84 (+359.59) 295 (+49) 3477 (+1844) 0.17 (-0.03) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 (-10) 0 (0) 68.08 (+24.40) 12 (+3) 174 (-12) 0.17 (-0.03) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 (-10) 0 (0) 821.90 (+68.97) 318 (-60) 1283 (+281) 0.17 (-0.03) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 (-10) 0 (0) 651.34 (+78.06) 242 (-7) 1493 (+663) 0.17 (-0.03) 0.00 (+0.00)
Aggregated 1,105 (-220) 0 (0) 1377.94 (+235.31) 1 (0) 23040 (+5321) 3.68 (-0.73) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 50 (-10) 28793.18 (+4805.41) 22606 (+4694) 33736 (+7512) 0.17 (-0.03) 10.00 (-2.00)
Aggregated 5 (0) 50 (-10) 28793.18 (+4805.41) 22606 (+4694) 33736 (+7512) 0.17 (-0.03) 10.00 (-2.00)

User Metrics