Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-01 03:36:2425-09-01 03:36:2900:00:050 → 5
Maintaining25-09-01 03:36:2925-09-01 03:41:2900:05:005
Decreasing25-09-01 03:41:2925-09-01 03:41:3000:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 54 (-6) 0 15.19 (+3.80) 3 (0) 88 (+22) 0.18 (-0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 55 (-5) 0 136.44 (-7.73) 26 (-2) 371 (+86) 0.18 (-0.02) 0.00 (+0.00)
GET get_analysis_status 55 (-5) 0 9.69 (+3.16) 1 (0) 53 (-2) 0.18 (-0.02) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 55 (-5) 0 860.07 (-82.16) 198 (-16) 2009 (-51) 0.18 (-0.02) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 (-5) 0 775.76 (+12.13) 468 (+67) 1026 (+42) 0.18 (-0.02) 0.00 (+0.00)
GET list_advisory 55 (-5) 0 534.13 (+73.93) 175 (+48) 985 (+185) 0.18 (-0.02) 0.00 (+0.00)
GET list_advisory_paginated 54 (-6) 0 457.70 (+42.69) 221 (+122) 648 (+111) 0.18 (-0.02) 0.00 (+0.00)
GET list_importer 50 (-10) 0 2.60 (+0.08) 1 (0) 17 (+8) 0.17 (-0.03) 0.00 (+0.00)
GET list_organizations 55 (-5) 0 7.33 (+1.76) 1 (0) 43 (+15) 0.18 (-0.02) 0.00 (+0.00)
GET list_packages 50 (-10) 0 466.70 (+39.13) 84 (-5) 882 (-46) 0.17 (-0.03) 0.00 (+0.00)
GET list_packages_paginated 50 (-10) 0 400.42 (+13.50) 110 (+20) 610 (+12) 0.17 (-0.03) 0.00 (+0.00)
GET list_products 55 (-5) 0 8.13 (-2.66) 4 (+1) 13 (-35) 0.18 (-0.02) 0.00 (+0.00)
GET list_sboms 55 (-5) 0 1046.20 (-151.75) 626 (+69) 1596 (-116) 0.18 (-0.02) 0.00 (+0.00)
GET list_sboms_paginated 55 (-5) 0 1431.42 (+56.17) 505 (+40) 2845 (-265) 0.18 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities 50 (-10) 0 334.08 (+8.93) 103 (+51) 557 (-8) 0.17 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 50 (-10) 0 215.60 (+27.13) 43 (+4) 282 (+1) 0.17 (-0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 (-5) 0 44.00 (-8.12) 11 (+2) 165 (+18) 0.18 (-0.02) 0.00 (+0.00)
GET search_advisory 54 (-6) 0 946.09 (-116.04) 285 (+124) 1918 (-123) 0.18 (-0.02) 0.00 (+0.00)
GET search_exact_purl 55 (-5) 0 30.42 (-37.53) 7 (0) 36 (-56) 0.18 (-0.02) 0.00 (+0.00)
GET search_purls 55 (-10) 0 19343.62 (+3383.17) 9560 (+3117) 20971 (+1963) 0.18 (-0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 (-5) 0 582.69 (+5.21) 303 (+72) 1152 (-73) 0.18 (-0.02) 0.00 (+0.00)
Aggregated 1127 (-138) 0 1341.74 (+122.13) 1 (0) 20971 (+1963) 3.76 (-0.46) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (+1) 10 (+3) 11 (+3) 14 (+4) 44 (+29) 50 (-2) 66 (+6) 88 (+22)
GET get_analysis_latest_cpe 120 (-10) 150 (0) 180 (-10) 200 (0) 220 (-50) 250 (-20) 280 (0) 370 (+85)
GET get_analysis_status 3 (+1) 3 (0) 4 (+1) 6 (+2) 48 (+40) 53 (+9) 53 (+4) 53 (-2)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (-100) 800 (-100) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 800 (0) 800 (-100) 900 (0) 1,000 (+100) 1,000 (+16) 1,000 (+16) 1,000 (+16)
GET list_advisory 500 (+30) 500 (+20) 500 (0) 600 (+100) 700 (+100) 700 (0) 900 (+100) 985 (+185)
GET list_advisory_paginated 470 (+40) 490 (+40) 500 (+20) 500 (+10) 600 (+100) 600 (+100) 600 (+100) 600 (+100)
GET list_importer 2 (0) 2 (-1) 2 (-1) 3 (0) 3 (-1) 6 (+1) 17 (+10) 17 (+8)
GET list_organizations 4 (+1) 4 (0) 6 (0) 8 (+1) 15 (+3) 30 (+11) 41 (+20) 43 (+15)
GET list_packages 460 (+30) 460 (+20) 480 (+10) 490 (-10) 700 (+200) 800 (0) 882 (-18) 882 (-18)
GET list_packages_paginated 410 (0) 430 (+10) 430 (-30) 490 (+20) 500 (0) 600 (+100) 600 (+2) 600 (+2)
GET list_products 8 (+1) 9 (+1) 10 (0) 10 (-2) 11 (-3) 11 (-34) 12 (-35) 13 (-35)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-712) 1,000 (-712) 1,596 (-116)
GET list_sboms_paginated 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,845 (-155) 2,845 (-155)
GET list_vulnerabilities 330 (-10) 360 (+10) 390 (+10) 420 (+30) 440 (-20) 450 (-50) 557 (-8) 557 (-8)
GET list_vulnerabilities_paginated 210 (+10) 220 (+20) 240 (+30) 270 (+60) 270 (+50) 280 (0) 280 (0) 280 (0)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 33 (-4) 37 (-18) 54 (-8) 64 (-17) 86 (-24) 100 (-20) 150 (+20) 165 (+18)
GET search_advisory 900 (0) 1,000 (0) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 1,918 (-82) 1,918 (-82) 1,918 (-82)
GET search_exact_purl 32 (-44) 33 (-48) 34 (-51) 34 (-54) 34 (-56) 35 (-56) 36 (-56) 36 (-56)
GET search_purls 20,000 (+3,000) 20,000 (+3,000) 20,000 (+2,000) 20,000 (+2,000) 20,971 (+1,971) 20,971 (+1,971) 20,971 (+1,971) 20,971 (+1,971)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+100) 600 (0) 600 (-100) 700 (0) 800 (0) 900 (0) 1,000 (0) 1,000 (0)
Aggregated 390 (+50) 480 (+30) 600 (+100) 800 (0) 1,000 (0) 3,000 (-4,000) 20,000 (+2,000) 20,971 (+1,971)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 54 [200]
GET get_analysis_latest_cpe 55 [200]
GET get_analysis_status 55 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 55 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 [200]
GET list_advisory 55 [200]
GET list_advisory_paginated 54 [200]
GET list_importer 50 [200]
GET list_organizations 55 [200]
GET list_packages 50 [200]
GET list_packages_paginated 50 [200]
GET list_products 55 [200]
GET list_sboms 55 [200]
GET list_sboms_paginated 55 [200]
GET list_vulnerabilities 50 [200]
GET list_vulnerabilities_paginated 50 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 [200]
GET search_advisory 54 [200]
GET search_exact_purl 55 [200]
GET search_purls 55 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 [200]
Aggregated 1,127 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 55 (-5) 0 (0) 13.58 (-0.60) 7 (0) 23 (+2) 0.18 (-0.02) 0.00 (+0.00)
1.1 list_organizations 55 (-5) 0 (0) 7.53 (+1.64) 1 (0) 43 (+15) 0.18 (-0.02) 0.00 (+0.00)
1.2 list_advisory 55 (-5) 0 (0) 534.22 (+73.93) 175 (+48) 985 (+184) 0.18 (-0.02) 0.00 (+0.00)
1.3 list_advisory_paginated 54 (-6) 0 (0) 457.74 (+42.69) 221 (+122) 648 (+111) 0.18 (-0.02) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 54 (-6) 0 (0) 15.24 (+3.84) 3 (0) 88 (+22) 0.18 (-0.02) 0.00 (+0.00)
1.5 search_advisory 54 (-6) 0 (0) 946.13 (-116.07) 285 (+124) 1918 (-124) 0.18 (-0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 50 (-10) 0 (0) 334.10 (+8.92) 103 (+51) 557 (-8) 0.17 (-0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 50 (-10) 0 (0) 215.66 (+27.18) 43 (+4) 282 (+1) 0.17 (-0.03) 0.00 (+0.00)
1.8 list_importer 50 (-10) 0 (0) 2.64 (+0.02) 1 (0) 17 (+8) 0.17 (-0.03) 0.00 (+0.00)
1.9 list_packages 50 (-10) 0 (0) 466.70 (+39.12) 84 (-5) 882 (-46) 0.17 (-0.03) 0.00 (+0.00)
1.10 list_packages_paginated 50 (-10) 0 (0) 400.44 (+13.46) 110 (+20) 610 (+12) 0.17 (-0.03) 0.00 (+0.00)
1.11 search_purls 55 (-10) 0 (0) 19343.67 (+3383.21) 9560 (+3117) 20971 (+1963) 0.18 (-0.03) 0.00 (+0.00)
1.12 search_exact_purl 55 (-5) 0 (0) 30.45 (-37.53) 7 (0) 36 (-56) 0.18 (-0.02) 0.00 (+0.00)
1.13 list_products 55 (-5) 0 (0) 8.15 (-2.67) 4 (+1) 13 (-35) 0.18 (-0.02) 0.00 (+0.00)
1.14 list_sboms 55 (-5) 0 (0) 1046.25 (-151.73) 626 (+69) 1596 (-116) 0.18 (-0.02) 0.00 (+0.00)
1.15 list_sboms_paginated 55 (-5) 0 (0) 1431.56 (+56.21) 505 (+40) 2845 (-265) 0.18 (-0.02) 0.00 (+0.00)
1.16 get_analysis_status 55 (-5) 0 (0) 9.69 (+3.12) 1 (0) 53 (-2) 0.18 (-0.02) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 55 (-5) 0 (0) 136.51 (-7.74) 26 (-3) 371 (+86) 0.18 (-0.02) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 55 (-5) 0 (0) 860.16 (-82.15) 199 (-15) 2010 (-51) 0.18 (-0.02) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 (-5) 0 (0) 44.07 (-8.11) 11 (+2) 166 (+18) 0.18 (-0.02) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 (-5) 0 (0) 775.89 (+12.24) 468 (+67) 1026 (+42) 0.18 (-0.02) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 (-5) 0 (0) 582.75 (+5.23) 303 (+72) 1152 (-73) 0.18 (-0.02) 0.00 (+0.00)
Aggregated 1,182 (-143) 0 (0) 1279.31 (+114.92) 1 (0) 20971 (+1963) 3.94 (-0.48) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 55 (-5) 27443.89 (+3430.92) 13438 (+3076) 30893 (+2527) 0.18 (-0.02) 11.00 (-1.00)
Aggregated 5 (0) 55 (-5) 27443.89 (+3430.92) 13438 (+3076) 30893 (+2527) 0.18 (-0.02) 11.00 (-1.00)

User Metrics