Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-03 03:04:2725-09-03 03:04:3200:00:050 → 5
Maintaining25-09-03 03:04:3225-09-03 03:09:3300:05:015
Decreasing25-09-03 03:09:3325-09-03 03:09:3300:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 70 (-50) 0 13.56 (+1.10) 3 (0) 65 (+4) 0.23 (-0.17) 0.00 (+0.00)
GET get_analysis_latest_cpe 70 (-54) 0 124.30 (+13.29) 34 (-2) 285 (+8) 0.23 (-0.18) 0.00 (+0.00)
GET get_analysis_status 70 (-54) 0 6.64 (-1.97) 1 (0) 50 (-6) 0.23 (-0.18) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 70 (-54) 0 805.60 (+259.98) 172 (-4) 1875 (+236) 0.23 (-0.18) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 (-51) 0 798.43 (-16.70) 426 (+31) 1014 (-163) 0.23 (-0.17) 0.00 (+0.00)
GET list_advisory 70 (-50) 0 460.46 (-18.21) 202 (-78) 762 (-221) 0.23 (-0.17) 0.00 (+0.00)
GET list_advisory_paginated 70 (-50) 0 405.41 (-9.68) 180 (+62) 602 (-97) 0.23 (-0.17) 0.00 (+0.00)
GET list_importer 70 (-50) 0 2.61 (-1.57) 1 (0) 31 (-17) 0.23 (-0.17) 0.00 (+0.00)
GET list_organizations 70 (-50) 0 8.19 (+1.00) 1 (0) 56 (+11) 0.23 (-0.17) 0.00 (+0.00)
GET list_packages 70 (-50) 0 468.10 (+33.29) 102 (-17) 863 (-47) 0.23 (-0.17) 0.00 (+0.00)
GET list_packages_paginated 70 (-50) 0 398.74 (+28.78) 106 (+1) 570 (-158) 0.23 (-0.17) 0.00 (+0.00)
GET list_products 70 (-55) 0 7.70 (+0.67) 4 (+2) 14 (-43) 0.23 (-0.18) 0.00 (+0.00)
GET list_sboms 70 (-55) 0 1050.84 (-21.90) 529 (+33) 1434 (-146) 0.23 (-0.18) 0.00 (+0.00)
GET list_sboms_paginated 70 (-55) 0 1434.04 (+144.07) 500 (+173) 2804 (+110) 0.23 (-0.18) 0.00 (+0.00)
GET list_vulnerabilities 70 (-50) 0 282.26 (+40.60) 68 (+15) 568 (+143) 0.23 (-0.17) 0.00 (+0.00)
GET list_vulnerabilities_paginated 70 (-50) 0 179.89 (-9.24) 74 (+32) 233 (-79) 0.23 (-0.17) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (-51) 0 65.00 (+15.94) 9 (-1) 191 (+6) 0.23 (-0.17) 0.00 (+0.00)
GET search_advisory 70 (-50) 0 869.17 (-109.65) 239 (+103) 1955 (-231) 0.23 (-0.17) 0.00 (+0.00)
GET search_exact_purl 70 (-55) 0 33.01 (+25.01) 3 (+1) 55 (-10) 0.23 (-0.18) 0.00 (+0.00)
GET search_purls 75 (-50) 0 12776.36 (+8135.02) 6570 (+6121) 14837 (+8754) 0.25 (-0.17) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 (-50) 0 534.36 (-55.88) 276 (+41) 806 (-301) 0.23 (-0.17) 0.00 (+0.00)
Aggregated 1475 (-1084) 0 1026.85 (+436.35) 1 (0) 14837 (+8754) 4.92 (-3.61) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 5 (-1) 6 (-1) 8 (0) 14 (+3) 46 (+2) 50 (-1) 59 (0) 65 (+4)
GET get_analysis_latest_cpe 110 (+10) 120 (+10) 150 (+40) 180 (+60) 210 (+40) 210 (+30) 230 (-30) 285 (+8)
GET get_analysis_status 2 (-1) 2 (-1) 3 (-1) 4 (-2) 32 (-13) 46 (-4) 49 (-6) 50 (-6)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (+370) 800 (+420) 1,000 (+590) 1,000 (0) 1,875 (+875) 1,875 (+875) 1,875 (+236) 1,875 (+236)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (+100) 900 (0) 900 (0) 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 450 (-20) 480 (-20) 500 (0) 500 (0) 600 (0) 700 (0) 762 (-38) 762 (-221)
GET list_advisory_paginated 410 (0) 440 (+10) 460 (-10) 480 (-20) 490 (-10) 500 (0) 500 (-100) 600 (-99)
GET list_importer 2 (0) 2 (0) 3 (-1) 3 (-2) 4 (-2) 5 (-5) 7 (-39) 31 (-17)
GET list_organizations 3 (0) 3 (-1) 4 (-1) 6 (-1) 29 (+13) 38 (-3) 48 (+4) 56 (+11)
GET list_packages 450 (+40) 460 (0) 480 (0) 500 (+10) 600 (0) 800 (0) 863 (-37) 863 (-37)
GET list_packages_paginated 410 (+20) 420 (+20) 440 (+20) 480 (0) 500 (0) 500 (-100) 500 (-100) 570 (-130)
GET list_products 8 (+3) 9 (+3) 9 (+3) 10 (+3) 11 (+1) 12 (0) 14 (-41) 14 (-43)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-580) 1,000 (-580)
GET list_sboms_paginated 1,000 (0) 2,000 (+1,000) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,804 (+110) 2,804 (+110)
GET list_vulnerabilities 300 (+60) 310 (+50) 320 (+40) 370 (+70) 400 (+90) 490 (+170) 568 (+148) 568 (+143)
GET list_vulnerabilities_paginated 190 (0) 190 (-10) 200 (-10) 210 (-10) 220 (-40) 220 (-60) 230 (-80) 230 (-80)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 67 (+43) 76 (+21) 80 (+12) 98 (+23) 150 (+40) 170 (+40) 170 (-10) 190 (+5)
GET search_advisory 700 (-200) 900 (-100) 1,000 (0) 1,000 (0) 1,955 (-45) 1,955 (-45) 1,955 (-45) 1,955 (-45)
GET search_exact_purl 37 (+33) 37 (+33) 39 (+34) 42 (+35) 47 (+31) 54 (+14) 54 (-1) 55 (-10)
GET search_purls 14,000 (+9,000) 14,000 (+9,000) 14,000 (+9,000) 14,000 (+9,000) 14,000 (+9,000) 14,837 (+8,837) 14,837 (+8,837) 14,837 (+8,837)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 500 (-100) 500 (-100) 600 (-100) 600 (-100) 700 (-100) 700 (-200) 800 (-200) 800 (-200)
Aggregated 330 (+30) 430 (+20) 500 (0) 800 (0) 1,000 (0) 7,000 (+5,000) 14,000 (+9,000) 14,837 (+8,837)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 70 [200]
GET get_analysis_latest_cpe 70 [200]
GET get_analysis_status 70 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 70 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 [200]
GET list_advisory 70 [200]
GET list_advisory_paginated 70 [200]
GET list_importer 70 [200]
GET list_organizations 70 [200]
GET list_packages 70 [200]
GET list_packages_paginated 70 [200]
GET list_products 70 [200]
GET list_sboms 70 [200]
GET list_sboms_paginated 70 [200]
GET list_vulnerabilities 70 [200]
GET list_vulnerabilities_paginated 70 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 [200]
GET search_advisory 70 [200]
GET search_exact_purl 70 [200]
GET search_purls 75 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 [200]
Aggregated 1,475 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 70 (-50) 0 (0) 14.14 (-0.32) 8 (+1) 20 (-9) 0.23 (-0.17) 0.00 (+0.00)
1.1 list_organizations 70 (-50) 0 (0) 8.43 (+1.01) 1 (-1) 56 (+11) 0.23 (-0.17) 0.00 (+0.00)
1.2 list_advisory 70 (-50) 0 (0) 460.54 (-18.21) 202 (-78) 762 (-221) 0.23 (-0.17) 0.00 (+0.00)
1.3 list_advisory_paginated 70 (-50) 0 (0) 405.51 (-9.66) 180 (+62) 602 (-97) 0.23 (-0.17) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 70 (-50) 0 (0) 13.60 (+1.12) 3 (0) 65 (+4) 0.23 (-0.17) 0.00 (+0.00)
1.5 search_advisory 70 (-50) 0 (0) 869.26 (-109.59) 240 (+104) 1955 (-231) 0.23 (-0.17) 0.00 (+0.00)
1.6 list_vulnerabilities 70 (-50) 0 (0) 282.29 (+40.58) 68 (+15) 568 (+143) 0.23 (-0.17) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 70 (-50) 0 (0) 179.94 (-9.23) 75 (+33) 233 (-79) 0.23 (-0.17) 0.00 (+0.00)
1.8 list_importer 70 (-50) 0 (0) 2.67 (-1.55) 1 (0) 31 (-17) 0.23 (-0.17) 0.00 (+0.00)
1.9 list_packages 70 (-50) 0 (0) 468.13 (+33.26) 102 (-17) 863 (-47) 0.23 (-0.17) 0.00 (+0.00)
1.10 list_packages_paginated 70 (-50) 0 (0) 398.77 (+28.72) 106 (+1) 570 (-158) 0.23 (-0.17) 0.00 (+0.00)
1.11 search_purls 75 (-50) 0 (0) 12776.39 (+8135.01) 6570 (+6121) 14837 (+8754) 0.25 (-0.17) 0.00 (+0.00)
1.12 search_exact_purl 70 (-55) 0 (0) 33.04 (+24.99) 3 (+1) 55 (-10) 0.23 (-0.18) 0.00 (+0.00)
1.13 list_products 70 (-55) 0 (0) 7.74 (+0.69) 4 (+2) 14 (-43) 0.23 (-0.18) 0.00 (+0.00)
1.14 list_sboms 70 (-55) 0 (0) 1050.86 (-21.90) 529 (+33) 1434 (-146) 0.23 (-0.18) 0.00 (+0.00)
1.15 list_sboms_paginated 70 (-55) 0 (0) 1434.09 (+144.01) 500 (+173) 2804 (+110) 0.23 (-0.18) 0.00 (+0.00)
1.16 get_analysis_status 70 (-54) 0 (0) 6.70 (-1.95) 1 (0) 50 (-6) 0.23 (-0.18) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 70 (-54) 0 (0) 124.36 (+13.31) 34 (-2) 285 (+8) 0.23 (-0.18) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 70 (-54) 0 (0) 805.63 (+259.92) 172 (-4) 1875 (+236) 0.23 (-0.18) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (-51) 0 (0) 65.04 (+15.86) 9 (-1) 191 (+6) 0.23 (-0.17) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 (-51) 0 (0) 798.51 (-16.73) 426 (+31) 1014 (-163) 0.23 (-0.17) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 (-50) 0 (0) 534.40 (-55.90) 276 (+41) 806 (-301) 0.23 (-0.17) 0.00 (+0.00)
Aggregated 1,545 (-1,134) 0 (0) 980.33 (+416.27) 1 (0) 14837 (+8754) 5.15 (-3.78) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 70 (-50) 20476.56 (+8274.47) 10223 (+3917) 24095 (+9150) 0.23 (-0.17) 14.00 (-10.00)
Aggregated 5 (0) 70 (-50) 20476.56 (+8274.47) 10223 (+3917) 24095 (+9150) 0.23 (-0.17) 14.00 (-10.00)

User Metrics