Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-04 03:02:1825-09-04 03:02:2300:00:050 → 5
Maintaining25-09-04 03:02:2325-09-04 03:07:2300:05:005
Decreasing25-09-04 03:07:2325-09-04 03:07:2300:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 65 (-5) 0 10.88 (-2.68) 3 (0) 62 (-3) 0.22 (-0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 65 (-5) 0 137.29 (+12.99) 30 (-4) 305 (+20) 0.22 (-0.02) 0.00 (+0.00)
GET get_analysis_status 65 (-5) 0 4.58 (-2.06) 1 (0) 51 (+1) 0.22 (-0.02) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 65 (-5) 0 654.48 (-151.12) 198 (+26) 1753 (-122) 0.22 (-0.02) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (-5) 0 786.65 (-11.78) 360 (-66) 1132 (+118) 0.22 (-0.02) 0.00 (+0.00)
GET list_advisory 65 (-5) 0 482.45 (+21.99) 125 (-77) 814 (+52) 0.22 (-0.02) 0.00 (+0.00)
GET list_advisory_paginated 65 (-5) 0 440.51 (+35.09) 113 (-67) 669 (+67) 0.22 (-0.02) 0.00 (+0.00)
GET list_importer 65 (-5) 0 6.25 (+3.63) 1 (0) 58 (+27) 0.22 (-0.02) 0.00 (+0.00)
GET list_organizations 65 (-5) 0 8.03 (-0.15) 1 (0) 57 (+1) 0.22 (-0.02) 0.00 (+0.00)
GET list_packages 65 (-5) 0 463.05 (-5.05) 100 (-2) 896 (+33) 0.22 (-0.02) 0.00 (+0.00)
GET list_packages_paginated 65 (-5) 0 350.75 (-47.99) 94 (-12) 628 (+58) 0.22 (-0.02) 0.00 (+0.00)
GET list_products 65 (-5) 0 7.68 (-0.02) 4 (0) 13 (-1) 0.22 (-0.02) 0.00 (+0.00)
GET list_sboms 65 (-5) 0 1002.31 (-48.54) 579 (+50) 1425 (-9) 0.22 (-0.02) 0.00 (+0.00)
GET list_sboms_paginated 65 (-5) 0 1158.14 (-275.90) 472 (-28) 3060 (+256) 0.22 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities 65 (-5) 0 213.68 (-68.58) 52 (-16) 372 (-196) 0.22 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities_paginated 65 (-5) 0 190.28 (+10.39) 56 (-18) 293 (+60) 0.22 (-0.02) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (-5) 0 51.88 (-13.12) 9 (0) 185 (-6) 0.22 (-0.02) 0.00 (+0.00)
GET search_advisory 65 (-5) 0 929.58 (+60.41) 138 (-101) 2354 (+399) 0.22 (-0.02) 0.00 (+0.00)
GET search_exact_purl 65 (-5) 0 59.20 (+26.19) 6 (+3) 69 (+14) 0.22 (-0.02) 0.00 (+0.00)
GET search_purls 70 (-5) 0 14631.80 (+1855.44) 9018 (+2448) 17123 (+2286) 0.23 (-0.02) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (-5) 0 546.08 (+11.72) 254 (-22) 1001 (+195) 0.22 (-0.02) 0.00 (+0.00)
Aggregated 1370 (-105) 0 1103.63 (+76.77) 1 (0) 17123 (+2286) 4.57 (-0.35) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (+2) 7 (+1) 9 (+1) 11 (-3) 28 (-18) 45 (-5) 55 (-4) 62 (-3)
GET get_analysis_latest_cpe 140 (+30) 160 (+40) 170 (+20) 180 (0) 200 (-10) 270 (+60) 280 (+50) 305 (+20)
GET get_analysis_status 2 (0) 3 (+1) 3 (0) 3 (-1) 6 (-26) 14 (-32) 47 (-2) 51 (+1)
GET get_sbom[sha256:720e4451…a939656247164447] 500 (-200) 600 (-200) 700 (-300) 800 (-200) 1,000 (-875) 1,753 (-122) 1,753 (-122) 1,753 (-122)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (-100) 800 (-100) 900 (0) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 470 (+20) 500 (+20) 500 (0) 600 (+100) 600 (0) 600 (-100) 700 (-62) 800 (+38)
GET list_advisory_paginated 440 (+30) 460 (+20) 480 (+20) 500 (+20) 500 (+10) 600 (+100) 669 (+169) 669 (+69)
GET list_importer 3 (+1) 4 (+2) 5 (+2) 6 (+3) 8 (+4) 44 (+39) 56 (+49) 58 (+27)
GET list_organizations 4 (+1) 5 (+2) 6 (+2) 7 (+1) 13 (-16) 46 (+8) 47 (-1) 57 (+1)
GET list_packages 410 (-40) 460 (0) 490 (+10) 600 (+100) 700 (+100) 800 (0) 800 (-63) 896 (+33)
GET list_packages_paginated 380 (-30) 400 (-20) 410 (-30) 460 (-20) 490 (-10) 500 (0) 500 (0) 600 (+30)
GET list_products 7 (-1) 8 (-1) 9 (0) 11 (+1) 11 (0) 12 (0) 12 (-2) 13 (-1)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_sboms_paginated 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (-804) 3,000 (+196)
GET list_vulnerabilities 210 (-90) 220 (-90) 230 (-90) 250 (-120) 270 (-130) 300 (-190) 330 (-238) 370 (-198)
GET list_vulnerabilities_paginated 190 (0) 200 (+10) 210 (+10) 210 (0) 260 (+40) 270 (+50) 290 (+60) 290 (+60)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 35 (-32) 43 (-33) 68 (-12) 74 (-24) 120 (-30) 140 (-30) 180 (+10) 185 (-5)
GET search_advisory 800 (+100) 900 (0) 1,000 (0) 1,000 (0) 2,000 (+45) 2,000 (+45) 2,000 (+45) 2,000 (+45)
GET search_exact_purl 63 (+26) 66 (+29) 67 (+28) 67 (+25) 68 (+21) 68 (+14) 69 (+15) 69 (+14)
GET search_purls 15,000 (+1,000) 15,000 (+1,000) 16,000 (+2,000) 16,000 (+2,000) 16,000 (+2,000) 16,000 (+1,163) 16,000 (+1,163) 17,000 (+2,163)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 500 (0) 600 (+100) 700 (+100) 700 (+100) 800 (+100) 800 (+100) 900 (+100) 1,000 (+200)
Aggregated 290 (-40) 420 (-10) 500 (0) 800 (0) 1,000 (0) 10,000 (+3,000) 16,000 (+2,000) 17,000 (+2,163)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 65 [200]
GET get_analysis_latest_cpe 65 [200]
GET get_analysis_status 65 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 65 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 [200]
GET list_advisory 65 [200]
GET list_advisory_paginated 65 [200]
GET list_importer 65 [200]
GET list_organizations 65 [200]
GET list_packages 65 [200]
GET list_packages_paginated 65 [200]
GET list_products 65 [200]
GET list_sboms 65 [200]
GET list_sboms_paginated 65 [200]
GET list_vulnerabilities 65 [200]
GET list_vulnerabilities_paginated 65 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 [200]
GET search_advisory 65 [200]
GET search_exact_purl 65 [200]
GET search_purls 70 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 [200]
Aggregated 1,370 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 65 (-5) 0 (0) 14.18 (+0.04) 8 (0) 19 (-1) 0.22 (-0.02) 0.00 (+0.00)
1.1 list_organizations 65 (-5) 0 (0) 8.12 (-0.31) 1 (0) 57 (+1) 0.22 (-0.02) 0.00 (+0.00)
1.2 list_advisory 65 (-5) 0 (0) 482.52 (+21.98) 125 (-77) 814 (+52) 0.22 (-0.02) 0.00 (+0.00)
1.3 list_advisory_paginated 65 (-5) 0 (0) 440.57 (+35.05) 113 (-67) 669 (+67) 0.22 (-0.02) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 65 (-5) 0 (0) 10.89 (-2.71) 3 (0) 62 (-3) 0.22 (-0.02) 0.00 (+0.00)
1.5 search_advisory 65 (-5) 0 (0) 929.60 (+60.34) 138 (-102) 2354 (+399) 0.22 (-0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 65 (-5) 0 (0) 213.75 (-68.53) 52 (-16) 372 (-196) 0.22 (-0.02) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 65 (-5) 0 (0) 190.35 (+10.41) 56 (-19) 293 (+60) 0.22 (-0.02) 0.00 (+0.00)
1.8 list_importer 65 (-5) 0 (0) 6.29 (+3.62) 1 (0) 58 (+27) 0.22 (-0.02) 0.00 (+0.00)
1.9 list_packages 65 (-5) 0 (0) 463.14 (-4.99) 100 (-2) 896 (+33) 0.22 (-0.02) 0.00 (+0.00)
1.10 list_packages_paginated 65 (-5) 0 (0) 350.85 (-47.93) 94 (-12) 628 (+58) 0.22 (-0.02) 0.00 (+0.00)
1.11 search_purls 70 (-5) 0 (0) 14631.81 (+1855.43) 9018 (+2448) 17123 (+2286) 0.23 (-0.02) 0.00 (+0.00)
1.12 search_exact_purl 65 (-5) 0 (0) 59.26 (+26.22) 6 (+3) 69 (+14) 0.22 (-0.02) 0.00 (+0.00)
1.13 list_products 65 (-5) 0 (0) 7.69 (-0.05) 4 (0) 13 (-1) 0.22 (-0.02) 0.00 (+0.00)
1.14 list_sboms 65 (-5) 0 (0) 1002.37 (-48.49) 579 (+50) 1425 (-9) 0.22 (-0.02) 0.00 (+0.00)
1.15 list_sboms_paginated 65 (-5) 0 (0) 1158.22 (-275.87) 472 (-28) 3060 (+256) 0.22 (-0.02) 0.00 (+0.00)
1.16 get_analysis_status 65 (-5) 0 (0) 4.66 (-2.04) 1 (0) 51 (+1) 0.22 (-0.02) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 65 (-5) 0 (0) 137.31 (+12.95) 30 (-4) 305 (+20) 0.22 (-0.02) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 65 (-5) 0 (0) 654.49 (-151.14) 198 (+26) 1753 (-122) 0.22 (-0.02) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (-5) 0 (0) 51.98 (-13.06) 9 (0) 185 (-6) 0.22 (-0.02) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (-5) 0 (0) 786.69 (-11.82) 360 (-66) 1132 (+118) 0.22 (-0.02) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (-5) 0 (0) 546.11 (+11.71) 254 (-22) 1001 (+195) 0.22 (-0.02) 0.00 (+0.00)
Aggregated 1,435 (-110) 0 (0) 1053.64 (+73.31) 1 (0) 17123 (+2286) 4.78 (-0.37) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 65 (-5) 22074.86 (+1598.30) 12702 (+2479) 25844 (+1749) 0.22 (-0.02) 13.00 (-1.00)
Aggregated 5 (0) 65 (-5) 22074.86 (+1598.30) 12702 (+2479) 25844 (+1749) 0.22 (-0.02) 13.00 (-1.00)

User Metrics