Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-06 03:03:0425-09-06 03:03:0900:00:050 → 5
Maintaining25-09-06 03:03:0925-09-06 03:08:1000:05:015
Decreasing25-09-06 03:08:1025-09-06 03:08:1100:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 65 (-55) 0 10.48 (+0.55) 3 (0) 59 (+8) 0.22 (-0.18) 0.00 (+0.00)
GET get_analysis_latest_cpe 65 (-55) 0 137.57 (+0.57) 31 (-1) 308 (+17) 0.22 (-0.18) 0.00 (+0.00)
GET get_analysis_status 65 (-55) 0 5.18 (-2.43) 1 (0) 53 (-1) 0.22 (-0.18) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 65 (-55) 0 788.26 (-263.18) 217 (-53) 1710 (-486) 0.22 (-0.18) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (-55) 0 773.58 (+3.42) 410 (+16) 1010 (-13) 0.22 (-0.18) 0.00 (+0.00)
GET list_advisory 65 (-55) 0 455.98 (-5.57) 221 (+83) 708 (-59) 0.22 (-0.18) 0.00 (+0.00)
GET list_advisory_paginated 65 (-55) 0 440.75 (+19.59) 188 (+58) 1302 (+519) 0.22 (-0.18) 0.00 (+0.00)
GET list_importer 65 (-55) 0 4.74 (-0.28) 1 (0) 51 (-4) 0.22 (-0.18) 0.00 (+0.00)
GET list_organizations 65 (-55) 0 7.55 (-2.40) 1 (0) 48 (-4) 0.22 (-0.18) 0.00 (+0.00)
GET list_packages 65 (-55) 0 428.06 (+19.44) 200 (+113) 910 (+8) 0.22 (-0.18) 0.00 (+0.00)
GET list_packages_paginated 65 (-55) 0 357.66 (+14.31) 57 (+1) 601 (0) 0.22 (-0.18) 0.00 (+0.00)
GET list_products 70 (-50) 0 7.03 (-1.08) 4 (+2) 13 (-50) 0.23 (-0.17) 0.00 (+0.00)
GET list_sboms 70 (-50) 0 1259.16 (+91.92) 521 (-19) 1865 (+153) 0.23 (-0.17) 0.00 (+0.00)
GET list_sboms_paginated 70 (-50) 0 1740.90 (+109.38) 461 (-60) 3106 (-54) 0.23 (-0.17) 0.00 (+0.00)
GET list_vulnerabilities 65 (-55) 0 251.57 (+24.91) 92 (+42) 477 (+102) 0.22 (-0.18) 0.00 (+0.00)
GET list_vulnerabilities_paginated 65 (-55) 0 169.34 (-1.87) 77 (+38) 271 (-14) 0.22 (-0.18) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (-55) 0 76.45 (+17.42) 9 (-2) 178 (+3) 0.22 (-0.18) 0.00 (+0.00)
GET search_advisory 65 (-55) 0 985.62 (+25.31) 314 (+164) 2072 (-142) 0.22 (-0.18) 0.00 (+0.00)
GET search_exact_purl 70 (-50) 0 28.23 (+21.81) 20 (+18) 51 (-5) 0.23 (-0.17) 0.00 (+0.00)
GET search_purls 70 (-55) 0 13581.87 (+9547.57) 6124 (+4492) 16148 (+10901) 0.23 (-0.18) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (-55) 0 556.32 (-49.07) 238 (-25) 913 (-198) 0.22 (-0.18) 0.00 (+0.00)
Aggregated 1390 (-1135) 0 1091.65 (+489.79) 1 (0) 16148 (+10901) 4.63 (-3.78) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 5 (-1) 7 (0) 8 (0) 9 (-2) 32 (+17) 45 (+1) 58 (+8) 59 (+8)
GET get_analysis_latest_cpe 120 (0) 140 (-10) 170 (-10) 190 (-10) 220 (+10) 270 (+50) 280 (-10) 308 (+18)
GET get_analysis_status 2 (0) 2 (-1) 3 (0) 4 (-1) 7 (-31) 34 (-13) 52 (+1) 53 (-1)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (-200) 700 (-300) 800 (-200) 1,000 (-1,000) 1,710 (-290) 1,710 (-290) 1,710 (-290) 1,710 (-290)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 800 (0) 900 (+100) 900 (0) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0)
GET list_advisory 460 (+10) 460 (-10) 470 (-20) 490 (-10) 500 (-100) 600 (0) 600 (-167) 700 (-67)
GET list_advisory_paginated 420 (+10) 450 (+10) 480 (+10) 500 (+10) 500 (0) 600 (0) 700 (-83) 1,000 (+217)
GET list_importer 2 (0) 2 (0) 3 (0) 4 (-1) 7 (+1) 11 (-3) 49 (-3) 51 (-4)
GET list_organizations 3 (0) 4 (-1) 7 (0) 11 (-2) 17 (-15) 33 (-9) 43 (-8) 48 (-4)
GET list_packages 380 (-20) 390 (-30) 430 (-30) 490 (+10) 800 (+300) 900 (+200) 900 (0) 900 (0)
GET list_packages_paginated 390 (+10) 410 (+10) 420 (+10) 470 (+50) 490 (+20) 500 (+20) 500 (-100) 600 (0)
GET list_products 7 (+2) 7 (+1) 8 (+1) 8 (-1) 10 (0) 12 (-2) 12 (-49) 13 (-50)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,865 (+865) 1,865 (+865) 1,865 (+153) 1,865 (+153)
GET list_sboms_paginated 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 3,000 (0) 3,000 (0) 3,000 (0) 3,000 (0)
GET list_vulnerabilities 260 (+30) 260 (0) 280 (+10) 320 (+30) 360 (+60) 390 (+90) 450 (+80) 477 (+102)
GET list_vulnerabilities_paginated 170 (-10) 180 (-10) 190 (0) 200 (0) 210 (-20) 230 (-30) 270 (-10) 270 (-15)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 75 (+14) 85 (+19) 110 (+34) 110 (+22) 130 (+20) 160 (+10) 170 (0) 178 (+3)
GET search_advisory 900 (+100) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 27 (+23) 28 (+23) 28 (+23) 33 (+27) 36 (+27) 49 (+28) 50 (-2) 51 (-5)
GET search_purls 14,000 (+10,000) 14,000 (+10,000) 15,000 (+11,000) 15,000 (+10,000) 15,000 (+10,000) 15,000 (+10,000) 15,000 (+10,000) 16,000 (+11,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 600 (0) 600 (-100) 600 (-100) 800 (-100) 800 (-200) 900 (-100) 900 (-100)
Aggregated 300 (0) 430 (0) 500 (-100) 800 (-100) 2,000 (0) 6,000 (+3,000) 15,000 (+10,000) 16,000 (+11,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 65 [200]
GET get_analysis_latest_cpe 65 [200]
GET get_analysis_status 65 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 65 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 [200]
GET list_advisory 65 [200]
GET list_advisory_paginated 65 [200]
GET list_importer 65 [200]
GET list_organizations 65 [200]
GET list_packages 65 [200]
GET list_packages_paginated 65 [200]
GET list_products 70 [200]
GET list_sboms 70 [200]
GET list_sboms_paginated 70 [200]
GET list_vulnerabilities 65 [200]
GET list_vulnerabilities_paginated 65 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 [200]
GET search_advisory 65 [200]
GET search_exact_purl 70 [200]
GET search_purls 70 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 [200]
Aggregated 1,390 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 65 (-55) 0 (0) 13.62 (-0.54) 7 (0) 23 (+1) 0.22 (-0.18) 0.00 (+0.00)
1.1 list_organizations 65 (-55) 0 (0) 7.68 (-2.42) 1 (0) 48 (-4) 0.22 (-0.18) 0.00 (+0.00)
1.2 list_advisory 65 (-55) 0 (0) 456.05 (-5.57) 221 (+83) 708 (-59) 0.22 (-0.18) 0.00 (+0.00)
1.3 list_advisory_paginated 65 (-55) 0 (0) 440.77 (+19.54) 188 (+58) 1302 (+519) 0.22 (-0.18) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 65 (-55) 0 (0) 10.54 (+0.56) 3 (0) 59 (+8) 0.22 (-0.18) 0.00 (+0.00)
1.5 search_advisory 65 (-55) 0 (0) 985.66 (+25.29) 314 (+164) 2072 (-142) 0.22 (-0.18) 0.00 (+0.00)
1.6 list_vulnerabilities 65 (-55) 0 (0) 251.63 (+24.91) 92 (+42) 477 (+102) 0.22 (-0.18) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 65 (-55) 0 (0) 169.40 (-1.84) 77 (+38) 271 (-14) 0.22 (-0.18) 0.00 (+0.00)
1.8 list_importer 65 (-55) 0 (0) 4.75 (-0.32) 1 (0) 51 (-4) 0.22 (-0.18) 0.00 (+0.00)
1.9 list_packages 65 (-55) 0 (0) 428.09 (+19.42) 200 (+113) 910 (+8) 0.22 (-0.18) 0.00 (+0.00)
1.10 list_packages_paginated 65 (-55) 0 (0) 357.69 (+14.28) 57 (+1) 601 (0) 0.22 (-0.18) 0.00 (+0.00)
1.11 search_purls 70 (-55) 0 (0) 13581.89 (+9547.53) 6124 (+4492) 16148 (+10901) 0.23 (-0.18) 0.00 (+0.00)
1.12 search_exact_purl 70 (-50) 0 (0) 28.27 (+21.84) 20 (+18) 51 (-5) 0.23 (-0.17) 0.00 (+0.00)
1.13 list_products 70 (-50) 0 (0) 7.06 (-1.08) 4 (+2) 13 (-50) 0.23 (-0.17) 0.00 (+0.00)
1.14 list_sboms 70 (-50) 0 (0) 1259.23 (+91.90) 521 (-20) 1865 (+153) 0.23 (-0.17) 0.00 (+0.00)
1.15 list_sboms_paginated 70 (-50) 0 (0) 1740.91 (+109.36) 461 (-60) 3106 (-54) 0.23 (-0.17) 0.00 (+0.00)
1.16 get_analysis_status 65 (-55) 0 (0) 5.20 (-2.43) 1 (0) 53 (-1) 0.22 (-0.18) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 65 (-55) 0 (0) 137.68 (+0.62) 31 (-1) 308 (+16) 0.22 (-0.18) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 65 (-55) 0 (0) 788.28 (-263.22) 217 (-53) 1710 (-487) 0.22 (-0.18) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (-55) 0 (0) 76.54 (+17.43) 9 (-2) 178 (+3) 0.22 (-0.18) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (-55) 0 (0) 773.65 (+3.43) 410 (+16) 1011 (-12) 0.22 (-0.18) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (-55) 0 (0) 556.37 (-49.16) 238 (-25) 913 (-198) 0.22 (-0.18) 0.00 (+0.00)
Aggregated 1,455 (-1,190) 0 (0) 1042.88 (+468.33) 1 (0) 16148 (+10901) 4.85 (-3.97) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 65 (-55) 21808.14 (+9398.73) 9811 (+4261) 25760 (+10997) 0.22 (-0.18) 13.00 (-11.00)
Aggregated 5 (0) 65 (-55) 21808.14 (+9398.73) 9811 (+4261) 25760 (+10997) 0.22 (-0.18) 13.00 (-11.00)

User Metrics