Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-08 03:10:4125-09-08 03:10:4600:00:050 → 5
Maintaining25-09-08 03:10:4625-09-08 03:15:4600:05:005
Decreasing25-09-08 03:15:4625-09-08 03:15:4700:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 130 (-10) 0 11.36 (+0.10) 3 (+1) 75 (+11) 0.43 (-0.03) 0.00 (+0.00)
GET get_analysis_latest_cpe 135 (-5) 0 101.81 (-20.11) 35 (+7) 431 (+50) 0.45 (-0.02) 0.00 (+0.00)
GET get_analysis_status 135 (-5) 0 6.62 (+0.60) 1 (0) 55 (+1) 0.45 (-0.02) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 135 (-5) 0 638.10 (-79.15) 160 (+7) 1820 (-109) 0.45 (-0.02) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 133 (-7) 0 827.36 (+31.07) 361 (+53) 1283 (+207) 0.44 (-0.02) 0.00 (+0.00)
GET list_advisory 130 (-10) 0 470.92 (-25.06) 150 (-67) 1028 (+78) 0.43 (-0.03) 0.00 (+0.00)
GET list_advisory_paginated 130 (-10) 0 398.90 (-33.52) 179 (+41) 752 (+21) 0.43 (-0.03) 0.00 (+0.00)
GET list_importer 130 (-10) 0 2.90 (-2.52) 1 (0) 47 (-6) 0.43 (-0.03) 0.00 (+0.00)
GET list_organizations 130 (-10) 0 7.07 (+0.08) 1 (0) 44 (-7) 0.43 (-0.03) 0.00 (+0.00)
GET list_packages 130 (-10) 0 399.08 (-43.63) 93 (+16) 959 (+43) 0.43 (-0.03) 0.00 (+0.00)
GET list_packages_paginated 130 (-10) 0 333.42 (-32.47) 105 (+6) 593 (-90) 0.43 (-0.03) 0.00 (+0.00)
GET list_products 135 (-5) 0 6.64 (-0.31) 4 (+2) 75 (+18) 0.45 (-0.02) 0.00 (+0.00)
GET list_sboms 135 (-5) 0 975.29 (-125.70) 469 (-109) 1332 (-349) 0.45 (-0.02) 0.00 (+0.00)
GET list_sboms_paginated 135 (-5) 0 1228.33 (-162.12) 384 (-88) 2876 (+75) 0.45 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities 130 (-10) 0 268.25 (+39.85) 57 (+20) 570 (+184) 0.43 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 130 (-10) 0 179.08 (-1.92) 28 (+1) 305 (-58) 0.43 (-0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 133 (-7) 0 46.32 (-3.12) 9 (-1) 166 (-15) 0.44 (-0.02) 0.00 (+0.00)
GET search_advisory 130 (-10) 0 936.57 (-16.35) 136 (-9) 2114 (-269) 0.43 (-0.03) 0.00 (+0.00)
GET search_exact_purl 135 (-5) 0 4.01 (-2.79) 2 (0) 9 (-44) 0.45 (-0.02) 0.00 (+0.00)
GET search_purls 135 (-10) 0 3937.71 (+1083.04) 608 (-893) 5796 (+81) 0.45 (-0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 130 (-10) 0 547.65 (+10.97) 253 (+22) 923 (-56) 0.43 (-0.03) 0.00 (+0.00)
Aggregated 2776 (-169) 0 543.83 (+29.83) 1 (0) 5796 (+81) 9.25 (-0.56) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (0) 8 (0) 11 (+2) 28 (-15) 52 (0) 65 (+8) 75 (+11)
GET get_analysis_latest_cpe 90 (-9) 97 (-23) 110 (-40) 120 (-70) 170 (-40) 180 (-40) 210 (-100) 430 (+50)
GET get_analysis_status 2 (0) 2 (-1) 3 (-1) 4 (-1) 9 (+1) 47 (+1) 53 (+1) 55 (+1)
GET get_sbom[sha256:720e4451…a939656247164447] 410 (-90) 490 (-110) 700 (0) 1,000 (0) 1,000 (0) 1,820 (-109) 1,820 (-109) 1,820 (-109)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 900 (0) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 460 (-20) 470 (-20) 490 (-10) 500 (0) 600 (0) 800 (0) 1,000 (+100) 1,000 (+50)
GET list_advisory_paginated 390 (-40) 410 (-50) 430 (-50) 480 (-20) 500 (-100) 600 (0) 600 (-100) 752 (+52)
GET list_importer 2 (0) 2 (-1) 2 (-1) 3 (-1) 5 (-2) 6 (-37) 41 (-8) 47 (-6)
GET list_organizations 3 (0) 3 (-2) 4 (-2) 7 (-2) 23 (+9) 39 (+14) 44 (-1) 44 (-7)
GET list_packages 420 (-10) 440 (-10) 470 (0) 480 (-20) 500 (-200) 600 (-200) 800 (0) 959 (+59)
GET list_packages_paginated 370 (-20) 390 (-10) 400 (-30) 420 (-50) 470 (-30) 490 (-10) 500 (-100) 593 (-90)
GET list_products 5 (0) 6 (+1) 6 (0) 7 (-1) 8 (-2) 9 (-1) 68 (+14) 75 (+18)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-681) 1,000 (-681)
GET list_sboms_paginated 1,000 (0) 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,876 (+75) 2,876 (+75)
GET list_vulnerabilities 280 (+60) 300 (+60) 320 (+50) 370 (+90) 410 (+110) 450 (+140) 500 (+150) 570 (+184)
GET list_vulnerabilities_paginated 190 (+10) 200 (+10) 210 (+10) 220 (+10) 260 (0) 270 (0) 280 (-20) 305 (-55)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 24 (0) 58 (+11) 64 (-3) 72 (-17) 81 (-29) 110 (-20) 160 (-10) 166 (-14)
GET search_advisory 800 (+100) 900 (0) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 4 (0) 4 (0) 4 (-1) 5 (0) 5 (-2) 6 (-38) 8 (-42) 9 (-44)
GET search_purls 4,000 (+2,000) 4,000 (+2,000) 5,000 (+2,000) 5,000 (+1,000) 5,000 (0) 5,000 (0) 5,000 (-715) 5,796 (+81)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 500 (+20) 600 (+100) 600 (0) 700 (0) 800 (0) 800 (0) 900 (-79) 900 (-79)
Aggregated 300 (0) 400 (-30) 500 (0) 800 (0) 1,000 (0) 2,000 (0) 5,000 (+1,000) 5,796 (+81)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 130 [200]
GET get_analysis_latest_cpe 135 [200]
GET get_analysis_status 135 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 135 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 133 [200]
GET list_advisory 130 [200]
GET list_advisory_paginated 130 [200]
GET list_importer 130 [200]
GET list_organizations 130 [200]
GET list_packages 130 [200]
GET list_packages_paginated 130 [200]
GET list_products 135 [200]
GET list_sboms 135 [200]
GET list_sboms_paginated 135 [200]
GET list_vulnerabilities 130 [200]
GET list_vulnerabilities_paginated 130 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 133 [200]
GET search_advisory 130 [200]
GET search_exact_purl 135 [200]
GET search_purls 135 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 130 [200]
Aggregated 2,776 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 130 (-10) 0 (0) 14.35 (+0.31) 7 (-1) 25 (+2) 0.43 (-0.03) 0.00 (+0.00)
1.1 list_organizations 130 (-10) 0 (0) 7.27 (+0.10) 1 (0) 44 (-7) 0.43 (-0.03) 0.00 (+0.00)
1.2 list_advisory 130 (-10) 0 (0) 471.00 (-25.05) 150 (-67) 1028 (+78) 0.43 (-0.03) 0.00 (+0.00)
1.3 list_advisory_paginated 130 (-10) 0 (0) 398.95 (-33.50) 179 (+41) 752 (+21) 0.43 (-0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 130 (-10) 0 (0) 11.44 (+0.15) 3 (+1) 76 (+12) 0.43 (-0.03) 0.00 (+0.00)
1.5 search_advisory 130 (-10) 0 (0) 936.65 (-16.32) 136 (-9) 2114 (-269) 0.43 (-0.03) 0.00 (+0.00)
1.6 list_vulnerabilities 130 (-10) 0 (0) 268.32 (+39.82) 57 (+20) 570 (+184) 0.43 (-0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 130 (-10) 0 (0) 179.12 (-1.93) 28 (+1) 305 (-58) 0.43 (-0.03) 0.00 (+0.00)
1.8 list_importer 130 (-10) 0 (0) 2.93 (-2.50) 1 (0) 47 (-6) 0.43 (-0.03) 0.00 (+0.00)
1.9 list_packages 130 (-10) 0 (0) 399.14 (-43.63) 93 (+16) 960 (+44) 0.43 (-0.03) 0.00 (+0.00)
1.10 list_packages_paginated 130 (-10) 0 (0) 333.49 (-32.49) 105 (+6) 593 (-91) 0.43 (-0.03) 0.00 (+0.00)
1.11 search_purls 135 (-10) 0 (0) 3937.76 (+1083.04) 608 (-893) 5796 (+81) 0.45 (-0.03) 0.00 (+0.00)
1.12 search_exact_purl 135 (-5) 0 (0) 4.05 (-2.77) 2 (0) 9 (-44) 0.45 (-0.02) 0.00 (+0.00)
1.13 list_products 135 (-5) 0 (0) 6.70 (-0.25) 4 (+2) 75 (+18) 0.45 (-0.02) 0.00 (+0.00)
1.14 list_sboms 135 (-5) 0 (0) 975.33 (-125.72) 469 (-109) 1332 (-349) 0.45 (-0.02) 0.00 (+0.00)
1.15 list_sboms_paginated 135 (-5) 0 (0) 1228.37 (-162.15) 384 (-89) 2876 (+75) 0.45 (-0.02) 0.00 (+0.00)
1.16 get_analysis_status 135 (-5) 0 (0) 6.68 (+0.57) 1 (0) 55 (+1) 0.45 (-0.02) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 135 (-5) 0 (0) 101.86 (-20.11) 35 (+7) 431 (+50) 0.45 (-0.02) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 135 (-5) 0 (0) 638.19 (-79.11) 160 (+7) 1820 (-109) 0.45 (-0.02) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 133 (-7) 0 (0) 46.37 (-3.14) 10 (0) 166 (-15) 0.44 (-0.02) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 133 (-7) 0 (0) 827.47 (+31.16) 361 (+53) 1283 (+207) 0.44 (-0.02) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 130 (-10) 0 (0) 547.69 (+10.96) 253 (+22) 923 (-56) 0.43 (-0.03) 0.00 (+0.00)
Aggregated 2,906 (-179) 0 (0) 519.50 (+28.83) 1 (0) 5796 (+81) 9.69 (-0.60) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 130 (-10) 11314.83 (+632.43) 6683 (+793) 15195 (+211) 0.43 (-0.03) 26.00 (-2.00)
Aggregated 5 (0) 130 (-10) 11314.83 (+632.43) 6683 (+793) 15195 (+211) 0.43 (-0.03) 26.00 (-2.00)

User Metrics