Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-10 03:03:4825-09-10 03:03:5300:00:050 → 5
Maintaining25-09-10 03:03:5325-09-10 03:08:5300:05:005
Decreasing25-09-10 03:08:5325-09-10 03:08:5500:00:020 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 84 (-56) 0 13.15 (+2.20) 3 (+1) 95 (+33) 0.28 (-0.19) 0.00 (+0.00)
GET get_analysis_latest_cpe 86 (-55) 0 126.92 (+19.50) 39 (+4) 302 (+85) 0.29 (-0.18) 0.00 (+0.00)
GET get_analysis_status 86 (-55) 0 4.76 (-2.46) 1 (0) 53 (-2) 0.29 (-0.18) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 86 (-55) 0 1183.26 (+581.70) 221 (+71) 4197 (+2505) 0.29 (-0.18) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 86 (-55) 0 954.67 (+124.10) 504 (+8) 1489 (+282) 0.29 (-0.18) 0.00 (+0.00)
GET list_advisory 85 (-56) 0 447.06 (-30.25) 164 (-132) 1549 (+233) 0.28 (-0.19) 0.00 (+0.00)
GET list_advisory_paginated 85 (-55) 0 377.98 (-51.62) 157 (-80) 622 (-161) 0.28 (-0.18) 0.00 (+0.00)
GET list_importer 84 (-56) 0 4.63 (-0.15) 1 (0) 50 (-1) 0.28 (-0.19) 0.00 (+0.00)
GET list_organizations 85 (-56) 0 13.52 (+4.44) 1 (0) 54 (+4) 0.28 (-0.19) 0.00 (+0.00)
GET list_packages 84 (-56) 0 342.69 (-41.63) 101 (+6) 783 (-113) 0.28 (-0.19) 0.00 (+0.00)
GET list_packages_paginated 84 (-56) 0 324.10 (-27.56) 100 (+3) 486 (-117) 0.28 (-0.19) 0.00 (+0.00)
GET list_products 88 (-56) 0 9.48 (+2.37) 3 (+1) 75 (+17) 0.29 (-0.19) 0.00 (+0.00)
GET list_sboms 88 (-56) 0 1425.68 (+325.50) 605 (+128) 2214 (+608) 0.29 (-0.19) 0.00 (+0.00)
GET list_sboms_paginated 88 (-55) 0 3194.97 (+1749.22) 476 (+67) 7192 (+4108) 0.29 (-0.18) 0.00 (+0.00)
GET list_vulnerabilities 84 (-56) 0 209.44 (-17.85) 55 (-2) 373 (-12) 0.28 (-0.19) 0.00 (+0.00)
GET list_vulnerabilities_paginated 84 (-56) 0 166.79 (-21.91) 43 (-1) 290 (-11) 0.28 (-0.19) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 86 (-55) 0 75.01 (+21.47) 9 (-1) 203 (+21) 0.29 (-0.18) 0.00 (+0.00)
GET search_advisory 84 (-56) 0 856.74 (-157.99) 194 (-195) 2524 (+202) 0.28 (-0.19) 0.00 (+0.00)
GET search_exact_purl 88 (-56) 0 10.56 (+3.62) 2 (0) 59 (+3) 0.29 (-0.19) 0.00 (+0.00)
GET search_purls 89 (-56) 0 6879.15 (+4169.84) 1800 (+1221) 13341 (+5337) 0.30 (-0.19) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 86 (-55) 0 701.65 (+65.54) 353 (+115) 1097 (-6) 0.29 (-0.18) 0.00 (+0.00)
Aggregated 1800 (-1168) 0 841.64 (+333.00) 1 (0) 13341 (+5337) 6.00 (-3.89) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (+1) 7 (0) 9 (0) 12 (-1) 50 (+29) 55 (+6) 80 (+23) 95 (+33)
GET get_analysis_latest_cpe 110 (+11) 120 (+10) 140 (+30) 180 (+40) 200 (+30) 230 (+50) 300 (+90) 300 (+83)
GET get_analysis_status 2 (-1) 2 (-1) 3 (-1) 4 (-1) 6 (-3) 15 (-32) 52 (-2) 53 (-2)
GET get_sbom[sha256:720e4451…a939656247164447] 430 (+60) 460 (+50) 600 (+170) 3,000 (+2,000) 3,000 (+2,000) 4,000 (+2,308) 4,000 (+2,308) 4,000 (+2,308)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (+100) 1,000 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 440 (-20) 460 (-20) 490 (0) 490 (-10) 500 (-100) 600 (0) 700 (-300) 1,549 (+549)
GET list_advisory_paginated 380 (-40) 390 (-50) 400 (-70) 460 (-20) 490 (-10) 500 (-100) 600 (-100) 600 (-183)
GET list_importer 2 (0) 3 (0) 4 (+1) 4 (0) 6 (-1) 9 (0) 48 (-3) 50 (-1)
GET list_organizations 4 (+1) 5 (0) 11 (+5) 35 (+26) 43 (+6) 46 (+3) 52 (+5) 54 (+4)
GET list_packages 370 (-10) 380 (-20) 390 (-20) 400 (-30) 450 (-30) 470 (-230) 500 (-396) 783 (-113)
GET list_packages_paginated 340 (-20) 380 (0) 390 (0) 400 (-10) 410 (-60) 430 (-70) 470 (-130) 486 (-114)
GET list_products 6 (+1) 7 (+1) 8 (+1) 9 (+1) 11 (+1) 19 (+6) 66 (+12) 75 (+17)
GET list_sboms 1,000 (0) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+394) 2,000 (+394)
GET list_sboms_paginated 3,000 (+2,000) 4,000 (+2,000) 4,000 (+2,000) 5,000 (+3,000) 6,000 (+4,000) 6,000 (+4,000) 6,000 (+3,000) 7,000 (+4,000)
GET list_vulnerabilities 210 (-10) 220 (-10) 230 (-30) 260 (-20) 280 (-10) 300 (-10) 310 (-40) 370 (-15)
GET list_vulnerabilities_paginated 180 (-10) 190 (-10) 200 (0) 210 (0) 220 (-40) 270 (0) 280 (-10) 290 (-10)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 59 (+5) 77 (+13) 110 (+40) 140 (+60) 180 (+70) 190 (+40) 200 (+30) 200 (+20)
GET search_advisory 800 (0) 800 (-200) 900 (-100) 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,524 (+524)
GET search_exact_purl 6 (+2) 6 (+2) 7 (+2) 8 (+2) 13 (+4) 52 (+10) 58 (+3) 59 (+3)
GET search_purls 7,000 (+4,000) 8,000 (+5,000) 11,000 (+8,000) 12,000 (+8,000) 13,000 (+9,000) 13,000 (+8,000) 13,000 (+6,000) 13,000 (+5,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (+100) 700 (0) 800 (+100) 800 (0) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0)
Aggregated 270 (-20) 390 (-10) 500 (0) 900 (+100) 2,000 (+1,000) 4,000 (+2,000) 12,000 (+8,000) 13,000 (+5,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 84 [200]
GET get_analysis_latest_cpe 86 [200]
GET get_analysis_status 86 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 86 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 86 [200]
GET list_advisory 85 [200]
GET list_advisory_paginated 85 [200]
GET list_importer 84 [200]
GET list_organizations 85 [200]
GET list_packages 84 [200]
GET list_packages_paginated 84 [200]
GET list_products 88 [200]
GET list_sboms 88 [200]
GET list_sboms_paginated 88 [200]
GET list_vulnerabilities 84 [200]
GET list_vulnerabilities_paginated 84 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 86 [200]
GET search_advisory 84 [200]
GET search_exact_purl 88 [200]
GET search_purls 89 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 86 [200]
Aggregated 1,800 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 85 (-56) 0 (0) 13.62 (-0.45) 7 (0) 24 (+1) 0.28 (-0.19) 0.00 (+0.00)
1.1 list_organizations 85 (-56) 0 (0) 13.75 (+4.49) 1 (0) 54 (+4) 0.28 (-0.19) 0.00 (+0.00)
1.2 list_advisory 85 (-56) 0 (0) 447.09 (-30.30) 164 (-132) 1549 (+233) 0.28 (-0.19) 0.00 (+0.00)
1.3 list_advisory_paginated 85 (-55) 0 (0) 378.06 (-51.60) 157 (-80) 622 (-161) 0.28 (-0.18) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 84 (-56) 0 (0) 13.23 (+2.23) 3 (+1) 95 (+33) 0.28 (-0.19) 0.00 (+0.00)
1.5 search_advisory 84 (-56) 0 (0) 856.81 (-157.95) 194 (-195) 2524 (+202) 0.28 (-0.19) 0.00 (+0.00)
1.6 list_vulnerabilities 84 (-56) 0 (0) 209.50 (-17.85) 55 (-2) 373 (-13) 0.28 (-0.19) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 84 (-56) 0 (0) 166.86 (-21.94) 43 (-1) 290 (-12) 0.28 (-0.19) 0.00 (+0.00)
1.8 list_importer 84 (-56) 0 (0) 4.64 (-0.16) 1 (0) 50 (-1) 0.28 (-0.19) 0.00 (+0.00)
1.9 list_packages 84 (-56) 0 (0) 342.75 (-41.61) 101 (+6) 783 (-113) 0.28 (-0.19) 0.00 (+0.00)
1.10 list_packages_paginated 84 (-56) 0 (0) 324.21 (-27.48) 100 (+3) 486 (-117) 0.28 (-0.19) 0.00 (+0.00)
1.11 search_purls 89 (-56) 0 (0) 6879.20 (+4169.86) 1800 (+1221) 13341 (+5337) 0.30 (-0.19) 0.00 (+0.00)
1.12 search_exact_purl 88 (-56) 0 (0) 10.59 (+3.60) 2 (0) 59 (+3) 0.29 (-0.19) 0.00 (+0.00)
1.13 list_products 88 (-56) 0 (0) 9.52 (+2.40) 3 (+1) 75 (+17) 0.29 (-0.19) 0.00 (+0.00)
1.14 list_sboms 88 (-56) 0 (0) 1425.72 (+325.48) 605 (+128) 2214 (+608) 0.29 (-0.19) 0.00 (+0.00)
1.15 list_sboms_paginated 88 (-55) 0 (0) 3195.05 (+1749.23) 476 (+67) 7192 (+4108) 0.29 (-0.18) 0.00 (+0.00)
1.16 get_analysis_status 86 (-55) 0 (0) 4.85 (-2.40) 1 (0) 53 (-2) 0.29 (-0.18) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 86 (-55) 0 (0) 126.98 (+19.48) 39 (+4) 302 (+85) 0.29 (-0.18) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 86 (-55) 0 (0) 1183.31 (+581.68) 221 (+71) 4197 (+2505) 0.29 (-0.18) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 86 (-55) 0 (0) 75.06 (+21.45) 9 (-1) 203 (+21) 0.29 (-0.18) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 86 (-55) 0 (0) 954.73 (+124.09) 504 (+8) 1489 (+282) 0.29 (-0.18) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 86 (-55) 0 (0) 701.72 (+65.56) 354 (+116) 1097 (-6) 0.29 (-0.18) 0.00 (+0.00)
Aggregated 1,885 (-1,224) 0 (0) 803.69 (+318.12) 1 (0) 13341 (+5337) 6.28 (-4.08) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 85 (-56) 17349.35 (+6768.55) 8847 (+1726) 25398 (+12482) 0.28 (-0.19) 17.00 (-11.20)
Aggregated 5 (0) 85 (-56) 17349.35 (+6768.55) 8847 (+1726) 25398 (+12482) 0.28 (-0.19) 17.00 (-11.20)

User Metrics