Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-11 02:17:4425-09-11 02:17:4900:00:050 → 5
Maintaining25-09-11 02:17:4925-09-11 02:22:4900:05:005
Decreasing25-09-11 02:22:4925-09-11 02:22:5800:00:090 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 65 (-19) 0 13.15 (-0.00) 3 (0) 61 (-34) 0.22 (-0.06) 0.00 (+0.00)
GET get_analysis_latest_cpe 65 (-21) 0 147.98 (+21.07) 29 (-10) 398 (+96) 0.22 (-0.07) 0.00 (+0.00)
GET get_analysis_status 65 (-21) 0 6.22 (+1.46) 1 (0) 53 (0) 0.22 (-0.07) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 65 (-21) 0 766.22 (-417.04) 204 (-17) 2016 (-2181) 0.22 (-0.07) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (-21) 0 817.14 (-137.54) 422 (-82) 1580 (+91) 0.22 (-0.07) 0.00 (+0.00)
GET list_advisory 65 (-20) 0 491.08 (+44.02) 263 (+99) 1051 (-498) 0.22 (-0.07) 0.00 (+0.00)
GET list_advisory_paginated 65 (-20) 0 427.86 (+49.89) 193 (+36) 603 (-19) 0.22 (-0.07) 0.00 (+0.00)
GET list_importer 65 (-19) 0 2.38 (-2.25) 1 (0) 9 (-41) 0.22 (-0.06) 0.00 (+0.00)
GET list_organizations 65 (-20) 0 7.46 (-6.06) 1 (0) 52 (-2) 0.22 (-0.07) 0.00 (+0.00)
GET list_packages 65 (-19) 0 558.38 (+215.69) 379 (+278) 2088 (+1305) 0.22 (-0.06) 0.00 (+0.00)
GET list_packages_paginated 65 (-19) 0 455.74 (+131.64) 204 (+104) 1058 (+572) 0.22 (-0.06) 0.00 (+0.00)
GET list_products 65 (-23) 0 7.74 (-1.74) 3 (0) 17 (-58) 0.22 (-0.08) 0.00 (+0.00)
GET list_sboms 65 (-23) 0 1091.98 (-333.70) 571 (-34) 1952 (-262) 0.22 (-0.08) 0.00 (+0.00)
GET list_sboms_paginated 65 (-23) 0 1421.31 (-1773.66) 496 (+20) 2886 (-4306) 0.22 (-0.08) 0.00 (+0.00)
GET list_vulnerabilities 65 (-19) 0 294.12 (+84.68) 69 (+14) 429 (+56) 0.22 (-0.06) 0.00 (+0.00)
GET list_vulnerabilities_paginated 65 (-19) 0 196.78 (+30.00) 114 (+71) 277 (-13) 0.22 (-0.06) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (-21) 0 55.29 (-19.72) 9 (0) 191 (-12) 0.22 (-0.07) 0.00 (+0.00)
GET search_advisory 65 (-19) 0 979.23 (+122.49) 283 (+89) 2221 (-303) 0.22 (-0.06) 0.00 (+0.00)
GET search_exact_purl 65 (-23) 0 6.78 (-3.77) 4 (+2) 13 (-46) 0.22 (-0.08) 0.00 (+0.00)
GET search_purls 70 (-19) 0 14528.73 (+7649.58) 6944 (+5144) 18389 (+5048) 0.23 (-0.06) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (-21) 0 590.80 (-110.85) 278 (-75) 914 (-183) 0.22 (-0.07) 0.00 (+0.00)
Aggregated 1370 (-430) 0 1137.93 (+296.29) 1 (0) 18389 (+5048) 4.57 (-1.43) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (0) 9 (+2) 11 (+2) 16 (+4) 43 (-7) 56 (+1) 60 (-20) 61 (-34)
GET get_analysis_latest_cpe 140 (+30) 170 (+50) 190 (+50) 210 (+30) 270 (+70) 290 (+60) 390 (+90) 398 (+98)
GET get_analysis_status 2 (0) 3 (+1) 4 (+1) 4 (0) 10 (+4) 46 (+31) 51 (-1) 53 (0)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (+270) 800 (+340) 900 (+300) 1,000 (-2,000) 2,000 (-1,000) 2,000 (-2,000) 2,000 (-2,000) 2,000 (-2,000)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (-100) 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,580 (+580)
GET list_advisory 450 (+10) 470 (+10) 490 (0) 500 (+10) 700 (+200) 1,000 (+400) 1,000 (+300) 1,000 (-549)
GET list_advisory_paginated 420 (+40) 450 (+60) 470 (+70) 500 (+40) 600 (+110) 600 (+100) 600 (0) 600 (0)
GET list_importer 2 (0) 2 (-1) 3 (-1) 3 (-1) 4 (-2) 5 (-4) 7 (-41) 9 (-41)
GET list_organizations 3 (-1) 4 (-1) 6 (-5) 7 (-28) 24 (-19) 36 (-10) 42 (-10) 52 (-2)
GET list_packages 450 (+80) 450 (+70) 500 (+110) 700 (+300) 900 (+450) 1,000 (+530) 1,000 (+500) 2,000 (+1,217)
GET list_packages_paginated 420 (+80) 470 (+90) 480 (+90) 500 (+100) 600 (+190) 1,000 (+570) 1,000 (+530) 1,000 (+514)
GET list_products 7 (+1) 8 (+1) 9 (+1) 10 (+1) 11 (0) 13 (-6) 16 (-50) 17 (-58)
GET list_sboms 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,952 (-48) 1,952 (-48) 1,952 (-48)
GET list_sboms_paginated 1,000 (-2,000) 2,000 (-2,000) 2,000 (-2,000) 2,000 (-3,000) 2,000 (-4,000) 2,000 (-4,000) 2,886 (-3,114) 2,886 (-4,114)
GET list_vulnerabilities 310 (+100) 330 (+110) 370 (+140) 390 (+130) 400 (+120) 420 (+120) 429 (+119) 429 (+59)
GET list_vulnerabilities_paginated 190 (+10) 190 (0) 200 (0) 220 (+10) 260 (+40) 270 (0) 270 (-10) 277 (-13)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 36 (-23) 61 (-16) 73 (-37) 86 (-54) 120 (-60) 130 (-60) 170 (-30) 190 (-10)
GET search_advisory 800 (0) 1,000 (+200) 1,000 (+100) 2,000 (+1,000) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (-524)
GET search_exact_purl 6 (0) 7 (+1) 7 (0) 8 (0) 9 (-4) 10 (-42) 10 (-48) 13 (-46)
GET search_purls 15,000 (+8,000) 16,000 (+8,000) 16,000 (+5,000) 16,000 (+4,000) 17,000 (+4,000) 18,000 (+5,000) 18,000 (+5,000) 18,000 (+5,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (-100) 600 (-100) 600 (-200) 700 (-100) 800 (-100) 800 (-200) 900 (-100) 900 (-100)
Aggregated 370 (+100) 440 (+50) 600 (+100) 900 (0) 1,000 (-1,000) 8,000 (+4,000) 16,000 (+4,000) 18,000 (+5,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 65 [200]
GET get_analysis_latest_cpe 65 [200]
GET get_analysis_status 65 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 65 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 [200]
GET list_advisory 65 [200]
GET list_advisory_paginated 65 [200]
GET list_importer 65 [200]
GET list_organizations 65 [200]
GET list_packages 65 [200]
GET list_packages_paginated 65 [200]
GET list_products 65 [200]
GET list_sboms 65 [200]
GET list_sboms_paginated 65 [200]
GET list_vulnerabilities 65 [200]
GET list_vulnerabilities_paginated 65 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 [200]
GET search_advisory 65 [200]
GET search_exact_purl 65 [200]
GET search_purls 70 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 [200]
Aggregated 1,370 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 65 (-20) 0 (0) 14.22 (+0.59) 7 (0) 22 (-2) 0.22 (-0.07) 0.00 (+0.00)
1.1 list_organizations 65 (-20) 0 (0) 7.66 (-6.09) 1 (0) 52 (-2) 0.22 (-0.07) 0.00 (+0.00)
1.2 list_advisory 65 (-20) 0 (0) 491.11 (+44.01) 263 (+99) 1051 (-498) 0.22 (-0.07) 0.00 (+0.00)
1.3 list_advisory_paginated 65 (-20) 0 (0) 427.92 (+49.86) 193 (+36) 603 (-19) 0.22 (-0.07) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 65 (-19) 0 (0) 13.22 (-0.01) 3 (0) 61 (-34) 0.22 (-0.06) 0.00 (+0.00)
1.5 search_advisory 65 (-19) 0 (0) 979.31 (+122.50) 283 (+89) 2221 (-303) 0.22 (-0.06) 0.00 (+0.00)
1.6 list_vulnerabilities 65 (-19) 0 (0) 294.17 (+84.67) 69 (+14) 429 (+56) 0.22 (-0.06) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 65 (-19) 0 (0) 196.80 (+29.94) 114 (+71) 277 (-13) 0.22 (-0.06) 0.00 (+0.00)
1.8 list_importer 65 (-19) 0 (0) 2.43 (-2.21) 1 (0) 9 (-41) 0.22 (-0.06) 0.00 (+0.00)
1.9 list_packages 65 (-19) 0 (0) 558.42 (+215.67) 379 (+278) 2088 (+1305) 0.22 (-0.06) 0.00 (+0.00)
1.10 list_packages_paginated 65 (-19) 0 (0) 455.83 (+131.62) 205 (+105) 1058 (+572) 0.22 (-0.06) 0.00 (+0.00)
1.11 search_purls 70 (-19) 0 (0) 14528.76 (+7649.55) 6944 (+5144) 18389 (+5048) 0.23 (-0.06) 0.00 (+0.00)
1.12 search_exact_purl 65 (-23) 0 (0) 6.80 (-3.79) 4 (+2) 13 (-46) 0.22 (-0.08) 0.00 (+0.00)
1.13 list_products 65 (-23) 0 (0) 7.80 (-1.72) 3 (0) 17 (-58) 0.22 (-0.08) 0.00 (+0.00)
1.14 list_sboms 65 (-23) 0 (0) 1092.05 (-333.67) 571 (-34) 1952 (-262) 0.22 (-0.08) 0.00 (+0.00)
1.15 list_sboms_paginated 65 (-23) 0 (0) 1421.32 (-1773.72) 496 (+20) 2886 (-4306) 0.22 (-0.08) 0.00 (+0.00)
1.16 get_analysis_status 65 (-21) 0 (0) 6.29 (+1.44) 1 (0) 54 (+1) 0.22 (-0.07) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 65 (-21) 0 (0) 148.11 (+21.13) 29 (-10) 398 (+96) 0.22 (-0.07) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 65 (-21) 0 (0) 766.26 (-417.05) 204 (-17) 2016 (-2181) 0.22 (-0.07) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (-21) 0 (0) 55.38 (-19.67) 9 (0) 191 (-12) 0.22 (-0.07) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (-21) 0 (0) 817.26 (-137.47) 422 (-82) 1580 (+91) 0.22 (-0.07) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (-21) 0 (0) 590.83 (-110.89) 278 (-76) 914 (-183) 0.22 (-0.07) 0.00 (+0.00)
Aggregated 1,435 (-450) 0 (0) 1086.38 (+282.69) 1 (0) 18389 (+5048) 4.78 (-1.50) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 65 (-20) 22802.46 (+5453.11) 10669 (+1822) 27776 (+2378) 0.22 (-0.07) 13.00 (-4.00)
Aggregated 5 (0) 65 (-20) 22802.46 (+5453.11) 10669 (+1822) 27776 (+2378) 0.22 (-0.07) 13.00 (-4.00)

User Metrics