Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-15 02:15:2525-09-15 02:15:3000:00:050 → 5
Maintaining25-09-15 02:15:3025-09-15 02:20:3000:05:005
Decreasing25-09-15 02:20:3025-09-15 02:20:3100:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 91 (-9) 0 8.69 (-4.53) 2 (-1) 60 (-14) 0.30 (-0.03) 0.00 (+0.00)
GET get_analysis_latest_cpe 94 (-11) 0 121.05 (-12.72) 37 (+4) 316 (-57) 0.31 (-0.04) 0.00 (+0.00)
GET get_analysis_status 94 (-11) 0 7.59 (+2.21) 1 (0) 55 (+2) 0.31 (-0.04) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 94 (-11) 0 1022.69 (+232.62) 238 (+83) 3564 (+1336) 0.31 (-0.04) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 93 (-12) 0 890.33 (+80.24) 232 (-176) 1338 (-221) 0.31 (-0.04) 0.00 (+0.00)
GET list_advisory 91 (-14) 0 409.80 (-81.83) 113 (-188) 646 (-749) 0.30 (-0.05) 0.00 (+0.00)
GET list_advisory_paginated 91 (-9) 0 352.84 (-90.72) 79 (-97) 587 (-138) 0.30 (-0.03) 0.00 (+0.00)
GET list_importer 91 (-9) 0 3.51 (+0.32) 1 (0) 45 (-9) 0.30 (-0.03) 0.00 (+0.00)
GET list_organizations 91 (-14) 0 14.10 (+7.76) 1 (0) 49 (-9) 0.30 (-0.05) 0.00 (+0.00)
GET list_packages 91 (-9) 0 357.91 (-111.20) 70 (-94) 883 (-14) 0.30 (-0.03) 0.00 (+0.00)
GET list_packages_paginated 91 (-9) 0 319.48 (-85.88) 94 (+3) 565 (-29) 0.30 (-0.03) 0.00 (+0.00)
GET list_products 95 (-10) 0 11.81 (+5.43) 3 (-1) 60 (+50) 0.32 (-0.03) 0.00 (+0.00)
GET list_sboms 95 (-10) 0 1112.97 (-315.06) 577 (+7) 1818 (-698) 0.32 (-0.03) 0.00 (+0.00)
GET list_sboms_paginated 95 (-10) 0 2563.05 (+589.89) 492 (-27) 7195 (+2643) 0.32 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities 91 (-9) 0 248.88 (-50.82) 49 (-58) 565 (-50) 0.30 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 91 (-9) 0 161.37 (-35.57) 38 (-62) 302 (-149) 0.30 (-0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 93 (-12) 0 58.24 (-18.84) 11 (-1) 182 (-21) 0.31 (-0.04) 0.00 (+0.00)
GET search_advisory 91 (-9) 0 786.97 (-239.58) 132 (-147) 2016 (-366) 0.30 (-0.03) 0.00 (+0.00)
GET search_exact_purl 95 (-10) 0 6.91 (+2.44) 3 (+1) 56 (+46) 0.32 (-0.03) 0.00 (+0.00)
GET search_purls 96 (-9) 0 6928.07 (+1625.55) 1101 (-1148) 12408 (+4712) 0.32 (-0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 92 (-13) 0 615.29 (-19.17) 150 (-69) 1289 (-888) 0.31 (-0.04) 0.00 (+0.00)
Aggregated 1946 (-219) 0 776.74 (+79.08) 1 (0) 12408 (+4712) 6.49 (-0.73) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 5 (-1) 6 (-2) 7 (-3) 9 (-4) 13 (-37) 18 (-41) 58 (-7) 60 (-14)
GET get_analysis_latest_cpe 110 (+10) 120 (-20) 150 (-20) 170 (-30) 180 (-40) 190 (-80) 210 (-90) 316 (-54)
GET get_analysis_status 2 (0) 3 (0) 4 (+1) 5 (+1) 43 (+36) 49 (+22) 53 (+4) 55 (+2)
GET get_sbom[sha256:720e4451…a939656247164447] 500 (-100) 600 (-100) 600 (-300) 2,000 (+1,000) 3,000 (+1,000) 3,000 (+1,000) 3,564 (+1,564) 3,564 (+1,564)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (+100) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-559)
GET list_advisory 410 (-50) 440 (-50) 470 (-30) 490 (-10) 500 (-100) 600 (-100) 600 (-200) 600 (-400)
GET list_advisory_paginated 380 (-70) 380 (-100) 400 (-100) 410 (-90) 470 (-130) 480 (-120) 587 (-113) 587 (-113)
GET list_importer 1 (-1) 2 (0) 2 (0) 3 (0) 5 (+1) 6 (+1) 38 (-12) 45 (-9)
GET list_organizations 5 (+2) 6 (+2) 11 (+6) 37 (+31) 43 (+27) 47 (+22) 48 (+5) 49 (-9)
GET list_packages 380 (-80) 400 (-70) 420 (-60) 450 (-50) 480 (-220) 600 (-200) 800 (-97) 883 (-14)
GET list_packages_paginated 330 (-90) 370 (-90) 390 (-90) 410 (-80) 450 (-50) 470 (-30) 500 (0) 565 (-29)
GET list_products 6 (0) 7 (0) 8 (+1) 10 (+2) 41 (+33) 48 (+39) 60 (+50) 60 (+50)
GET list_sboms 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,818 (-182) 1,818 (-182) 1,818 (-698)
GET list_sboms_paginated 2,000 (0) 2,000 (0) 3,000 (+1,000) 4,000 (+1,000) 5,000 (+2,000) 5,000 (+2,000) 7,000 (+3,000) 7,000 (+2,448)
GET list_vulnerabilities 240 (-60) 270 (-40) 290 (-50) 320 (-70) 380 (-20) 440 (-40) 500 (-100) 565 (-35)
GET list_vulnerabilities_paginated 170 (-20) 180 (-20) 190 (-20) 200 (-20) 240 (0) 260 (-10) 300 (-10) 300 (-150)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 59 (-11) 68 (-15) 76 (-24) 88 (-22) 120 (-20) 150 (-30) 180 (-20) 180 (-20)
GET search_advisory 700 (-200) 800 (-200) 900 (-100) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (+2) 6 (+1) 6 (+1) 7 (+2) 8 (+2) 9 (+2) 46 (+38) 56 (+46)
GET search_purls 8,000 (+3,000) 9,000 (+4,000) 10,000 (+5,000) 10,000 (+5,000) 11,000 (+5,000) 12,000 (+6,000) 12,000 (+4,304) 12,000 (+4,304)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+100) 600 (0) 700 (0) 800 (+100) 900 (0) 900 (-100) 1,000 (-1,000) 1,000 (-1,000)
Aggregated 280 (-70) 390 (-60) 500 (0) 800 (-100) 2,000 (0) 3,000 (0) 10,000 (+5,000) 12,000 (+4,304)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 91 [200]
GET get_analysis_latest_cpe 94 [200]
GET get_analysis_status 94 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 94 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 93 [200]
GET list_advisory 91 [200]
GET list_advisory_paginated 91 [200]
GET list_importer 91 [200]
GET list_organizations 91 [200]
GET list_packages 91 [200]
GET list_packages_paginated 91 [200]
GET list_products 95 [200]
GET list_sboms 95 [200]
GET list_sboms_paginated 95 [200]
GET list_vulnerabilities 91 [200]
GET list_vulnerabilities_paginated 91 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 93 [200]
GET search_advisory 91 [200]
GET search_exact_purl 95 [200]
GET search_purls 96 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 92 [200]
Aggregated 1,946 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 91 (-14) 0 (0) 13.69 (-0.44) 6 (-2) 29 (+8) 0.30 (-0.05) 0.00 (+0.00)
1.1 list_organizations 91 (-14) 0 (0) 14.20 (+7.70) 1 (-1) 50 (-8) 0.30 (-0.05) 0.00 (+0.00)
1.2 list_advisory 91 (-14) 0 (0) 409.86 (-81.85) 113 (-188) 646 (-749) 0.30 (-0.05) 0.00 (+0.00)
1.3 list_advisory_paginated 91 (-9) 0 (0) 352.89 (-90.76) 79 (-97) 587 (-139) 0.30 (-0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 91 (-9) 0 (0) 8.77 (-4.48) 2 (-1) 60 (-14) 0.30 (-0.03) 0.00 (+0.00)
1.5 search_advisory 91 (-9) 0 (0) 787.00 (-239.59) 132 (-147) 2016 (-366) 0.30 (-0.03) 0.00 (+0.00)
1.6 list_vulnerabilities 91 (-9) 0 (0) 248.93 (-50.84) 49 (-58) 565 (-50) 0.30 (-0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 91 (-9) 0 (0) 161.40 (-35.57) 38 (-62) 302 (-149) 0.30 (-0.03) 0.00 (+0.00)
1.8 list_importer 91 (-9) 0 (0) 3.54 (+0.29) 1 (0) 45 (-9) 0.30 (-0.03) 0.00 (+0.00)
1.9 list_packages 91 (-9) 0 (0) 357.97 (-111.20) 70 (-94) 883 (-14) 0.30 (-0.03) 0.00 (+0.00)
1.10 list_packages_paginated 91 (-9) 0 (0) 319.52 (-85.87) 94 (+3) 565 (-29) 0.30 (-0.03) 0.00 (+0.00)
1.11 search_purls 96 (-9) 0 (0) 6928.11 (+1625.55) 1101 (-1148) 12408 (+4712) 0.32 (-0.03) 0.00 (+0.00)
1.12 search_exact_purl 95 (-10) 0 (0) 6.91 (+2.41) 3 (+1) 56 (+46) 0.32 (-0.03) 0.00 (+0.00)
1.13 list_products 95 (-10) 0 (0) 11.84 (+5.44) 3 (-1) 60 (+50) 0.32 (-0.03) 0.00 (+0.00)
1.14 list_sboms 95 (-10) 0 (0) 1113.00 (-315.07) 577 (+7) 1818 (-698) 0.32 (-0.03) 0.00 (+0.00)
1.15 list_sboms_paginated 95 (-10) 0 (0) 2563.12 (+589.88) 492 (-27) 7195 (+2643) 0.32 (-0.03) 0.00 (+0.00)
1.16 get_analysis_status 94 (-11) 0 (0) 7.65 (+2.20) 1 (0) 55 (+2) 0.31 (-0.04) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 94 (-11) 0 (0) 121.16 (-12.70) 37 (+4) 316 (-58) 0.31 (-0.04) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 94 (-11) 0 (0) 1022.77 (+232.62) 238 (+83) 3564 (+1336) 0.31 (-0.04) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 93 (-12) 0 (0) 58.29 (-18.80) 11 (-1) 182 (-21) 0.31 (-0.04) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 93 (-12) 0 (0) 890.39 (+80.19) 232 (-176) 1338 (-222) 0.31 (-0.04) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 92 (-13) 0 (0) 615.39 (-19.19) 150 (-69) 1289 (-888) 0.31 (-0.04) 0.00 (+0.00)
Aggregated 2,037 (-233) 0 (0) 742.04 (+76.65) 1 (0) 12408 (+4712) 6.79 (-0.78) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 91 (-14) 16169.48 (+1751.08) 8885 (+2842) 24656 (+2423) 0.30 (-0.05) 18.20 (-2.80)
Aggregated 5 (0) 91 (-14) 16169.48 (+1751.08) 8885 (+2842) 24656 (+2423) 0.30 (-0.05) 18.20 (-2.80)

User Metrics