Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-17 02:17:5625-09-17 02:18:0100:00:050 → 5
Maintaining25-09-17 02:18:0125-09-17 02:23:0200:05:015
Decreasing25-09-17 02:23:0225-09-17 02:23:0300:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 103 (-27) 0 11.80 (+0.56) 3 (0) 73 (+4) 0.34 (-0.09) 0.00 (+0.00)
GET get_analysis_latest_cpe 105 (-25) 0 134.85 (-1.74) 34 (+6) 307 (-685) 0.35 (-0.08) 0.00 (+0.00)
GET get_analysis_status 105 (-25) 0 5.78 (-2.73) 1 (0) 59 (-2) 0.35 (-0.08) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 105 (-25) 0 1343.17 (+614.68) 209 (+46) 3903 (+2041) 0.35 (-0.08) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 104 (-26) 0 958.96 (+160.49) 545 (+207) 1606 (+19) 0.35 (-0.09) 0.00 (+0.00)
GET list_advisory 103 (-27) 0 459.01 (-32.96) 137 (-68) 904 (-170) 0.34 (-0.09) 0.00 (+0.00)
GET list_advisory_paginated 103 (-27) 0 378.71 (-57.96) 111 (-29) 687 (-604) 0.34 (-0.09) 0.00 (+0.00)
GET list_importer 103 (-27) 0 3.74 (-3.19) 1 (0) 52 (-10) 0.34 (-0.09) 0.00 (+0.00)
GET list_organizations 103 (-27) 0 14.07 (+8.48) 1 (0) 52 (-12) 0.34 (-0.09) 0.00 (+0.00)
GET list_packages 103 (-27) 0 361.79 (-95.18) 100 (+18) 862 (-543) 0.34 (-0.09) 0.00 (+0.00)
GET list_packages_paginated 103 (-27) 0 336.66 (-65.58) 107 (+6) 503 (-525) 0.34 (-0.09) 0.00 (+0.00)
GET list_products 108 (-22) 0 12.39 (+4.32) 3 (+1) 65 (+2) 0.36 (-0.07) 0.00 (+0.00)
GET list_sboms 108 (-22) 0 1263.16 (+240.24) 576 (+47) 2198 (+699) 0.36 (-0.07) 0.00 (+0.00)
GET list_sboms_paginated 107 (-23) 0 2861.95 (+1538.95) 442 (-28) 6916 (+4226) 0.36 (-0.08) 0.00 (+0.00)
GET list_vulnerabilities 103 (-27) 0 227.50 (-34.63) 57 (-5) 410 (-501) 0.34 (-0.09) 0.00 (+0.00)
GET list_vulnerabilities_paginated 103 (-27) 0 183.05 (+3.67) 50 (+10) 289 (-17) 0.34 (-0.09) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 104 (-26) 0 68.95 (+16.06) 11 (+3) 199 (+28) 0.35 (-0.09) 0.00 (+0.00)
GET search_advisory 103 (-27) 0 859.77 (-74.25) 152 (-81) 2123 (+210) 0.34 (-0.09) 0.00 (+0.00)
GET search_exact_purl 108 (-22) 0 11.26 (+2.37) 2 (+1) 61 (+4) 0.36 (-0.07) 0.00 (+0.00)
GET search_purls 108 (-27) 0 4107.74 (+187.09) 1486 (+392) 13049 (+5132) 0.36 (-0.09) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 104 (-26) 0 673.93 (+139.06) 273 (+53) 1013 (-189) 0.35 (-0.09) 0.00 (+0.00)
Aggregated 2196 (-539) 0 689.32 (+124.58) 1 (0) 13049 (+5132) 7.32 (-1.80) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (+1) 8 (+1) 10 (+1) 12 (+1) 20 (-15) 49 (0) 71 (+4) 73 (+4)
GET get_analysis_latest_cpe 120 (+31) 150 (+40) 170 (+20) 180 (-10) 190 (-100) 210 (-140) 240 (-560) 307 (-685)
GET get_analysis_status 2 (0) 3 (+1) 3 (0) 4 (-2) 8 (-37) 47 (-3) 58 (+3) 59 (-2)
GET get_sbom[sha256:720e4451…a939656247164447] 600 (0) 600 (-100) 3,000 (+2,200) 3,000 (+2,000) 3,000 (+2,000) 3,000 (+1,138) 3,903 (+2,041) 3,903 (+2,041)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (+100) 1,000 (+100) 1,000 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (-587) 1,606 (+19)
GET list_advisory 450 (+10) 480 (+20) 490 (+10) 500 (-100) 600 (-100) 700 (-100) 800 (-200) 900 (-100)
GET list_advisory_paginated 390 (-30) 400 (-60) 410 (-70) 420 (-70) 480 (-120) 500 (-100) 687 (-13) 687 (-313)
GET list_importer 2 (0) 2 (-1) 3 (-1) 3 (-2) 5 (-17) 7 (-37) 51 (+1) 52 (-10)
GET list_organizations 4 (+2) 6 (+3) 14 (+10) 36 (+30) 42 (+33) 44 (+23) 52 (+5) 52 (-12)
GET list_packages 360 (-60) 380 (-50) 390 (-60) 400 (-90) 450 (-150) 480 (-420) 800 (-200) 862 (-138)
GET list_packages_paginated 330 (-70) 370 (-50) 390 (-60) 400 (-80) 410 (-90) 420 (-280) 480 (-420) 500 (-500)
GET list_products 7 (+2) 8 (+2) 9 (+2) 11 (+3) 48 (+37) 53 (+10) 58 (0) 65 (+2)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000)
GET list_sboms_paginated 3,000 (+2,000) 3,000 (+2,000) 4,000 (+3,000) 4,000 (+2,000) 5,000 (+3,000) 6,000 (+4,000) 6,916 (+4,226) 6,916 (+4,226)
GET list_vulnerabilities 220 (0) 230 (-10) 260 (-20) 270 (-30) 300 (-50) 350 (-140) 410 (-490) 410 (-490)
GET list_vulnerabilities_paginated 190 (+10) 190 (+10) 200 (+10) 210 (+10) 250 (+30) 270 (0) 289 (-17) 289 (-17)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (+34) 72 (+16) 83 (+20) 110 (+34) 170 (+40) 180 (+30) 199 (+29) 199 (+29)
GET search_advisory 700 (-100) 800 (-100) 900 (-100) 1,000 (0) 2,000 (+87) 2,000 (+87) 2,000 (+87) 2,000 (+87)
GET search_exact_purl 6 (+2) 7 (+3) 8 (+3) 9 (+3) 46 (+3) 53 (+3) 57 (+1) 61 (+4)
GET search_purls 3,000 (-1,000) 3,000 (-1,000) 5,000 (+1,000) 6,000 (+2,000) 8,000 (+3,000) 9,000 (+4,000) 13,000 (+5,083) 13,000 (+5,083)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (+230) 700 (+200) 800 (+300) 800 (+100) 900 (+100) 900 (+100) 1,000 (0) 1,000 (0)
Aggregated 300 (-20) 400 (-20) 600 (+100) 900 (+100) 2,000 (+1,000) 3,000 (+1,000) 7,000 (+3,000) 13,000 (+5,083)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 103 [200]
GET get_analysis_latest_cpe 105 [200]
GET get_analysis_status 105 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 105 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 104 [200]
GET list_advisory 103 [200]
GET list_advisory_paginated 103 [200]
GET list_importer 103 [200]
GET list_organizations 103 [200]
GET list_packages 103 [200]
GET list_packages_paginated 103 [200]
GET list_products 108 [200]
GET list_sboms 108 [200]
GET list_sboms_paginated 107 [200]
GET list_vulnerabilities 103 [200]
GET list_vulnerabilities_paginated 103 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 104 [200]
GET search_advisory 103 [200]
GET search_exact_purl 108 [200]
GET search_purls 108 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 104 [200]
Aggregated 2,196 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 103 (-27) 0 (0) 13.50 (-0.65) 7 (-1) 32 (+10) 0.34 (-0.09) 0.00 (+0.00)
1.1 list_organizations 103 (-27) 0 (0) 14.16 (+8.42) 1 (0) 52 (-12) 0.34 (-0.09) 0.00 (+0.00)
1.2 list_advisory 103 (-27) 0 (0) 459.06 (-32.93) 137 (-68) 904 (-170) 0.34 (-0.09) 0.00 (+0.00)
1.3 list_advisory_paginated 103 (-27) 0 (0) 378.75 (-57.95) 111 (-30) 687 (-604) 0.34 (-0.09) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 103 (-27) 0 (0) 11.82 (+0.54) 3 (0) 73 (+4) 0.34 (-0.09) 0.00 (+0.00)
1.5 search_advisory 103 (-27) 0 (0) 859.83 (-74.21) 152 (-81) 2123 (+210) 0.34 (-0.09) 0.00 (+0.00)
1.6 list_vulnerabilities 103 (-27) 0 (0) 227.60 (-34.54) 57 (-5) 410 (-501) 0.34 (-0.09) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 103 (-27) 0 (0) 183.09 (+3.64) 50 (+10) 289 (-17) 0.34 (-0.09) 0.00 (+0.00)
1.8 list_importer 103 (-27) 0 (0) 3.78 (-3.20) 1 (0) 52 (-10) 0.34 (-0.09) 0.00 (+0.00)
1.9 list_packages 103 (-27) 0 (0) 361.84 (-95.22) 100 (+18) 862 (-543) 0.34 (-0.09) 0.00 (+0.00)
1.10 list_packages_paginated 103 (-27) 0 (0) 336.68 (-65.61) 107 (+6) 503 (-525) 0.34 (-0.09) 0.00 (+0.00)
1.11 search_purls 108 (-27) 0 (0) 4107.85 (+187.14) 1488 (+394) 13049 (+5131) 0.36 (-0.09) 0.00 (+0.00)
1.12 search_exact_purl 108 (-22) 0 (0) 11.28 (+2.33) 2 (+1) 61 (+4) 0.36 (-0.07) 0.00 (+0.00)
1.13 list_products 108 (-22) 0 (0) 12.41 (+4.33) 3 (+1) 65 (+2) 0.36 (-0.07) 0.00 (+0.00)
1.14 list_sboms 108 (-22) 0 (0) 1263.19 (+240.24) 576 (+47) 2198 (+699) 0.36 (-0.07) 0.00 (+0.00)
1.15 list_sboms_paginated 107 (-23) 0 (0) 2862.05 (+1539.02) 442 (-28) 6916 (+4226) 0.36 (-0.08) 0.00 (+0.00)
1.16 get_analysis_status 105 (-25) 0 (0) 5.82 (-2.77) 1 (0) 59 (-2) 0.35 (-0.08) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 105 (-25) 0 (0) 134.93 (-1.73) 34 (+6) 307 (-685) 0.35 (-0.08) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 105 (-25) 0 (0) 1343.24 (+614.70) 209 (+46) 3903 (+2041) 0.35 (-0.08) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 104 (-26) 0 (0) 68.99 (+16.04) 11 (+3) 200 (+29) 0.35 (-0.09) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 104 (-26) 0 (0) 959.06 (+160.49) 546 (+207) 1606 (+19) 0.35 (-0.09) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 104 (-26) 0 (0) 674.00 (+139.05) 274 (+54) 1013 (-189) 0.35 (-0.09) 0.00 (+0.00)
Aggregated 2,299 (-566) 0 (0) 658.44 (+119.32) 1 (0) 13049 (+5131) 7.66 (-1.89) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 103 (-27) 14169.42 (+2745.22) 8886 (+4200) 23319 (+7584) 0.34 (-0.09) 20.60 (-5.40)
Aggregated 5 (0) 103 (-27) 14169.42 (+2745.22) 8886 (+4200) 23319 (+7584) 0.34 (-0.09) 20.60 (-5.40)

User Metrics