Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-20 02:18:0125-09-20 02:18:0600:00:050 → 5
Maintaining25-09-20 02:18:0625-09-20 02:23:0600:05:005
Decreasing25-09-20 02:23:0625-09-20 02:23:0700:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 94 (-9) 0 12.76 (+0.96) 3 (0) 59 (-14) 0.31 (-0.03) 0.00 (+0.00)
GET get_analysis_latest_cpe 95 (-10) 0 144.81 (+9.96) 36 (+2) 320 (+13) 0.32 (-0.03) 0.00 (+0.00)
GET get_analysis_status 95 (-10) 0 9.14 (+3.36) 1 (0) 57 (-2) 0.32 (-0.03) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 95 (-10) 0 1340.13 (-3.05) 209 (0) 3791 (-112) 0.32 (-0.03) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 94 (-10) 0 981.15 (+22.19) 648 (+103) 1523 (-83) 0.31 (-0.03) 0.00 (+0.00)
GET list_advisory 94 (-9) 0 462.03 (+3.02) 129 (-8) 1399 (+495) 0.31 (-0.03) 0.00 (+0.00)
GET list_advisory_paginated 94 (-9) 0 383.27 (+4.56) 100 (-11) 697 (+10) 0.31 (-0.03) 0.00 (+0.00)
GET list_importer 94 (-9) 0 4.61 (+0.87) 1 (0) 50 (-2) 0.31 (-0.03) 0.00 (+0.00)
GET list_organizations 94 (-9) 0 11.35 (-2.72) 1 (0) 49 (-3) 0.31 (-0.03) 0.00 (+0.00)
GET list_packages 94 (-9) 0 352.59 (-9.20) 92 (-8) 763 (-99) 0.31 (-0.03) 0.00 (+0.00)
GET list_packages_paginated 94 (-9) 0 339.17 (+2.51) 111 (+4) 514 (+11) 0.31 (-0.03) 0.00 (+0.00)
GET list_products 97 (-11) 0 12.18 (-0.21) 2 (-1) 69 (+4) 0.32 (-0.04) 0.00 (+0.00)
GET list_sboms 97 (-11) 0 1313.62 (+50.46) 587 (+11) 2587 (+389) 0.32 (-0.04) 0.00 (+0.00)
GET list_sboms_paginated 97 (-10) 0 2989.07 (+127.12) 489 (+47) 8196 (+1280) 0.32 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities 94 (-9) 0 228.67 (+1.18) 57 (0) 363 (-47) 0.31 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 94 (-9) 0 176.56 (-6.48) 48 (-2) 304 (+15) 0.31 (-0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 94 (-10) 0 76.36 (+7.41) 13 (+2) 201 (+2) 0.31 (-0.03) 0.00 (+0.00)
GET search_advisory 94 (-9) 0 918.17 (+58.40) 148 (-4) 2099 (-24) 0.31 (-0.03) 0.00 (+0.00)
GET search_exact_purl 97 (-11) 0 10.44 (-0.82) 2 (0) 59 (-2) 0.32 (-0.04) 0.00 (+0.00)
GET search_purls 98 (-10) 0 5237.86 (+1130.12) 1285 (-201) 13008 (-41) 0.33 (-0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 94 (-10) 0 705.94 (+32.00) 194 (-79) 1084 (+71) 0.31 (-0.03) 0.00 (+0.00)
Aggregated 1993 (-203) 0 758.73 (+69.41) 1 (0) 13008 (-41) 6.64 (-0.68) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (0) 7 (-1) 9 (-1) 12 (0) 49 (+29) 52 (+3) 58 (-13) 59 (-14)
GET get_analysis_latest_cpe 130 (+10) 170 (+20) 180 (+10) 190 (+10) 220 (+30) 270 (+60) 320 (+80) 320 (+13)
GET get_analysis_status 3 (+1) 4 (+1) 5 (+2) 6 (+2) 47 (+39) 52 (+5) 55 (-3) 57 (-2)
GET get_sbom[sha256:720e4451…a939656247164447] 470 (-130) 600 (0) 3,000 (0) 3,000 (0) 3,000 (0) 3,000 (0) 3,791 (-112) 3,791 (-112)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,523 (+523) 1,523 (-83)
GET list_advisory 440 (-10) 470 (-10) 500 (+10) 500 (0) 600 (0) 600 (-100) 800 (0) 1,000 (+100)
GET list_advisory_paginated 390 (0) 400 (0) 410 (0) 440 (+20) 490 (+10) 500 (0) 600 (-87) 697 (+10)
GET list_importer 2 (0) 2 (0) 3 (0) 4 (+1) 6 (+1) 12 (+5) 50 (-1) 50 (-2)
GET list_organizations 3 (-1) 4 (-2) 6 (-8) 31 (-5) 41 (-1) 43 (-1) 46 (-6) 49 (-3)
GET list_packages 370 (+10) 380 (0) 390 (0) 410 (+10) 450 (0) 480 (0) 500 (-300) 763 (-99)
GET list_packages_paginated 360 (+30) 380 (+10) 390 (0) 400 (0) 440 (+30) 470 (+50) 500 (+20) 500 (0)
GET list_products 7 (0) 8 (0) 9 (0) 11 (0) 23 (-25) 55 (+2) 59 (+1) 69 (+4)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,587 (+587)
GET list_sboms_paginated 3,000 (0) 3,000 (0) 4,000 (0) 4,000 (0) 5,000 (0) 6,000 (0) 8,000 (+1,084) 8,000 (+1,084)
GET list_vulnerabilities 230 (+10) 260 (+30) 270 (+10) 280 (+10) 300 (0) 300 (-50) 310 (-100) 360 (-50)
GET list_vulnerabilities_paginated 190 (0) 190 (0) 200 (0) 210 (0) 220 (-30) 260 (-10) 280 (-9) 300 (+11)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (+5) 77 (+5) 100 (+17) 120 (+10) 160 (-10) 180 (0) 190 (-9) 200 (+1)
GET search_advisory 800 (+100) 900 (+100) 1,000 (+100) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 7 (+1) 7 (0) 7 (-1) 9 (0) 13 (-33) 52 (-1) 56 (-1) 59 (-2)
GET search_purls 3,000 (0) 5,000 (+2,000) 7,000 (+2,000) 9,000 (+3,000) 12,000 (+4,000) 12,000 (+3,000) 12,000 (-1,000) 13,000 (0)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (0) 800 (+100) 800 (0) 900 (+100) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0)
Aggregated 290 (-10) 390 (-10) 500 (-100) 900 (0) 2,000 (0) 3,000 (0) 9,000 (+2,000) 13,000 (0)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 94 [200]
GET get_analysis_latest_cpe 95 [200]
GET get_analysis_status 95 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 95 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 94 [200]
GET list_advisory 94 [200]
GET list_advisory_paginated 94 [200]
GET list_importer 94 [200]
GET list_organizations 94 [200]
GET list_packages 94 [200]
GET list_packages_paginated 94 [200]
GET list_products 97 [200]
GET list_sboms 97 [200]
GET list_sboms_paginated 97 [200]
GET list_vulnerabilities 94 [200]
GET list_vulnerabilities_paginated 94 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 94 [200]
GET search_advisory 94 [200]
GET search_exact_purl 97 [200]
GET search_purls 98 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 94 [200]
Aggregated 1,993 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 94 (-9) 0 (0) 13.95 (+0.44) 7 (0) 23 (-9) 0.31 (-0.03) 0.00 (+0.00)
1.1 list_organizations 94 (-9) 0 (0) 11.53 (-2.62) 1 (0) 49 (-3) 0.31 (-0.03) 0.00 (+0.00)
1.2 list_advisory 94 (-9) 0 (0) 462.13 (+3.07) 129 (-8) 1399 (+495) 0.31 (-0.03) 0.00 (+0.00)
1.3 list_advisory_paginated 94 (-9) 0 (0) 383.33 (+4.58) 100 (-11) 697 (+10) 0.31 (-0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 94 (-9) 0 (0) 12.80 (+0.98) 3 (0) 59 (-14) 0.31 (-0.03) 0.00 (+0.00)
1.5 search_advisory 94 (-9) 0 (0) 918.22 (+58.39) 148 (-4) 2099 (-24) 0.31 (-0.03) 0.00 (+0.00)
1.6 list_vulnerabilities 94 (-9) 0 (0) 228.69 (+1.09) 57 (0) 363 (-47) 0.31 (-0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 94 (-9) 0 (0) 176.67 (-6.42) 48 (-2) 306 (+17) 0.31 (-0.03) 0.00 (+0.00)
1.8 list_importer 94 (-9) 0 (0) 4.66 (+0.88) 1 (0) 50 (-2) 0.31 (-0.03) 0.00 (+0.00)
1.9 list_packages 94 (-9) 0 (0) 352.72 (-9.12) 92 (-8) 763 (-99) 0.31 (-0.03) 0.00 (+0.00)
1.10 list_packages_paginated 94 (-9) 0 (0) 339.22 (+2.54) 111 (+4) 514 (+11) 0.31 (-0.03) 0.00 (+0.00)
1.11 search_purls 98 (-10) 0 (0) 5237.86 (+1130.00) 1285 (-203) 13008 (-41) 0.33 (-0.03) 0.00 (+0.00)
1.12 search_exact_purl 97 (-11) 0 (0) 10.49 (-0.78) 2 (0) 59 (-2) 0.32 (-0.04) 0.00 (+0.00)
1.13 list_products 97 (-11) 0 (0) 12.19 (-0.22) 2 (-1) 69 (+4) 0.32 (-0.04) 0.00 (+0.00)
1.14 list_sboms 97 (-11) 0 (0) 1313.69 (+50.50) 587 (+11) 2587 (+389) 0.32 (-0.04) 0.00 (+0.00)
1.15 list_sboms_paginated 97 (-10) 0 (0) 2989.21 (+127.16) 489 (+47) 8196 (+1280) 0.32 (-0.03) 0.00 (+0.00)
1.16 get_analysis_status 95 (-10) 0 (0) 9.15 (+3.33) 1 (0) 57 (-2) 0.32 (-0.03) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 95 (-10) 0 (0) 144.87 (+9.94) 36 (+2) 320 (+13) 0.32 (-0.03) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 95 (-10) 0 (0) 1340.23 (-3.01) 209 (0) 3791 (-112) 0.32 (-0.03) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 94 (-10) 0 (0) 76.44 (+7.45) 13 (+2) 201 (+1) 0.31 (-0.03) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 94 (-10) 0 (0) 981.23 (+22.18) 648 (+102) 1524 (-82) 0.31 (-0.03) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 94 (-10) 0 (0) 706.01 (+32.01) 194 (-80) 1084 (+71) 0.31 (-0.03) 0.00 (+0.00)
Aggregated 2,087 (-212) 0 (0) 724.56 (+66.12) 1 (0) 13008 (-41) 6.96 (-0.71) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 94 (-9) 15712.45 (+1543.03) 8809 (-77) 25827 (+2508) 0.31 (-0.03) 18.80 (-1.80)
Aggregated 5 (0) 94 (-9) 15712.45 (+1543.03) 8809 (-77) 25827 (+2508) 0.31 (-0.03) 18.80 (-1.80)

User Metrics