Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-21 02:19:2125-09-21 02:19:2700:00:060 → 5
Maintaining25-09-21 02:19:2725-09-21 02:24:2700:05:005
Decreasing25-09-21 02:24:2725-09-21 02:24:3400:00:070 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 55 (-39) 0 14.53 (+1.77) 3 (0) 64 (+5) 0.18 (-0.13) 0.00 (+0.00)
GET get_analysis_latest_cpe 55 (-40) 0 145.89 (+1.08) 34 (-2) 358 (+38) 0.18 (-0.13) 0.00 (+0.00)
GET get_analysis_status 55 (-40) 0 6.53 (-2.61) 1 (0) 51 (-6) 0.18 (-0.13) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 55 (-40) 0 770.95 (-569.18) 214 (+5) 1930 (-1861) 0.18 (-0.13) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 (-39) 0 832.91 (-148.24) 390 (-258) 1417 (-106) 0.18 (-0.13) 0.00 (+0.00)
GET list_advisory 55 (-39) 0 509.76 (+47.73) 317 (+188) 1656 (+257) 0.18 (-0.13) 0.00 (+0.00)
GET list_advisory_paginated 55 (-39) 0 439.40 (+56.13) 190 (+90) 702 (+5) 0.18 (-0.13) 0.00 (+0.00)
GET list_importer 55 (-39) 0 3.65 (-0.95) 1 (0) 56 (+6) 0.18 (-0.13) 0.00 (+0.00)
GET list_organizations 55 (-39) 0 6.96 (-4.39) 1 (0) 45 (-4) 0.18 (-0.13) 0.00 (+0.00)
GET list_packages 55 (-39) 0 487.60 (+135.01) 209 (+117) 852 (+89) 0.18 (-0.13) 0.00 (+0.00)
GET list_packages_paginated 55 (-39) 0 420.49 (+81.32) 109 (-2) 686 (+172) 0.18 (-0.13) 0.00 (+0.00)
GET list_products 55 (-42) 0 7.71 (-4.47) 4 (+2) 14 (-55) 0.18 (-0.14) 0.00 (+0.00)
GET list_sboms 55 (-42) 0 1203.64 (-109.98) 602 (+15) 1834 (-753) 0.18 (-0.14) 0.00 (+0.00)
GET list_sboms_paginated 55 (-42) 0 1561.78 (-1427.29) 487 (-2) 3226 (-4970) 0.18 (-0.14) 0.00 (+0.00)
GET list_vulnerabilities 55 (-39) 0 308.82 (+80.15) 107 (+50) 597 (+234) 0.18 (-0.13) 0.00 (+0.00)
GET list_vulnerabilities_paginated 55 (-39) 0 213.05 (+36.49) 152 (+104) 402 (+98) 0.18 (-0.13) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 (-39) 0 77.65 (+1.29) 9 (-4) 227 (+26) 0.18 (-0.13) 0.00 (+0.00)
GET search_advisory 55 (-39) 0 950.65 (+32.48) 357 (+209) 2108 (+9) 0.18 (-0.13) 0.00 (+0.00)
GET search_exact_purl 55 (-42) 0 7.71 (-2.73) 6 (+4) 15 (-44) 0.18 (-0.14) 0.00 (+0.00)
GET search_purls 60 (-38) 0 17904.25 (+12666.39) 8051 (+6766) 26069 (+13061) 0.20 (-0.13) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 (-39) 0 607.49 (-98.45) 335 (+141) 1108 (+24) 0.18 (-0.13) 0.00 (+0.00)
Aggregated 1160 (-833) 0 1332.76 (+574.03) 1 (0) 26069 (+13061) 3.87 (-2.78) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (0) 8 (+1) 11 (+2) 17 (+5) 49 (0) 55 (+3) 62 (+4) 64 (+5)
GET get_analysis_latest_cpe 130 (0) 170 (0) 190 (+10) 200 (+10) 260 (+40) 280 (+10) 280 (-40) 358 (+38)
GET get_analysis_status 2 (-1) 3 (-1) 3 (-2) 4 (-2) 7 (-40) 44 (-8) 49 (-6) 51 (-6)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (+230) 700 (+100) 800 (-2,200) 1,000 (-2,000) 1,000 (-2,000) 1,930 (-1,070) 1,930 (-1,861) 1,930 (-1,861)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (-200) 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-523) 1,000 (-523)
GET list_advisory 470 (+30) 480 (+10) 500 (0) 600 (+100) 600 (0) 700 (+100) 800 (0) 1,656 (+656)
GET list_advisory_paginated 460 (+70) 470 (+70) 490 (+80) 500 (+60) 500 (+10) 600 (+100) 600 (0) 700 (+3)
GET list_importer 2 (0) 3 (+1) 3 (0) 3 (-1) 5 (-1) 8 (-4) 15 (-35) 56 (+6)
GET list_organizations 3 (0) 4 (0) 4 (-2) 10 (-21) 18 (-23) 26 (-17) 33 (-13) 45 (-4)
GET list_packages 470 (+100) 490 (+110) 500 (+110) 600 (+190) 600 (+150) 600 (+120) 800 (+300) 852 (+89)
GET list_packages_paginated 420 (+60) 460 (+80) 480 (+90) 500 (+100) 500 (+60) 600 (+130) 600 (+100) 686 (+186)
GET list_products 7 (0) 9 (+1) 10 (+1) 10 (-1) 11 (-12) 12 (-43) 14 (-45) 14 (-55)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,834 (-166) 1,834 (-166) 1,834 (-166) 1,834 (-166) 1,834 (-753)
GET list_sboms_paginated 2,000 (-1,000) 2,000 (-1,000) 2,000 (-2,000) 2,000 (-2,000) 3,000 (-2,000) 3,000 (-3,000) 3,000 (-5,000) 3,000 (-5,000)
GET list_vulnerabilities 300 (+70) 320 (+60) 340 (+70) 380 (+100) 430 (+130) 450 (+150) 500 (+190) 597 (+237)
GET list_vulnerabilities_paginated 200 (+10) 210 (+20) 220 (+20) 230 (+20) 290 (+70) 300 (+40) 350 (+70) 400 (+100)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 69 (-1) 76 (-1) 93 (-7) 120 (0) 170 (+10) 190 (+10) 220 (+30) 227 (+27)
GET search_advisory 900 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 7 (0) 8 (+1) 8 (+1) 9 (0) 9 (-4) 10 (-42) 11 (-45) 15 (-44)
GET search_purls 18,000 (+15,000) 19,000 (+14,000) 19,000 (+12,000) 19,000 (+10,000) 19,000 (+7,000) 26,000 (+14,000) 26,000 (+14,000) 26,000 (+13,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 500 (-200) 600 (-200) 700 (-100) 700 (-200) 900 (0) 900 (-100) 900 (-100) 1,000 (0)
Aggregated 370 (+80) 470 (+80) 600 (+100) 800 (-100) 2,000 (0) 9,000 (+6,000) 19,000 (+10,000) 26,000 (+13,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 55 [200]
GET get_analysis_latest_cpe 55 [200]
GET get_analysis_status 55 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 55 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 [200]
GET list_advisory 55 [200]
GET list_advisory_paginated 55 [200]
GET list_importer 55 [200]
GET list_organizations 55 [200]
GET list_packages 55 [200]
GET list_packages_paginated 55 [200]
GET list_products 55 [200]
GET list_sboms 55 [200]
GET list_sboms_paginated 55 [200]
GET list_vulnerabilities 55 [200]
GET list_vulnerabilities_paginated 55 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 [200]
GET search_advisory 55 [200]
GET search_exact_purl 55 [200]
GET search_purls 60 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 [200]
Aggregated 1,160 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 55 (-39) 0 (0) 14.38 (+0.44) 9 (+2) 30 (+7) 0.18 (-0.13) 0.00 (+0.00)
1.1 list_organizations 55 (-39) 0 (0) 7.24 (-4.30) 1 (0) 48 (-1) 0.18 (-0.13) 0.00 (+0.00)
1.2 list_advisory 55 (-39) 0 (0) 509.87 (+47.75) 317 (+188) 1656 (+257) 0.18 (-0.13) 0.00 (+0.00)
1.3 list_advisory_paginated 55 (-39) 0 (0) 439.44 (+56.11) 190 (+90) 702 (+5) 0.18 (-0.13) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 55 (-39) 0 (0) 14.62 (+1.82) 3 (0) 65 (+6) 0.18 (-0.13) 0.00 (+0.00)
1.5 search_advisory 55 (-39) 0 (0) 950.69 (+32.47) 357 (+209) 2108 (+9) 0.18 (-0.13) 0.00 (+0.00)
1.6 list_vulnerabilities 55 (-39) 0 (0) 308.87 (+80.18) 107 (+50) 597 (+234) 0.18 (-0.13) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 55 (-39) 0 (0) 213.13 (+36.46) 153 (+105) 402 (+96) 0.18 (-0.13) 0.00 (+0.00)
1.8 list_importer 55 (-39) 0 (0) 3.65 (-1.01) 1 (0) 56 (+6) 0.18 (-0.13) 0.00 (+0.00)
1.9 list_packages 55 (-39) 0 (0) 487.67 (+134.95) 209 (+117) 852 (+89) 0.18 (-0.13) 0.00 (+0.00)
1.10 list_packages_paginated 55 (-39) 0 (0) 420.55 (+81.32) 109 (-2) 686 (+172) 0.18 (-0.13) 0.00 (+0.00)
1.11 search_purls 60 (-38) 0 (0) 17904.30 (+12666.44) 8051 (+6766) 26069 (+13061) 0.20 (-0.13) 0.00 (+0.00)
1.12 search_exact_purl 55 (-42) 0 (0) 7.71 (-2.79) 6 (+4) 15 (-44) 0.18 (-0.14) 0.00 (+0.00)
1.13 list_products 55 (-42) 0 (0) 7.75 (-4.44) 4 (+2) 14 (-55) 0.18 (-0.14) 0.00 (+0.00)
1.14 list_sboms 55 (-42) 0 (0) 1203.65 (-110.04) 602 (+15) 1834 (-753) 0.18 (-0.14) 0.00 (+0.00)
1.15 list_sboms_paginated 55 (-42) 0 (0) 1561.84 (-1427.37) 487 (-2) 3226 (-4970) 0.18 (-0.14) 0.00 (+0.00)
1.16 get_analysis_status 55 (-40) 0 (0) 6.60 (-2.55) 1 (0) 51 (-6) 0.18 (-0.13) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 55 (-40) 0 (0) 145.93 (+1.05) 34 (-2) 358 (+38) 0.18 (-0.13) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 55 (-40) 0 (0) 771.00 (-569.23) 214 (+5) 1930 (-1861) 0.18 (-0.13) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 55 (-39) 0 (0) 77.67 (+1.24) 9 (-4) 227 (+26) 0.18 (-0.13) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 55 (-39) 0 (0) 833.00 (-148.23) 390 (-258) 1417 (-107) 0.18 (-0.13) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 55 (-39) 0 (0) 607.55 (-98.47) 335 (+141) 1109 (+25) 0.18 (-0.13) 0.00 (+0.00)
Aggregated 1,215 (-872) 0 (0) 1272.43 (+547.87) 1 (0) 26069 (+13061) 4.05 (-2.91) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 55 (-39) 25389.20 (+9676.75) 11968 (+3159) 30965 (+5138) 0.18 (-0.13) 11.00 (-7.80)
Aggregated 5 (0) 55 (-39) 25389.20 (+9676.75) 11968 (+3159) 30965 (+5138) 0.18 (-0.13) 11.00 (-7.80)

User Metrics