Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-22 02:20:2225-09-22 02:20:2700:00:050 → 5
Maintaining25-09-22 02:20:2725-09-22 02:25:2700:05:005
Decreasing25-09-22 02:25:2725-09-22 02:25:2900:00:020 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 85 (+30) 0 9.73 (-4.80) 3 (0) 56 (-8) 0.28 (+0.10) 0.00 (+0.00)
GET get_analysis_latest_cpe 87 (+32) 0 161.82 (+15.93) 39 (+5) 387 (+29) 0.29 (+0.11) 0.00 (+0.00)
GET get_analysis_status 87 (+32) 0 5.98 (-0.55) 1 (0) 50 (-1) 0.29 (+0.11) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 87 (+32) 0 1371.39 (+600.45) 310 (+96) 3841 (+1911) 0.29 (+0.11) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 87 (+32) 0 929.76 (+96.85) 606 (+216) 1513 (+96) 0.29 (+0.11) 0.00 (+0.00)
GET list_advisory 85 (+30) 0 435.41 (-74.35) 168 (-149) 824 (-832) 0.28 (+0.10) 0.00 (+0.00)
GET list_advisory_paginated 85 (+30) 0 378.93 (-60.47) 102 (-88) 717 (+15) 0.28 (+0.10) 0.00 (+0.00)
GET list_importer 85 (+30) 0 4.06 (+0.40) 1 (0) 48 (-8) 0.28 (+0.10) 0.00 (+0.00)
GET list_organizations 85 (+30) 0 14.00 (+7.04) 1 (0) 53 (+8) 0.28 (+0.10) 0.00 (+0.00)
GET list_packages 85 (+30) 0 316.20 (-171.40) 75 (-134) 791 (-61) 0.28 (+0.10) 0.00 (+0.00)
GET list_packages_paginated 85 (+30) 0 298.39 (-122.10) 113 (+4) 491 (-195) 0.28 (+0.10) 0.00 (+0.00)
GET list_products 90 (+35) 0 6.64 (-1.06) 4 (0) 11 (-3) 0.30 (+0.12) 0.00 (+0.00)
GET list_sboms 90 (+35) 0 1335.18 (+131.54) 605 (+3) 2403 (+569) 0.30 (+0.12) 0.00 (+0.00)
GET list_sboms_paginated 90 (+35) 0 2713.34 (+1151.56) 484 (-3) 8115 (+4889) 0.30 (+0.12) 0.00 (+0.00)
GET list_vulnerabilities 85 (+30) 0 194.79 (-114.03) 46 (-61) 360 (-237) 0.28 (+0.10) 0.00 (+0.00)
GET list_vulnerabilities_paginated 85 (+30) 0 149.61 (-63.44) 42 (-110) 262 (-140) 0.28 (+0.10) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 87 (+32) 0 73.24 (-4.41) 12 (+3) 189 (-38) 0.29 (+0.11) 0.00 (+0.00)
GET search_advisory 85 (+30) 0 759.73 (-190.93) 155 (-202) 2409 (+301) 0.28 (+0.10) 0.00 (+0.00)
GET search_exact_purl 90 (+35) 0 8.90 (+1.19) 3 (-3) 58 (+43) 0.30 (+0.12) 0.00 (+0.00)
GET search_purls 90 (+30) 0 7195.73 (-10708.52) 3216 (-4835) 10786 (-15283) 0.30 (+0.10) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 85 (+30) 0 747.42 (+139.93) 289 (-46) 1399 (+291) 0.28 (+0.10) 0.00 (+0.00)
Aggregated 1820 (+660) 0 832.83 (-499.93) 1 (0) 10786 (-15283) 6.07 (+2.20) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (-1) 7 (-1) 8 (-3) 10 (-7) 16 (-33) 44 (-11) 54 (-8) 56 (-8)
GET get_analysis_latest_cpe 170 (+40) 180 (+10) 190 (0) 210 (+10) 230 (-30) 270 (-10) 350 (+70) 387 (+29)
GET get_analysis_status 3 (+1) 4 (+1) 4 (+1) 5 (+1) 8 (+1) 49 (+5) 50 (+1) 50 (-1)
GET get_sbom[sha256:720e4451…a939656247164447] 900 (+200) 1,000 (+300) 1,000 (+200) 3,000 (+2,000) 3,000 (+2,000) 3,000 (+1,070) 3,841 (+1,911) 3,841 (+1,911)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (+100) 1,000 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,513 (+513)
GET list_advisory 430 (-40) 450 (-30) 490 (-10) 500 (-100) 600 (0) 700 (0) 800 (0) 800 (-856)
GET list_advisory_paginated 400 (-60) 410 (-60) 430 (-60) 460 (-40) 500 (0) 600 (0) 700 (+100) 700 (0)
GET list_importer 2 (0) 2 (-1) 3 (0) 4 (+1) 7 (+2) 8 (0) 45 (+30) 48 (-8)
GET list_organizations 4 (+1) 7 (+3) 21 (+17) 34 (+24) 41 (+23) 45 (+19) 51 (+18) 53 (+8)
GET list_packages 320 (-150) 370 (-120) 390 (-110) 410 (-190) 450 (-150) 470 (-130) 600 (-200) 791 (-61)
GET list_packages_paginated 310 (-110) 350 (-110) 380 (-100) 390 (-110) 440 (-60) 470 (-130) 490 (-110) 490 (-196)
GET list_products 6 (-1) 7 (-2) 8 (-2) 8 (-2) 9 (-2) 11 (-1) 11 (-3) 11 (-3)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 2,000 (+166) 2,000 (+166) 2,000 (+166) 2,000 (+166) 2,000 (+166)
GET list_sboms_paginated 3,000 (+1,000) 3,000 (+1,000) 4,000 (+2,000) 4,000 (+2,000) 5,000 (+2,000) 5,000 (+2,000) 6,000 (+3,000) 8,000 (+5,000)
GET list_vulnerabilities 200 (-100) 220 (-100) 230 (-110) 270 (-110) 290 (-140) 320 (-130) 340 (-160) 360 (-237)
GET list_vulnerabilities_paginated 160 (-40) 180 (-30) 190 (-30) 190 (-40) 210 (-80) 220 (-80) 260 (-90) 260 (-140)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (+1) 76 (0) 91 (-2) 110 (-10) 160 (-10) 180 (-10) 180 (-40) 189 (-38)
GET search_advisory 700 (-200) 700 (-300) 800 (-200) 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (-1) 6 (-2) 7 (-1) 7 (-2) 10 (+1) 54 (+44) 55 (+44) 58 (+43)
GET search_purls 7,000 (-11,000) 8,000 (-11,000) 8,000 (-11,000) 9,000 (-10,000) 10,000 (-9,000) 10,000 (-16,000) 10,786 (-15,214) 10,786 (-15,214)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (+200) 800 (+200) 900 (+200) 900 (+200) 1,000 (+100) 1,000 (+100) 1,000 (+100) 1,000 (0)
Aggregated 260 (-110) 400 (-70) 600 (0) 900 (+100) 2,000 (0) 4,000 (-5,000) 9,000 (-10,000) 10,786 (-15,214)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 85 [200]
GET get_analysis_latest_cpe 87 [200]
GET get_analysis_status 87 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 87 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 87 [200]
GET list_advisory 85 [200]
GET list_advisory_paginated 85 [200]
GET list_importer 85 [200]
GET list_organizations 85 [200]
GET list_packages 85 [200]
GET list_packages_paginated 85 [200]
GET list_products 90 [200]
GET list_sboms 90 [200]
GET list_sboms_paginated 90 [200]
GET list_vulnerabilities 85 [200]
GET list_vulnerabilities_paginated 85 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 87 [200]
GET search_advisory 85 [200]
GET search_exact_purl 90 [200]
GET search_purls 90 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 85 [200]
Aggregated 1,820 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 85 (+30) 0 (0) 13.92 (-0.46) 7 (-2) 25 (-5) 0.28 (+0.10) 0.00 (+0.00)
1.1 list_organizations 85 (+30) 0 (0) 14.26 (+7.02) 1 (0) 53 (+5) 0.28 (+0.10) 0.00 (+0.00)
1.2 list_advisory 85 (+30) 0 (0) 435.45 (-74.43) 169 (-148) 824 (-832) 0.28 (+0.10) 0.00 (+0.00)
1.3 list_advisory_paginated 85 (+30) 0 (0) 379.00 (-60.44) 102 (-88) 717 (+15) 0.28 (+0.10) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 85 (+30) 0 (0) 9.76 (-4.85) 3 (0) 56 (-9) 0.28 (+0.10) 0.00 (+0.00)
1.5 search_advisory 85 (+30) 0 (0) 759.81 (-190.88) 155 (-202) 2409 (+301) 0.28 (+0.10) 0.00 (+0.00)
1.6 list_vulnerabilities 85 (+30) 0 (0) 194.81 (-114.06) 46 (-61) 360 (-237) 0.28 (+0.10) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 85 (+30) 0 (0) 149.72 (-63.41) 42 (-111) 262 (-140) 0.28 (+0.10) 0.00 (+0.00)
1.8 list_importer 85 (+30) 0 (0) 4.13 (+0.47) 1 (0) 48 (-8) 0.28 (+0.10) 0.00 (+0.00)
1.9 list_packages 85 (+30) 0 (0) 316.26 (-171.41) 75 (-134) 791 (-61) 0.28 (+0.10) 0.00 (+0.00)
1.10 list_packages_paginated 85 (+30) 0 (0) 298.41 (-122.13) 113 (+4) 491 (-195) 0.28 (+0.10) 0.00 (+0.00)
1.11 search_purls 90 (+30) 0 (0) 7195.80 (-10708.50) 3216 (-4835) 10786 (-15283) 0.30 (+0.10) 0.00 (+0.00)
1.12 search_exact_purl 90 (+35) 0 (0) 8.93 (+1.22) 3 (-3) 58 (+43) 0.30 (+0.12) 0.00 (+0.00)
1.13 list_products 90 (+35) 0 (0) 6.68 (-1.07) 4 (0) 11 (-3) 0.30 (+0.12) 0.00 (+0.00)
1.14 list_sboms 90 (+35) 0 (0) 1335.23 (+131.58) 605 (+3) 2403 (+569) 0.30 (+0.12) 0.00 (+0.00)
1.15 list_sboms_paginated 90 (+35) 0 (0) 2713.48 (+1151.64) 484 (-3) 8115 (+4889) 0.30 (+0.12) 0.00 (+0.00)
1.16 get_analysis_status 87 (+32) 0 (0) 6.06 (-0.54) 1 (0) 51 (0) 0.29 (+0.11) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 87 (+32) 0 (0) 161.84 (+15.91) 39 (+5) 387 (+29) 0.29 (+0.11) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 87 (+32) 0 (0) 1371.43 (+600.43) 311 (+97) 3841 (+1911) 0.29 (+0.11) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 87 (+32) 0 (0) 73.38 (-4.29) 12 (+3) 191 (-36) 0.29 (+0.11) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 87 (+32) 0 (0) 929.80 (+96.80) 606 (+216) 1513 (+96) 0.29 (+0.11) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 85 (+30) 0 (0) 747.47 (+139.93) 289 (-46) 1399 (+290) 0.28 (+0.10) 0.00 (+0.00)
Aggregated 1,905 (+690) 0 (0) 795.67 (-476.76) 1 (0) 10786 (-15283) 6.35 (+2.30) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 85 (+30) 17095.13 (-8294.07) 8314 (-3654) 22105 (-8860) 0.28 (+0.10) 17.00 (+6.00)
Aggregated 5 (0) 85 (+30) 17095.13 (-8294.07) 8314 (-3654) 22105 (-8860) 0.28 (+0.10) 17.00 (+6.00)

User Metrics