Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-24 02:17:2225-09-24 02:17:2700:00:050 → 5
Maintaining25-09-24 02:17:2725-09-24 02:22:2700:05:005
Decreasing25-09-24 02:22:2725-09-24 02:22:3400:00:070 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 80 (-5) 0 13.01 (+1.00) 3 (0) 67 (+3) 0.27 (-0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 80 (-5) 0 144.02 (+3.21) 40 (+5) 300 (+29) 0.27 (-0.02) 0.00 (+0.00)
GET get_analysis_status 80 (-5) 0 6.11 (-0.61) 1 (0) 61 (+2) 0.27 (-0.02) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 80 0 812.05 410 1438 0.27 0.00
GET get_sbom[sha256:720e4451…a939656247164447] 80 (-5) 0 732.01 (-66.59) 213 (+16) 1771 (-1347) 0.27 (-0.02) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 80 (-5) 0 778.49 (-64.16) 440 (-85) 1474 (-284) 0.27 (-0.02) 0.00 (+0.00)
GET list_advisory 80 (-5) 0 465.99 (-34.22) 276 (-17) 771 (-272) 0.27 (-0.02) 0.00 (+0.00)
GET list_advisory_paginated 80 (-5) 0 399.61 (-22.38) 178 (+61) 582 (-301) 0.27 (-0.02) 0.00 (+0.00)
GET list_importer 80 (-5) 0 4.20 (+0.55) 1 (0) 43 (-9) 0.27 (-0.02) 0.00 (+0.00)
GET list_organizations 80 (-5) 0 6.82 (-0.86) 1 (0) 47 (-5) 0.27 (-0.02) 0.00 (+0.00)
GET list_packages 80 (-5) 0 412.40 (-45.85) 105 (+4) 797 (-435) 0.27 (-0.02) 0.00 (+0.00)
GET list_packages_paginated 80 (-5) 0 369.50 (-42.17) 131 (+24) 600 (-652) 0.27 (-0.02) 0.00 (+0.00)
GET list_products 80 (-5) 0 7.22 (+0.97) 3 (0) 54 (+41) 0.27 (-0.02) 0.00 (+0.00)
GET list_sboms 80 (-5) 0 1212.72 (+225.40) 573 (-6) 2027 (+422) 0.27 (-0.02) 0.00 (+0.00)
GET list_sboms_paginated 80 (-5) 0 1698.43 (+327.46) 437 (-49) 4098 (-163) 0.27 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities 80 (-5) 0 238.35 (+12.59) 57 (+2) 402 (+22) 0.27 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities_paginated 80 (-5) 0 189.66 (+11.71) 43 (+11) 324 (-35) 0.27 (-0.02) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 80 (-5) 0 62.83 (+4.66) 10 (0) 222 (+37) 0.27 (-0.02) 0.00 (+0.00)
GET search_advisory 80 (-5) 0 1091.20 (+61.68) 198 (+25) 2274 (+4) 0.27 (-0.02) 0.00 (+0.00)
GET search_exact_purl 80 (-5) 0 7.00 (+0.42) 4 (0) 43 (+23) 0.27 (-0.02) 0.00 (+0.00)
GET search_purls 85 (-5) 0 9549.11 (-124.98) 4425 (-299) 14314 (+568) 0.28 (-0.02) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 80 (-5) 0 530.58 (-49.34) 206 (-58) 1179 (+205) 0.27 (-0.02) 0.00 (+0.00)
Aggregated 1765 (-25) 0 876.06 (+7.55) 1 (0) 14314 (+568) 5.88 (-0.08) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (+1) 9 (+2) 11 (+4) 15 (+4) 40 (-2) 51 (0) 52 (-9) 67 (+3)
GET get_analysis_latest_cpe 130 (+10) 150 (-20) 170 (-20) 190 (0) 210 (0) 260 (+40) 280 (+20) 300 (+30)
GET get_analysis_status 2 (0) 3 (+1) 4 (+1) 5 (+1) 8 (-2) 40 (-9) 49 (-5) 61 (+2)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 800 900 900 900 1,000 1,000 1,000 1,000
GET get_sbom[sha256:720e4451…a939656247164447] 500 (-200) 600 (-100) 800 (0) 1,000 (0) 1,000 (-1,000) 1,771 (-229) 1,771 (-229) 1,771 (-1,229)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 800 (0) 800 (-100) 900 (0) 1,000 (0) 1,000 (0) 1,000 (-758) 1,000 (-758)
GET list_advisory 450 (-20) 470 (-10) 490 (-10) 500 (-100) 600 (-100) 700 (0) 700 (-300) 771 (-229)
GET list_advisory_paginated 400 (0) 420 (0) 450 (-10) 470 (-10) 490 (-10) 500 (-100) 500 (-383) 582 (-301)
GET list_importer 3 (+1) 3 (+1) 4 (+1) 5 (+1) 7 (+2) 11 (+1) 40 (-6) 43 (-9)
GET list_organizations 4 (+1) 5 (+1) 5 (0) 9 (+1) 14 (-8) 21 (-10) 39 (-9) 47 (-5)
GET list_packages 400 (-10) 420 (-20) 460 (-20) 490 (-10) 500 (-300) 700 (-300) 797 (-203) 797 (-203)
GET list_packages_paginated 380 (-20) 400 (-10) 410 (-50) 460 (-30) 500 (-100) 600 (-400) 600 (-400) 600 (-400)
GET list_products 6 (0) 6 (0) 7 (-1) 8 (0) 9 (0) 9 (-1) 52 (+39) 54 (+41)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+395) 2,000 (+395)
GET list_sboms_paginated 2,000 (+1,000) 2,000 (+1,000) 2,000 (0) 2,000 (0) 3,000 (+1,000) 3,000 (0) 4,000 (0) 4,000 (0)
GET list_vulnerabilities 220 (0) 240 (0) 260 (0) 290 (+10) 300 (-10) 320 (+10) 360 (-20) 400 (+20)
GET list_vulnerabilities_paginated 180 (0) 190 (0) 200 (0) 240 (+30) 270 (+20) 280 (+10) 320 (+20) 320 (-39)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 58 (+15) 73 (+8) 84 (+12) 99 (+16) 110 (0) 140 (-20) 180 (0) 220 (+35)
GET search_advisory 1,000 (+100) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (0) 7 (+1) 7 (0) 8 (+1) 9 (+1) 11 (+2) 13 (-2) 43 (+23)
GET search_purls 10,000 (0) 10,000 (0) 10,000 (0) 11,000 (0) 11,000 (0) 12,000 (-1,000) 12,000 (-1,746) 14,000 (+254)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 470 (-130) 500 (-100) 600 (-100) 700 (0) 800 (0) 900 (0) 1,000 (+100) 1,000 (+26)
Aggregated 320 (+10) 430 (0) 600 (0) 900 (+100) 1,000 (0) 3,000 (-2,000) 11,000 (0) 14,000 (+254)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 80 [200]
GET get_analysis_latest_cpe 80 [200]
GET get_analysis_status 80 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 80 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 80 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 80 [200]
GET list_advisory 80 [200]
GET list_advisory_paginated 80 [200]
GET list_importer 80 [200]
GET list_organizations 80 [200]
GET list_packages 80 [200]
GET list_packages_paginated 80 [200]
GET list_products 80 [200]
GET list_sboms 80 [200]
GET list_sboms_paginated 80 [200]
GET list_vulnerabilities 80 [200]
GET list_vulnerabilities_paginated 80 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 80 [200]
GET search_advisory 80 [200]
GET search_exact_purl 80 [200]
GET search_purls 85 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 80 [200]
Aggregated 1,765 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 80 (-5) 0 (0) 15.12 (+0.95) 8 (+1) 33 (+6) 0.27 (-0.02) 0.00 (+0.00)
1.1 list_organizations 80 (-5) 0 (0) 7.07 (-0.75) 2 (+1) 47 (-5) 0.27 (-0.02) 0.00 (+0.00)
1.2 list_advisory 80 (-5) 0 (0) 466.06 (-34.27) 276 (-19) 771 (-272) 0.27 (-0.02) 0.00 (+0.00)
1.3 list_advisory_paginated 80 (-5) 0 (0) 399.64 (-22.42) 178 (+61) 582 (-301) 0.27 (-0.02) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 80 (-5) 0 (0) 13.04 (+0.96) 3 (0) 67 (+3) 0.27 (-0.02) 0.00 (+0.00)
1.5 search_advisory 80 (-5) 0 (0) 1091.26 (+61.72) 198 (+25) 2274 (+4) 0.27 (-0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 80 (-5) 0 (0) 238.40 (+12.54) 57 (+2) 402 (+22) 0.27 (-0.02) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 80 (-5) 0 (0) 189.76 (+11.73) 43 (+11) 325 (-34) 0.27 (-0.02) 0.00 (+0.00)
1.8 list_importer 80 (-5) 0 (0) 4.25 (+0.58) 1 (0) 43 (-9) 0.27 (-0.02) 0.00 (+0.00)
1.9 list_packages 80 (-5) 0 (0) 412.49 (-45.81) 106 (+5) 797 (-435) 0.27 (-0.02) 0.00 (+0.00)
1.10 list_packages_paginated 80 (-5) 0 (0) 369.58 (-42.14) 131 (+24) 600 (-652) 0.27 (-0.02) 0.00 (+0.00)
1.11 search_purls 85 (-5) 0 (0) 9549.17 (-124.97) 4425 (-299) 14314 (+568) 0.28 (-0.02) 0.00 (+0.00)
1.12 search_exact_purl 80 (-5) 0 (0) 7.03 (+0.43) 4 (0) 43 (+23) 0.27 (-0.02) 0.00 (+0.00)
1.13 list_products 80 (-5) 0 (0) 7.24 (+0.90) 4 (+1) 54 (+41) 0.27 (-0.02) 0.00 (+0.00)
1.14 list_sboms 80 (-5) 0 (0) 1212.76 (+225.39) 573 (-7) 2027 (+422) 0.27 (-0.02) 0.00 (+0.00)
1.15 list_sboms_paginated 80 (-5) 0 (0) 1698.49 (+327.46) 438 (-48) 4098 (-163) 0.27 (-0.02) 0.00 (+0.00)
1.16 get_analysis_status 80 (-5) 0 (0) 6.21 (-0.54) 1 (0) 61 (+2) 0.27 (-0.02) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 80 (-5) 0 (0) 144.12 (+3.27) 40 (+5) 300 (+29) 0.27 (-0.02) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 80 (-5) 0 (0) 732.15 (-66.52) 213 (+16) 1771 (-1347) 0.27 (-0.02) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 80 (-5) 0 (0) 62.90 (+4.68) 10 (0) 222 (+37) 0.27 (-0.02) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 80 (-5) 0 (0) 778.54 (-64.18) 440 (-85) 1474 (-284) 0.27 (-0.02) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 80 (-5) 0 (0) 530.67 (-49.34) 206 (-58) 1179 (+205) 0.27 (-0.02) 0.00 (+0.00)
1.22 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 80 0 812.11 410 1438 0.27 0.00
Aggregated 1,845 (-30) 0 (0) 838.08 (+8.94) 1 (0) 14314 (+568) 6.15 (-0.10) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 80 (-5) 18366.80 (+1003.42) 8873 (+369) 21849 (-4816) 0.27 (-0.02) 16.00 (-1.00)
Aggregated 5 (0) 80 (-5) 18366.80 (+1003.42) 8873 (+369) 21849 (-4816) 0.27 (-0.02) 16.00 (-1.00)

User Metrics