Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-25 02:19:4925-09-25 02:19:5400:00:050 → 5
Maintaining25-09-25 02:19:5425-09-25 02:24:5500:05:015
Decreasing25-09-25 02:24:5525-09-25 02:24:5900:00:040 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 75 (-5) 0 11.55 (-1.47) 3 (0) 67 (0) 0.25 (-0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 75 (-5) 0 126.44 (-17.58) 32 (-8) 295 (-5) 0.25 (-0.02) 0.00 (+0.00)
GET get_analysis_status 75 (-5) 0 4.75 (-1.37) 1 (0) 52 (-9) 0.25 (-0.02) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 75 (-5) 0 869.23 (+57.18) 507 (+97) 1309 (-129) 0.25 (-0.02) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 75 (-5) 0 668.27 (-63.75) 120 (-93) 1915 (+144) 0.25 (-0.02) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 75 (-5) 0 832.72 (+54.23) 333 (-107) 1206 (-268) 0.25 (-0.02) 0.00 (+0.00)
GET list_advisory 75 (-5) 0 550.55 (+84.56) 395 (+119) 1240 (+469) 0.25 (-0.02) 0.00 (+0.00)
GET list_advisory_paginated 75 (-5) 0 422.08 (+22.47) 154 (-24) 553 (-29) 0.25 (-0.02) 0.00 (+0.00)
GET list_importer 75 (-5) 0 2.36 (-1.84) 1 (0) 16 (-27) 0.25 (-0.02) 0.00 (+0.00)
GET list_organizations 75 (-5) 0 7.41 (+0.59) 1 (0) 40 (-7) 0.25 (-0.02) 0.00 (+0.00)
GET list_packages 75 (-5) 0 554.36 (+141.96) 374 (+269) 1711 (+914) 0.25 (-0.02) 0.00 (+0.00)
GET list_packages_paginated 75 (-5) 0 433.08 (+63.58) 85 (-46) 904 (+304) 0.25 (-0.02) 0.00 (+0.00)
GET list_products 75 (-5) 0 9.43 (+2.20) 2 (-1) 52 (-2) 0.25 (-0.02) 0.00 (+0.00)
GET list_sboms 75 (-5) 0 958.01 (-254.71) 597 (+24) 1389 (-638) 0.25 (-0.02) 0.00 (+0.00)
GET list_sboms_paginated 75 (-5) 0 1091.96 (-606.47) 451 (+14) 1983 (-2115) 0.25 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities 75 (-5) 0 310.76 (+72.41) 59 (+2) 439 (+37) 0.25 (-0.02) 0.00 (+0.00)
GET list_vulnerabilities_paginated 75 (-5) 0 189.75 (+0.08) 118 (+75) 253 (-71) 0.25 (-0.02) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 75 (-5) 0 38.69 (-24.13) 9 (-1) 159 (-63) 0.25 (-0.02) 0.00 (+0.00)
GET search_advisory 75 (-5) 0 975.45 (-115.75) 158 (-40) 2207 (-67) 0.25 (-0.02) 0.00 (+0.00)
GET search_exact_purl 75 (-5) 0 8.63 (+1.63) 2 (-2) 51 (+8) 0.25 (-0.02) 0.00 (+0.00)
GET search_purls 80 (-5) 0 11144.92 (+1595.82) 8128 (+3703) 23403 (+9089) 0.27 (-0.02) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 75 (-5) 0 475.35 (-55.23) 202 (-4) 806 (-373) 0.25 (-0.02) 0.00 (+0.00)
Aggregated 1655 (-110) 0 925.77 (+49.71) 1 (0) 23403 (+9089) 5.52 (-0.37) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 5 (-2) 6 (-3) 9 (-2) 11 (-4) 43 (+3) 46 (-5) 55 (+3) 67 (0)
GET get_analysis_latest_cpe 99 (-31) 120 (-30) 180 (+10) 190 (0) 230 (+20) 280 (+20) 290 (+10) 295 (-5)
GET get_analysis_status 2 (0) 2 (-1) 3 (-1) 4 (-1) 6 (-2) 8 (-32) 46 (-3) 52 (-9)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 800 (0) 900 (0) 900 (0) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET get_sbom[sha256:720e4451…a939656247164447] 600 (+100) 700 (+100) 700 (-100) 800 (-200) 1,000 (0) 1,915 (+144) 1,915 (+144) 1,915 (+144)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (+100) 900 (+100) 900 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 490 (+40) 500 (+30) 600 (+110) 600 (+100) 800 (+200) 800 (+100) 900 (+200) 1,000 (+229)
GET list_advisory_paginated 430 (+30) 460 (+40) 480 (+30) 490 (+20) 500 (+10) 500 (0) 500 (0) 553 (-29)
GET list_importer 2 (-1) 2 (-1) 3 (-1) 3 (-2) 3 (-4) 4 (-7) 14 (-26) 16 (-27)
GET list_organizations 6 (+2) 8 (+3) 9 (+4) 10 (+1) 13 (-1) 16 (-5) 21 (-18) 40 (-7)
GET list_packages 450 (+50) 470 (+50) 500 (+40) 700 (+210) 900 (+400) 900 (+200) 1,000 (+203) 1,711 (+914)
GET list_packages_paginated 420 (+40) 450 (+50) 480 (+70) 500 (+40) 500 (0) 600 (0) 900 (+300) 900 (+300)
GET list_products 6 (0) 7 (+1) 7 (0) 8 (0) 10 (+1) 50 (+41) 52 (0) 52 (-2)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000)
GET list_sboms_paginated 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,983 (-1,017) 1,983 (-1,017) 1,983 (-2,017) 1,983 (-2,017)
GET list_vulnerabilities 310 (+90) 330 (+90) 350 (+90) 390 (+100) 410 (+110) 410 (+90) 430 (+70) 439 (+39)
GET list_vulnerabilities_paginated 190 (+10) 190 (0) 200 (0) 210 (-30) 230 (-40) 240 (-40) 250 (-70) 250 (-70)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 21 (-37) 24 (-49) 54 (-30) 65 (-34) 91 (-19) 110 (-30) 140 (-40) 159 (-61)
GET search_advisory 700 (-300) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 6 (0) 6 (-1) 7 (0) 7 (-1) 9 (0) 38 (+27) 51 (+38) 51 (+8)
GET search_purls 10,000 (0) 10,000 (0) 10,000 (0) 11,000 (0) 16,000 (+5,000) 23,000 (+11,000) 23,000 (+11,000) 23,000 (+9,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 470 (0) 500 (0) 500 (-100) 600 (-100) 700 (-100) 800 (-100) 800 (-200) 800 (-200)
Aggregated 380 (+60) 460 (+30) 600 (0) 900 (0) 1,000 (0) 2,000 (-1,000) 11,000 (0) 23,000 (+9,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 75 [200]
GET get_analysis_latest_cpe 75 [200]
GET get_analysis_status 75 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 75 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 75 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 75 [200]
GET list_advisory 75 [200]
GET list_advisory_paginated 75 [200]
GET list_importer 75 [200]
GET list_organizations 75 [200]
GET list_packages 75 [200]
GET list_packages_paginated 75 [200]
GET list_products 75 [200]
GET list_sboms 75 [200]
GET list_sboms_paginated 75 [200]
GET list_vulnerabilities 75 [200]
GET list_vulnerabilities_paginated 75 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 75 [200]
GET search_advisory 75 [200]
GET search_exact_purl 75 [200]
GET search_purls 80 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 75 [200]
Aggregated 1,655 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 75 (-5) 0 (0) 18.03 (+2.90) 11 (+3) 38 (+5) 0.25 (-0.02) 0.00 (+0.00)
1.1 list_organizations 75 (-5) 0 (0) 7.59 (+0.51) 1 (-1) 40 (-7) 0.25 (-0.02) 0.00 (+0.00)
1.2 list_advisory 75 (-5) 0 (0) 550.60 (+84.54) 395 (+119) 1240 (+469) 0.25 (-0.02) 0.00 (+0.00)
1.3 list_advisory_paginated 75 (-5) 0 (0) 422.12 (+22.48) 154 (-24) 553 (-29) 0.25 (-0.02) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 75 (-5) 0 (0) 11.57 (-1.46) 3 (0) 67 (0) 0.25 (-0.02) 0.00 (+0.00)
1.5 search_advisory 75 (-5) 0 (0) 975.49 (-115.77) 158 (-40) 2207 (-67) 0.25 (-0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 75 (-5) 0 (0) 310.85 (+72.45) 60 (+3) 439 (+37) 0.25 (-0.02) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 75 (-5) 0 (0) 189.76 (-0.00) 118 (+75) 253 (-72) 0.25 (-0.02) 0.00 (+0.00)
1.8 list_importer 75 (-5) 0 (0) 2.40 (-1.85) 1 (0) 16 (-27) 0.25 (-0.02) 0.00 (+0.00)
1.9 list_packages 75 (-5) 0 (0) 554.43 (+141.94) 374 (+268) 1711 (+914) 0.25 (-0.02) 0.00 (+0.00)
1.10 list_packages_paginated 75 (-5) 0 (0) 433.12 (+63.54) 85 (-46) 904 (+304) 0.25 (-0.02) 0.00 (+0.00)
1.11 search_purls 80 (-5) 0 (0) 11144.97 (+1595.81) 8129 (+3704) 23403 (+9089) 0.27 (-0.02) 0.00 (+0.00)
1.12 search_exact_purl 75 (-5) 0 (0) 8.67 (+1.64) 2 (-2) 51 (+8) 0.25 (-0.02) 0.00 (+0.00)
1.13 list_products 75 (-5) 0 (0) 9.51 (+2.27) 2 (-2) 52 (-2) 0.25 (-0.02) 0.00 (+0.00)
1.14 list_sboms 75 (-5) 0 (0) 958.08 (-254.68) 597 (+24) 1389 (-638) 0.25 (-0.02) 0.00 (+0.00)
1.15 list_sboms_paginated 75 (-5) 0 (0) 1092.01 (-606.47) 451 (+13) 1983 (-2115) 0.25 (-0.02) 0.00 (+0.00)
1.16 get_analysis_status 75 (-5) 0 (0) 4.81 (-1.40) 1 (0) 52 (-9) 0.25 (-0.02) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 75 (-5) 0 (0) 126.47 (-17.66) 32 (-8) 295 (-5) 0.25 (-0.02) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 75 (-5) 0 (0) 668.36 (-63.79) 120 (-93) 1915 (+144) 0.25 (-0.02) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 75 (-5) 0 (0) 38.73 (-24.17) 9 (-1) 159 (-63) 0.25 (-0.02) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 75 (-5) 0 (0) 832.79 (+54.25) 333 (-107) 1206 (-268) 0.25 (-0.02) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 75 (-5) 0 (0) 475.39 (-55.29) 202 (-4) 806 (-373) 0.25 (-0.02) 0.00 (+0.00)
1.22 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 75 (-5) 0 (0) 869.29 (+57.18) 507 (+97) 1309 (-129) 0.25 (-0.02) 0.00 (+0.00)
Aggregated 1,730 (-115) 0 (0) 885.64 (+47.56) 1 (0) 23403 (+9089) 5.77 (-0.38) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 75 (-5) 19193.59 (+826.79) 12731 (+3858) 34601 (+12752) 0.25 (-0.02) 15.00 (-1.00)
Aggregated 5 (0) 75 (-5) 19193.59 (+826.79) 12731 (+3858) 34601 (+12752) 0.25 (-0.02) 15.00 (-1.00)

User Metrics