Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-26 02:18:4425-09-26 02:18:4900:00:050 → 5
Maintaining25-09-26 02:18:4925-09-26 02:23:4900:05:005
Decreasing25-09-26 02:23:4925-09-26 02:23:4900:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 80 (+5) 0 11.48 (-0.07) 2 (-1) 67 (0) 0.27 (+0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 83 (+8) 0 178.93 (+52.49) 37 (+5) 491 (+196) 0.28 (+0.03) 0.00 (+0.00)
GET get_analysis_status 83 (+8) 0 8.10 (+3.35) 1 (0) 56 (+4) 0.28 (+0.03) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 80 (+5) 0 954.17 (+84.95) 238 (-269) 1601 (+292) 0.27 (+0.02) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 83 (+8) 0 1310.49 (+642.23) 301 (+181) 3307 (+1392) 0.28 (+0.03) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 83 (+8) 0 826.60 (-6.12) 280 (-53) 1372 (+166) 0.28 (+0.03) 0.00 (+0.00)
GET list_advisory 80 (+5) 0 440.81 (-109.73) 98 (-297) 737 (-503) 0.27 (+0.02) 0.00 (+0.00)
GET list_advisory_paginated 80 (+5) 0 376.92 (-45.15) 94 (-60) 534 (-19) 0.27 (+0.02) 0.00 (+0.00)
GET list_importer 80 (+5) 0 2.85 (+0.49) 1 (0) 51 (+35) 0.27 (+0.02) 0.00 (+0.00)
GET list_organizations 80 (+5) 0 8.62 (+1.21) 1 (0) 47 (+7) 0.27 (+0.02) 0.00 (+0.00)
GET list_packages 80 (+5) 0 427.84 (-126.52) 80 (-294) 949 (-762) 0.27 (+0.02) 0.00 (+0.00)
GET list_packages_paginated 80 (+5) 0 361.44 (-71.64) 100 (+15) 890 (-14) 0.27 (+0.02) 0.00 (+0.00)
GET list_products 85 (+10) 0 7.32 (-2.11) 2 (0) 52 (0) 0.28 (+0.03) 0.00 (+0.00)
GET list_sboms 85 (+10) 0 1346.44 (+388.42) 537 (-60) 2288 (+899) 0.28 (+0.03) 0.00 (+0.00)
GET list_sboms_paginated 85 (+10) 0 3257.01 (+2165.05) 473 (+22) 6688 (+4705) 0.28 (+0.03) 0.00 (+0.00)
GET list_vulnerabilities 80 (+5) 0 293.45 (-17.31) 46 (-13) 602 (+163) 0.27 (+0.02) 0.00 (+0.00)
GET list_vulnerabilities_paginated 80 (+5) 0 186.48 (-3.27) 38 (-80) 380 (+127) 0.27 (+0.02) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 83 (+8) 0 73.72 (+35.03) 8 (-1) 330 (+171) 0.28 (+0.03) 0.00 (+0.00)
GET search_advisory 80 (+5) 0 739.64 (-235.82) 123 (-35) 2102 (-105) 0.27 (+0.02) 0.00 (+0.00)
GET search_exact_purl 85 (+10) 0 8.96 (+0.34) 1 (-1) 69 (+18) 0.28 (+0.03) 0.00 (+0.00)
GET search_purls 85 (+5) 0 6622.47 (-4522.45) 2430 (-5698) 9519 (-13884) 0.28 (+0.02) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 80 (+5) 0 666.75 (+191.40) 147 (-55) 1449 (+643) 0.27 (+0.02) 0.00 (+0.00)
Aggregated 1800 (+145) 0 840.14 (-85.64) 1 (0) 9519 (-13884) 6.00 (+0.48) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (+1) 6 (0) 7 (-2) 11 (0) 36 (-7) 49 (+3) 58 (+3) 67 (0)
GET get_analysis_latest_cpe 180 (+81) 190 (+70) 210 (+30) 220 (+30) 300 (+70) 380 (+100) 470 (+180) 490 (+195)
GET get_analysis_status 3 (+1) 3 (+1) 4 (+1) 5 (+1) 46 (+40) 50 (+42) 55 (+9) 56 (+4)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 900 (+100) 1,000 (+100) 1,000 (+100) 1,000 (+100) 1,000 (0) 1,601 (+601) 1,601 (+601) 1,601 (+601)
GET get_sbom[sha256:720e4451…a939656247164447] 900 (+300) 1,000 (+300) 2,000 (+1,300) 2,000 (+1,200) 3,000 (+2,000) 3,000 (+1,085) 3,000 (+1,085) 3,000 (+1,085)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (-100) 900 (0) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 430 (-60) 450 (-50) 490 (-110) 500 (-100) 600 (-200) 600 (-200) 700 (-200) 700 (-300)
GET list_advisory_paginated 390 (-40) 410 (-50) 430 (-50) 460 (-30) 500 (0) 500 (0) 500 (0) 500 (-53)
GET list_importer 2 (0) 2 (0) 2 (-1) 3 (0) 4 (+1) 6 (+2) 10 (-4) 51 (+35)
GET list_organizations 4 (-2) 4 (-4) 6 (-3) 8 (-2) 38 (+25) 42 (+26) 44 (+23) 47 (+7)
GET list_packages 430 (-20) 430 (-40) 460 (-40) 480 (-220) 800 (-100) 900 (0) 900 (-100) 900 (-811)
GET list_packages_paginated 380 (-40) 400 (-50) 420 (-60) 470 (-30) 490 (-10) 800 (+200) 890 (-10) 890 (-10)
GET list_products 5 (-1) 6 (-1) 8 (+1) 9 (+1) 12 (+2) 15 (-35) 51 (-1) 52 (0)
GET list_sboms 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000)
GET list_sboms_paginated 3,000 (+2,000) 3,000 (+2,000) 4,000 (+3,000) 5,000 (+4,000) 5,000 (+3,017) 6,000 (+4,017) 6,688 (+4,705) 6,688 (+4,705)
GET list_vulnerabilities 330 (+20) 350 (+20) 370 (+20) 390 (0) 400 (-10) 440 (+30) 600 (+170) 600 (+161)
GET list_vulnerabilities_paginated 190 (0) 200 (+10) 200 (0) 220 (+10) 260 (+30) 270 (+30) 370 (+120) 380 (+130)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 72 (+51) 80 (+56) 84 (+30) 98 (+33) 150 (+59) 180 (+70) 190 (+50) 330 (+171)
GET search_advisory 600 (-100) 600 (-400) 700 (-300) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 4 (-2) 5 (-1) 6 (-1) 8 (+1) 16 (+7) 53 (+15) 66 (+15) 69 (+18)
GET search_purls 7,000 (-3,000) 7,000 (-3,000) 7,000 (-3,000) 7,000 (-4,000) 8,000 (-8,000) 9,000 (-14,000) 9,519 (-13,481) 9,519 (-13,481)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+130) 700 (+200) 800 (+300) 900 (+300) 1,000 (+300) 1,000 (+200) 1,000 (+200) 1,000 (+200)
Aggregated 340 (-40) 440 (-20) 600 (0) 1,000 (+100) 2,000 (+1,000) 5,000 (+3,000) 7,000 (-4,000) 9,519 (-13,481)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 80 [200]
GET get_analysis_latest_cpe 83 [200]
GET get_analysis_status 83 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 80 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 83 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 83 [200]
GET list_advisory 80 [200]
GET list_advisory_paginated 80 [200]
GET list_importer 80 [200]
GET list_organizations 80 [200]
GET list_packages 80 [200]
GET list_packages_paginated 80 [200]
GET list_products 85 [200]
GET list_sboms 85 [200]
GET list_sboms_paginated 85 [200]
GET list_vulnerabilities 80 [200]
GET list_vulnerabilities_paginated 80 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 83 [200]
GET search_advisory 80 [200]
GET search_exact_purl 85 [200]
GET search_purls 85 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 80 [200]
Aggregated 1,800 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 80 (+5) 0 (0) 13.86 (-4.16) 7 (-4) 21 (-17) 0.27 (+0.02) 0.00 (+0.00)
1.1 list_organizations 80 (+5) 0 (0) 8.84 (+1.25) 1 (0) 47 (+7) 0.27 (+0.02) 0.00 (+0.00)
1.2 list_advisory 80 (+5) 0 (0) 440.84 (-109.76) 98 (-297) 737 (-503) 0.27 (+0.02) 0.00 (+0.00)
1.3 list_advisory_paginated 80 (+5) 0 (0) 376.96 (-45.16) 94 (-60) 534 (-19) 0.27 (+0.02) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 80 (+5) 0 (0) 11.51 (-0.06) 2 (-1) 67 (0) 0.27 (+0.02) 0.00 (+0.00)
1.5 search_advisory 80 (+5) 0 (0) 739.69 (-235.81) 123 (-35) 2102 (-105) 0.27 (+0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 80 (+5) 0 (0) 293.50 (-17.35) 46 (-14) 602 (+163) 0.27 (+0.02) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 80 (+5) 0 (0) 186.52 (-3.24) 38 (-80) 380 (+127) 0.27 (+0.02) 0.00 (+0.00)
1.8 list_importer 80 (+5) 0 (0) 2.86 (+0.46) 1 (0) 51 (+35) 0.27 (+0.02) 0.00 (+0.00)
1.9 list_packages 80 (+5) 0 (0) 427.85 (-126.58) 80 (-294) 949 (-762) 0.27 (+0.02) 0.00 (+0.00)
1.10 list_packages_paginated 80 (+5) 0 (0) 361.52 (-71.60) 100 (+15) 890 (-14) 0.27 (+0.02) 0.00 (+0.00)
1.11 search_purls 85 (+5) 0 (0) 6622.53 (-4522.45) 2430 (-5699) 9519 (-13884) 0.28 (+0.02) 0.00 (+0.00)
1.12 search_exact_purl 85 (+10) 0 (0) 9.02 (+0.36) 2 (0) 69 (+18) 0.28 (+0.03) 0.00 (+0.00)
1.13 list_products 85 (+10) 0 (0) 7.35 (-2.15) 2 (0) 52 (0) 0.28 (+0.03) 0.00 (+0.00)
1.14 list_sboms 85 (+10) 0 (0) 1346.45 (+388.37) 537 (-60) 2288 (+899) 0.28 (+0.03) 0.00 (+0.00)
1.15 list_sboms_paginated 85 (+10) 0 (0) 3257.09 (+2165.08) 473 (+22) 6688 (+4705) 0.28 (+0.03) 0.00 (+0.00)
1.16 get_analysis_status 83 (+8) 0 (0) 8.14 (+3.33) 1 (0) 56 (+4) 0.28 (+0.03) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 83 (+8) 0 (0) 178.96 (+52.50) 37 (+5) 491 (+196) 0.28 (+0.03) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 83 (+8) 0 (0) 1310.55 (+642.19) 301 (+181) 3307 (+1392) 0.28 (+0.03) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 83 (+8) 0 (0) 73.76 (+35.03) 8 (-1) 330 (+171) 0.28 (+0.03) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 83 (+8) 0 (0) 826.64 (-6.15) 280 (-53) 1372 (+166) 0.28 (+0.03) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 80 (+5) 0 (0) 666.86 (+191.48) 147 (-55) 1449 (+643) 0.27 (+0.02) 0.00 (+0.00)
1.22 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 80 (+5) 0 (0) 954.29 (+84.99) 238 (-269) 1601 (+292) 0.27 (+0.02) 0.00 (+0.00)
Aggregated 1,880 (+150) 0 (0) 804.39 (-81.25) 1 (0) 9519 (-13884) 6.27 (+0.50) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 80 (+5) 17541.20 (-1652.39) 7140 (-5591) 24370 (-10231) 0.27 (+0.02) 16.00 (+1.00)
Aggregated 5 (0) 80 (+5) 17541.20 (-1652.39) 7140 (-5591) 24370 (-10231) 0.27 (+0.02) 16.00 (+1.00)

User Metrics