Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-10-10 06:18:5325-10-10 06:18:5800:00:050 → 5
Maintaining25-10-10 06:18:5825-10-10 06:23:5800:05:005
Decreasing25-10-10 06:23:5825-10-10 06:24:0900:00:110 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 50 (-19) 0 7.86 (-1.68) 3 (0) 62 (+11) 0.17 (-0.06) 0.00 (+0.00)
GET get_analysis_latest_cpe 50 (-20) 0 147.16 (-1.14) 31 (-4) 510 (+239) 0.17 (-0.07) 0.00 (+0.00)
GET get_analysis_status 50 (-20) 0 5.08 (-0.36) 1 (0) 55 (-3) 0.17 (-0.07) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 50 (-19) 0 676.24 (+15.82) 91 (-14) 1490 (+190) 0.17 (-0.06) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 50 (-20) 0 1041.52 (+66.02) 191 (-133) 4308 (+545) 0.17 (-0.07) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 (-20) 0 7701.16 (-258.20) 5229 (-388) 11593 (-748) 0.17 (-0.07) 0.00 (+0.00)
GET list_advisory 50 (-19) 0 474.74 (+12.91) 95 (+7) 1174 (+285) 0.17 (-0.06) 0.00 (+0.00)
GET list_advisory_paginated 50 (-19) 0 359.32 (-29.96) 84 (-1) 638 (+55) 0.17 (-0.06) 0.00 (+0.00)
GET list_importer 50 (-15) 0 1.98 (-1.53) 1 (0) 5 (-44) 0.17 (-0.05) 0.00 (+0.00)
GET list_organizations 50 (-19) 0 9.26 (+2.39) 1 (0) 49 (+10) 0.17 (-0.06) 0.00 (+0.00)
GET list_packages 50 (-15) 0 372.66 (+12.72) 56 (-3) 538 (-143) 0.17 (-0.05) 0.00 (+0.00)
GET list_packages_paginated 50 (-15) 0 350.38 (-7.93) 89 (-6) 501 (-66) 0.17 (-0.05) 0.00 (+0.00)
GET list_products 50 (-20) 0 6.16 (-1.67) 4 (+1) 10 (-38) 0.17 (-0.07) 0.00 (+0.00)
GET list_sboms 50 (-20) 0 968.54 (+102.04) 661 (+67) 1430 (+137) 0.17 (-0.07) 0.00 (+0.00)
GET list_sboms_paginated 50 (-20) 0 1186.22 (-95.61) 470 (-15) 2902 (+185) 0.17 (-0.07) 0.00 (+0.00)
GET list_vulnerabilities 50 (-15) 0 276.50 (+67.65) 38 (-3) 533 (+201) 0.17 (-0.05) 0.00 (+0.00)
GET list_vulnerabilities_paginated 50 (-15) 0 170.28 (+15.88) 27 (-2) 265 (0) 0.17 (-0.05) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 (-20) 0 54.96 (-30.94) 15 (-1) 155 (-125) 0.17 (-0.07) 0.00 (+0.00)
GET search_advisory 50 (-19) 0 858.66 (+80.79) 125 (-13) 1913 (-99) 0.17 (-0.06) 0.00 (+0.00)
GET search_exact_purl 50 (-20) 0 6.14 (-7.00) 3 (0) 9 (-45) 0.17 (-0.07) 0.00 (+0.00)
GET search_purls 55 (-15) 0 14373.13 (+8104.54) 7325 (+2585) 17551 (+8776) 0.18 (-0.05) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 (-19) 0 744.18 (+20.37) 148 (-13) 1807 (+419) 0.17 (-0.06) 0.00 (+0.00)
Aggregated 1105 (-403) 0 1413.10 (+410.16) 1 (0) 17551 (+5210) 3.68 (-1.34) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 4 (-2) 5 (-1) 6 (-2) 7 (-2) 13 (-2) 20 (-24) 62 (+14) 62 (+11)
GET get_analysis_latest_cpe 110 (-50) 150 (-20) 170 (-20) 200 (0) 260 (+50) 370 (+140) 500 (+230) 500 (+230)
GET get_analysis_status 2 (0) 3 (0) 3 (0) 5 (+1) 6 (0) 38 (-6) 55 (+1) 55 (-3)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 700 (+100) 800 (+100) 800 (0) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET get_sbom[sha256:720e4451…a939656247164447] 500 (-200) 600 (-200) 700 (-200) 2,000 (+1,000) 3,000 (+1,000) 3,000 (0) 4,000 (+1,000) 4,000 (+237)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 7,000 (0) 7,000 (-1,000) 8,000 (0) 8,000 (-1,000) 10,000 (-1,000) 11,000 (-1,000) 11,593 (-407) 11,593 (-407)
GET list_advisory 490 (-10) 500 (0) 500 (-100) 600 (0) 600 (0) 700 (+100) 1,000 (+200) 1,000 (+111)
GET list_advisory_paginated 400 (-40) 410 (-40) 430 (-50) 480 (-10) 490 (-10) 500 (0) 600 (+17) 600 (+17)
GET list_importer 2 (0) 2 (0) 2 (-1) 3 (-1) 3 (-2) 4 (-1) 5 (-39) 5 (-44)
GET list_organizations 4 (+1) 5 (0) 6 (0) 8 (-2) 33 (+16) 41 (+14) 49 (+11) 49 (+10)
GET list_packages 440 (+40) 450 (+40) 450 (+30) 470 (0) 480 (-20) 500 (-100) 500 (-100) 500 (-181)
GET list_packages_paginated 400 (+10) 410 (-10) 420 (-10) 430 (-40) 480 (-10) 480 (-20) 500 (-67) 500 (-67)
GET list_products 6 (0) 6 (0) 7 (0) 8 (0) 9 (-1) 10 (-3) 10 (-36) 10 (-38)
GET list_sboms 900 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_sboms_paginated 1,000 (0) 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,902 (+902) 2,902 (+185)
GET list_vulnerabilities 300 (+80) 320 (+80) 330 (+70) 360 (+70) 420 (+110) 430 (+110) 500 (+170) 500 (+170)
GET list_vulnerabilities_paginated 190 (+20) 190 (+20) 200 (+10) 210 (+20) 240 (+30) 260 (+20) 265 (+5) 265 (0)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 39 (-39) 49 (-33) 82 (-9) 92 (-8) 100 (-100) 130 (-70) 155 (-75) 155 (-125)
GET search_advisory 700 (0) 900 (+200) 1,000 (+200) 1,000 (0) 1,913 (+913) 1,913 (-87) 1,913 (-87) 1,913 (-87)
GET search_exact_purl 6 (0) 6 (0) 6 (-1) 7 (-3) 7 (-42) 8 (-43) 9 (-44) 9 (-45)
GET search_purls 16,000 (+10,000) 16,000 (+10,000) 17,000 (+11,000) 17,000 (+10,000) 17,000 (+10,000) 17,000 (+9,000) 17,000 (+9,000) 17,551 (+8,776)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (-100) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,807 (+807) 1,807 (+807)
Aggregated 310 (+20) 440 (-10) 600 (0) 1,000 (+100) 3,000 (+1,000) 9,000 (+2,000) 17,000 (+8,000) 17,551 (+5,551)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 50 [200]
GET get_analysis_latest_cpe 50 [200]
GET get_analysis_status 50 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 50 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 50 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 [200]
GET list_advisory 50 [200]
GET list_advisory_paginated 50 [200]
GET list_importer 50 [200]
GET list_organizations 50 [200]
GET list_packages 50 [200]
GET list_packages_paginated 50 [200]
GET list_products 50 [200]
GET list_sboms 50 [200]
GET list_sboms_paginated 50 [200]
GET list_vulnerabilities 50 [200]
GET list_vulnerabilities_paginated 50 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 [200]
GET search_advisory 50 [200]
GET search_exact_purl 50 [200]
GET search_purls 55 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 [200]
Aggregated 1,105 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 50 (-19) 0 (0) 13.98 (-1.37) 6 (-2) 23 (-11) 0.17 (-0.06) 0.00 (+0.00)
1.1 list_organizations 50 (-19) 0 (0) 9.36 (+2.23) 1 (0) 50 (+11) 0.17 (-0.06) 0.00 (+0.00)
1.2 list_advisory 50 (-19) 0 (0) 474.74 (+12.88) 95 (+7) 1174 (+285) 0.17 (-0.06) 0.00 (+0.00)
1.3 list_advisory_paginated 50 (-19) 0 (0) 359.40 (-29.95) 84 (-1) 639 (+55) 0.17 (-0.06) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 50 (-19) 0 (0) 7.86 (-1.71) 3 (0) 62 (+11) 0.17 (-0.06) 0.00 (+0.00)
1.5 search_advisory 50 (-19) 0 (0) 858.72 (+80.72) 125 (-13) 1913 (-99) 0.17 (-0.06) 0.00 (+0.00)
1.6 list_vulnerabilities 50 (-15) 0 (0) 276.54 (+67.57) 38 (-3) 533 (+201) 0.17 (-0.05) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 50 (-15) 0 (0) 170.32 (+15.89) 27 (-2) 265 (0) 0.17 (-0.05) 0.00 (+0.00)
1.8 list_importer 50 (-15) 0 (0) 2.00 (-1.58) 1 (0) 5 (-44) 0.17 (-0.05) 0.00 (+0.00)
1.9 list_packages 50 (-15) 0 (0) 372.70 (+12.70) 56 (-3) 538 (-143) 0.17 (-0.05) 0.00 (+0.00)
1.10 list_packages_paginated 50 (-15) 0 (0) 350.48 (-7.94) 89 (-6) 501 (-66) 0.17 (-0.05) 0.00 (+0.00)
1.11 search_purls 55 (-15) 0 (0) 14373.18 (+8104.52) 7325 (+2584) 17551 (+8776) 0.18 (-0.05) 0.00 (+0.00)
1.12 search_exact_purl 50 (-20) 0 (0) 6.18 (-7.02) 3 (0) 9 (-45) 0.17 (-0.07) 0.00 (+0.00)
1.13 list_products 50 (-20) 0 (0) 6.20 (-1.64) 4 (+1) 11 (-37) 0.17 (-0.07) 0.00 (+0.00)
1.14 list_sboms 50 (-20) 0 (0) 968.60 (+102.03) 661 (+67) 1430 (+137) 0.17 (-0.07) 0.00 (+0.00)
1.15 list_sboms_paginated 50 (-20) 0 (0) 1186.26 (-95.58) 470 (-15) 2902 (+185) 0.17 (-0.07) 0.00 (+0.00)
1.16 get_analysis_status 50 (-20) 0 (0) 5.10 (-0.39) 1 (0) 55 (-3) 0.17 (-0.07) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 50 (-20) 0 (0) 147.18 (-1.21) 31 (-4) 510 (+239) 0.17 (-0.07) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 50 (-20) 0 (0) 1041.68 (+66.14) 191 (-133) 4309 (+546) 0.17 (-0.07) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 (-20) 0 (0) 54.98 (-30.95) 15 (-1) 155 (-125) 0.17 (-0.07) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 50 (-20) 0 (0) 7701.24 (-258.30) 5229 (-389) 11593 (-748) 0.17 (-0.07) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 50 (-19) 0 (0) 744.34 (+20.44) 148 (-13) 1808 (+420) 0.17 (-0.06) 0.00 (+0.00)
1.22 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 50 (-19) 0 (0) 676.28 (+15.80) 91 (-14) 1490 (+190) 0.17 (-0.06) 0.00 (+0.00)
Aggregated 1,155 (-422) 0 (0) 1351.92 (+392.87) 1 (0) 17551 (+5210) 3.85 (-1.41) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 50 (-19) 29486.10 (+7949.03) 19177 (+2511) 37589 (+11524) 0.17 (-0.06) 10.00 (-3.80)
Aggregated 5 (0) 50 (-19) 29486.10 (+7949.03) 19177 (+2511) 37589 (+11524) 0.17 (-0.06) 10.00 (-3.80)

User Metrics