Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-10-11 02:17:2725-10-11 02:17:3200:00:050 → 5
Maintaining25-10-11 02:17:3225-10-11 02:22:3200:05:005
Decreasing25-10-11 02:22:3225-10-11 02:22:3200:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 70 (+20) 0 9.19 (+1.33) 3 (0) 61 (-1) 0.23 (+0.07) 0.00 (+0.00)
GET get_analysis_latest_cpe 75 (+25) 0 138.47 (-8.69) 31 (0) 516 (+6) 0.25 (+0.08) 0.00 (+0.00)
GET get_analysis_status 75 (+25) 0 10.13 (+5.05) 1 (0) 61 (+6) 0.25 (+0.08) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 70 (+20) 0 763.97 (+87.73) 90 (-1) 2000 (+510) 0.23 (+0.07) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 75 (+25) 0 1015.08 (-26.44) 183 (-8) 3762 (-546) 0.25 (+0.08) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 (+20) 0 7870.40 (+169.24) 6103 (+874) 11157 (-436) 0.23 (+0.07) 0.00 (+0.00)
GET list_advisory 70 (+20) 0 489.56 (+14.82) 78 (-17) 818 (-356) 0.23 (+0.07) 0.00 (+0.00)
GET list_advisory_paginated 70 (+20) 0 390.20 (+30.88) 100 (+16) 694 (+56) 0.23 (+0.07) 0.00 (+0.00)
GET list_importer 70 (+20) 0 4.09 (+2.11) 1 (0) 48 (+43) 0.23 (+0.07) 0.00 (+0.00)
GET list_organizations 70 (+20) 0 8.67 (-0.59) 1 (0) 47 (-2) 0.23 (+0.07) 0.00 (+0.00)
GET list_packages 70 (+20) 0 386.69 (+14.03) 54 (-2) 865 (+327) 0.23 (+0.07) 0.00 (+0.00)
GET list_packages_paginated 70 (+20) 0 328.74 (-21.64) 60 (-29) 565 (+64) 0.23 (+0.07) 0.00 (+0.00)
GET list_products 75 (+25) 0 5.59 (-0.57) 3 (-1) 13 (+3) 0.25 (+0.08) 0.00 (+0.00)
GET list_sboms 75 (+25) 0 947.27 (-21.27) 613 (-48) 1299 (-131) 0.25 (+0.08) 0.00 (+0.00)
GET list_sboms_paginated 75 (+25) 0 1309.88 (+123.66) 531 (+61) 3008 (+106) 0.25 (+0.08) 0.00 (+0.00)
GET list_vulnerabilities 70 (+20) 0 275.24 (-1.26) 37 (-1) 514 (-19) 0.23 (+0.07) 0.00 (+0.00)
GET list_vulnerabilities_paginated 70 (+20) 0 172.54 (+2.26) 28 (+1) 338 (+73) 0.23 (+0.07) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (+20) 0 62.93 (+7.97) 16 (+1) 290 (+135) 0.23 (+0.07) 0.00 (+0.00)
GET search_advisory 70 (+20) 0 766.31 (-92.35) 124 (-1) 1926 (+13) 0.23 (+0.07) 0.00 (+0.00)
GET search_exact_purl 75 (+25) 0 4.55 (-1.59) 2 (-1) 10 (+1) 0.25 (+0.08) 0.00 (+0.00)
GET search_purls 75 (+20) 0 5227.75 (-9145.38) 3325 (-4000) 7152 (-10399) 0.25 (+0.07) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 (+20) 0 778.67 (+34.49) 150 (+2) 1494 (-313) 0.23 (+0.07) 0.00 (+0.00)
Aggregated 1580 (+475) 0 956.27 (-456.83) 1 (0) 11157 (-6394) 5.27 (+1.58) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 4 (0) 7 (+2) 8 (+2) 9 (+2) 21 (+8) 38 (+18) 56 (-6) 61 (-1)
GET get_analysis_latest_cpe 110 (0) 130 (-20) 170 (0) 210 (+10) 270 (+10) 290 (-80) 360 (-140) 500 (0)
GET get_analysis_status 2 (0) 3 (0) 4 (+1) 6 (+1) 49 (+43) 53 (+15) 60 (+5) 61 (+6)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 800 (+100) 800 (0) 900 (+100) 1,000 (+100) 1,000 (0) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000)
GET get_sbom[sha256:720e4451…a939656247164447] 700 (+200) 800 (+200) 900 (+200) 1,000 (-1,000) 3,000 (0) 3,000 (0) 3,762 (-238) 3,762 (-238)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 8,000 (+1,000) 8,000 (+1,000) 8,000 (0) 8,000 (0) 10,000 (0) 11,000 (0) 11,000 (-593) 11,000 (-593)
GET list_advisory 500 (+10) 500 (0) 500 (0) 600 (0) 600 (0) 700 (0) 800 (-200) 800 (-200)
GET list_advisory_paginated 410 (+10) 430 (+20) 460 (+30) 470 (-10) 490 (0) 500 (0) 694 (+94) 694 (+94)
GET list_importer 2 (0) 2 (0) 3 (+1) 3 (0) 5 (+2) 25 (+21) 27 (+22) 48 (+43)
GET list_organizations 4 (0) 5 (0) 8 (+2) 11 (+3) 23 (-10) 39 (-2) 43 (-6) 47 (-2)
GET list_packages 410 (-30) 420 (-30) 440 (-10) 470 (0) 500 (+20) 700 (+200) 865 (+365) 865 (+365)
GET list_packages_paginated 380 (-20) 390 (-20) 420 (0) 430 (0) 480 (0) 500 (+20) 500 (0) 565 (+65)
GET list_products 5 (-1) 6 (0) 6 (-1) 7 (-1) 8 (-1) 9 (-1) 12 (+2) 13 (+3)
GET list_sboms 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_sboms_paginated 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 3,000 (+98) 3,000 (+98)
GET list_vulnerabilities 320 (+20) 330 (+10) 350 (+20) 360 (0) 360 (-60) 370 (-60) 420 (-80) 500 (0)
GET list_vulnerabilities_paginated 200 (+10) 210 (+20) 210 (+10) 220 (+10) 230 (-10) 230 (-30) 280 (+15) 338 (+73)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 62 (+23) 72 (+23) 78 (-4) 88 (-4) 110 (+10) 170 (+40) 210 (+55) 290 (+135)
GET search_advisory 700 (0) 800 (-100) 1,000 (0) 1,000 (0) 1,000 (-913) 1,926 (+13) 1,926 (+13) 1,926 (+13)
GET search_exact_purl 4 (-2) 5 (-1) 5 (-1) 5 (-2) 6 (-1) 7 (-1) 9 (0) 10 (+1)
GET search_purls 5,000 (-11,000) 5,000 (-11,000) 6,000 (-11,000) 6,000 (-11,000) 6,000 (-11,000) 6,000 (-11,000) 7,000 (-10,000) 7,000 (-10,551)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 800 (+100) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-807) 1,000 (-807)
Aggregated 330 (+20) 440 (0) 600 (0) 1,000 (0) 2,000 (-1,000) 6,000 (-3,000) 8,000 (-9,000) 11,000 (-6,551)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 70 [200]
GET get_analysis_latest_cpe 75 [200]
GET get_analysis_status 75 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 70 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 75 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 [200]
GET list_advisory 70 [200]
GET list_advisory_paginated 70 [200]
GET list_importer 70 [200]
GET list_organizations 70 [200]
GET list_packages 70 [200]
GET list_packages_paginated 70 [200]
GET list_products 75 [200]
GET list_sboms 75 [200]
GET list_sboms_paginated 75 [200]
GET list_vulnerabilities 70 [200]
GET list_vulnerabilities_paginated 70 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 [200]
GET search_advisory 70 [200]
GET search_exact_purl 75 [200]
GET search_purls 75 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 [200]
Aggregated 1,580 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 70 (+20) 0 (0) 15.83 (+1.85) 7 (+1) 28 (+5) 0.23 (+0.07) 0.00 (+0.00)
1.1 list_organizations 70 (+20) 0 (0) 8.83 (-0.53) 1 (0) 48 (-2) 0.23 (+0.07) 0.00 (+0.00)
1.2 list_advisory 70 (+20) 0 (0) 489.61 (+14.87) 78 (-17) 818 (-356) 0.23 (+0.07) 0.00 (+0.00)
1.3 list_advisory_paginated 70 (+20) 0 (0) 390.26 (+30.86) 100 (+16) 694 (+55) 0.23 (+0.07) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 70 (+20) 0 (0) 9.29 (+1.43) 3 (0) 61 (-1) 0.23 (+0.07) 0.00 (+0.00)
1.5 search_advisory 70 (+20) 0 (0) 766.40 (-92.32) 124 (-1) 1926 (+13) 0.23 (+0.07) 0.00 (+0.00)
1.6 list_vulnerabilities 70 (+20) 0 (0) 275.36 (-1.18) 37 (-1) 514 (-19) 0.23 (+0.07) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 70 (+20) 0 (0) 172.57 (+2.25) 28 (+1) 338 (+73) 0.23 (+0.07) 0.00 (+0.00)
1.8 list_importer 70 (+20) 0 (0) 4.10 (+2.10) 1 (0) 48 (+43) 0.23 (+0.07) 0.00 (+0.00)
1.9 list_packages 70 (+20) 0 (0) 386.71 (+14.01) 54 (-2) 865 (+327) 0.23 (+0.07) 0.00 (+0.00)
1.10 list_packages_paginated 70 (+20) 0 (0) 328.79 (-21.69) 60 (-29) 565 (+64) 0.23 (+0.07) 0.00 (+0.00)
1.11 search_purls 75 (+20) 0 (0) 5227.77 (-9145.41) 3325 (-4000) 7152 (-10399) 0.25 (+0.07) 0.00 (+0.00)
1.12 search_exact_purl 75 (+25) 0 (0) 4.57 (-1.61) 2 (-1) 10 (+1) 0.25 (+0.08) 0.00 (+0.00)
1.13 list_products 75 (+25) 0 (0) 5.60 (-0.60) 3 (-1) 13 (+2) 0.25 (+0.08) 0.00 (+0.00)
1.14 list_sboms 75 (+25) 0 (0) 947.29 (-21.31) 613 (-48) 1299 (-131) 0.25 (+0.08) 0.00 (+0.00)
1.15 list_sboms_paginated 75 (+25) 0 (0) 1309.88 (+123.62) 531 (+61) 3008 (+106) 0.25 (+0.08) 0.00 (+0.00)
1.16 get_analysis_status 75 (+25) 0 (0) 10.17 (+5.07) 1 (0) 61 (+6) 0.25 (+0.08) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 75 (+25) 0 (0) 138.59 (-8.59) 31 (0) 516 (+6) 0.25 (+0.08) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 75 (+25) 0 (0) 1015.09 (-26.59) 183 (-8) 3762 (-547) 0.25 (+0.08) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 70 (+20) 0 (0) 63.01 (+8.03) 16 (+1) 290 (+135) 0.23 (+0.07) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 70 (+20) 0 (0) 7870.47 (+169.23) 6103 (+874) 11157 (-436) 0.23 (+0.07) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 70 (+20) 0 (0) 778.71 (+34.37) 150 (+2) 1494 (-314) 0.23 (+0.07) 0.00 (+0.00)
1.22 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 70 (+20) 0 (0) 764.11 (+87.83) 90 (-1) 2000 (+510) 0.23 (+0.07) 0.00 (+0.00)
Aggregated 1,650 (+495) 0 (0) 915.70 (-436.22) 1 (0) 11157 (-6394) 5.50 (+1.65) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 70 (+20) 20882.69 (-8603.41) 16480 (-2697) 24985 (-12604) 0.23 (+0.07) 14.00 (+4.00)
Aggregated 5 (0) 70 (+20) 20882.69 (-8603.41) 16480 (-2697) 24985 (-12604) 0.23 (+0.07) 14.00 (+4.00)

User Metrics