Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-10-14 02:18:2325-10-14 02:18:2800:00:050 → 5
Maintaining25-10-14 02:18:2825-10-14 02:23:2800:05:005
Decreasing25-10-14 02:23:2825-10-14 02:23:2900:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 65 (+6) 0 11.78 (-0.35) 3 (0) 61 (-6) 0.22 (+0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 65 (+5) 0 150.48 (-43.11) 32 (-50) 330 (-163) 0.22 (+0.02) 0.00 (+0.00)
GET get_analysis_status 65 (+5) 0 4.11 (-3.48) 1 (0) 62 (+5) 0.22 (+0.02) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 65 (+6) 0 682.54 (-13.51) 91 (-6) 1526 (-240) 0.22 (+0.02) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 65 (+5) 0 1277.12 (-276.29) 206 (-89) 4215 (-3173) 0.22 (+0.02) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (+5) 0 7780.75 (+1196.35) 4842 (+1011) 12427 (+639) 0.22 (+0.02) 0.00 (+0.00)
GET list_advisory 65 (+6) 0 450.69 (-77.17) 89 (-13) 799 (-329) 0.22 (+0.02) 0.00 (+0.00)
GET list_advisory_paginated 65 (+6) 0 371.46 (-81.83) 90 (-6) 572 (-350) 0.22 (+0.02) 0.00 (+0.00)
GET list_importer 65 (+8) 0 1.85 (-3.21) 1 (0) 5 (-48) 0.22 (+0.03) 0.00 (+0.00)
GET list_organizations 65 (+6) 0 10.60 (-6.81) 1 (0) 45 (-11) 0.22 (+0.02) 0.00 (+0.00)
GET list_packages 65 (+8) 0 369.89 (+27.28) 62 (-4) 855 (+157) 0.22 (+0.03) 0.00 (+0.00)
GET list_packages_paginated 65 (+8) 0 325.95 (+11.16) 56 (-36) 487 (-97) 0.22 (+0.03) 0.00 (+0.00)
GET list_products 65 (+4) 0 6.11 (-2.70) 2 (-1) 36 (-22) 0.22 (+0.01) 0.00 (+0.00)
GET list_sboms 65 (+4) 0 1071.72 (+7.99) 604 (+20) 1593 (-541) 0.22 (+0.01) 0.00 (+0.00)
GET list_sboms_paginated 65 (+4) 0 1420.26 (-1515.08) 496 (+61) 2875 (-6967) 0.22 (+0.01) 0.00 (+0.00)
GET list_vulnerabilities 65 (+8) 0 256.63 (-7.32) 38 (-3) 534 (-39) 0.22 (+0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 65 (+8) 0 166.86 (-4.79) 27 (-1) 313 (-56) 0.22 (+0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (+5) 0 86.12 (+9.24) 16 (+2) 208 (-248) 0.22 (+0.02) 0.00 (+0.00)
GET search_advisory 65 (+6) 0 857.78 (-338.57) 105 (-34) 2262 (-1076) 0.22 (+0.02) 0.00 (+0.00)
GET search_exact_purl 65 (+4) 0 4.98 (-6.21) 2 (-1) 35 (-21) 0.22 (+0.01) 0.00 (+0.00)
GET search_purls 70 (+8) 0 6753.74 (-1071.60) 3511 (+1851) 7589 (-5904) 0.23 (+0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (+6) 0 725.34 (-43.14) 144 (-9) 1434 (-142) 0.22 (+0.02) 0.00 (+0.00)
Aggregated 1435 (+131) 0 1055.69 (-105.74) 1 (0) 12427 (-1066) 4.78 (+0.44) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (0) 9 (+1) 11 (0) 48 (+17) 52 (-9) 56 (-6) 61 (-6)
GET get_analysis_latest_cpe 130 (-50) 180 (-20) 200 (-10) 210 (-70) 270 (-40) 270 (-50) 320 (-120) 330 (-160)
GET get_analysis_status 2 (-1) 2 (-2) 3 (-2) 3 (-4) 5 (-3) 8 (-40) 50 (-4) 62 (+5)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 600 (0) 700 (0) 800 (0) 1,000 (+100) 1,000 (0) 1,000 (-766) 1,526 (-240) 1,526 (-240)
GET get_sbom[sha256:720e4451…a939656247164447] 900 (+300) 1,000 (+300) 2,000 (+1,100) 2,000 (+1,000) 3,000 (-2,000) 3,000 (-3,000) 3,000 (-3,000) 4,000 (-3,000)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 7,000 (+1,000) 8,000 (+1,000) 8,000 (+1,000) 9,000 (+2,000) 11,000 (+3,000) 11,000 (+1,000) 11,000 (-788) 12,000 (+212)
GET list_advisory 480 (-120) 490 (-110) 500 (-100) 600 (-100) 600 (-200) 700 (-100) 799 (-101) 799 (-201)
GET list_advisory_paginated 400 (-70) 430 (-70) 470 (-30) 480 (-120) 500 (-200) 500 (-200) 572 (-328) 572 (-328)
GET list_importer 2 (0) 2 (-1) 2 (-1) 3 (-2) 3 (-5) 4 (-18) 4 (-44) 5 (-48)
GET list_organizations 3 (0) 5 (0) 7 (-27) 15 (-28) 37 (-9) 44 (-6) 45 (-7) 45 (-11)
GET list_packages 400 (+20) 410 (+20) 440 (+30) 450 (+10) 480 (-120) 500 (-100) 800 (+102) 855 (+157)
GET list_packages_paginated 390 (+60) 390 (-10) 410 (0) 420 (0) 470 (+10) 480 (+10) 480 (-20) 487 (-97)
GET list_products 5 (-1) 6 (0) 7 (-1) 8 (-1) 10 (-1) 11 (-10) 13 (-40) 36 (-22)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 1,593 (-407)
GET list_sboms_paginated 1,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-3,000) 2,000 (-4,000) 2,000 (-5,000) 2,875 (-6,125) 2,875 (-6,967)
GET list_vulnerabilities 300 (+40) 310 (+20) 330 (+20) 340 (-50) 370 (-100) 410 (-90) 490 (-83) 500 (-73)
GET list_vulnerabilities_paginated 180 (-20) 180 (-20) 190 (-20) 210 (-20) 240 (-40) 280 (-10) 290 (-30) 310 (-59)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 81 (+13) 92 (+17) 100 (+19) 110 (+16) 170 (0) 200 (0) 200 (-30) 208 (-248)
GET search_advisory 700 (-300) 900 (-100) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000)
GET search_exact_purl 4 (-2) 5 (-2) 5 (-2) 6 (-2) 7 (-40) 9 (-40) 22 (-30) 35 (-21)
GET search_purls 7,000 (-1,000) 7,000 (-1,000) 7,000 (-2,000) 7,000 (-5,000) 7,000 (-5,000) 7,000 (-5,000) 7,589 (-5,411) 7,589 (-5,411)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (0) 800 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-576) 1,000 (-576)
Aggregated 310 (0) 420 (-50) 600 (0) 1,000 (0) 3,000 (-1,000) 7,000 (0) 8,000 (-4,000) 12,000 (-1,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 65 [200]
GET get_analysis_latest_cpe 65 [200]
GET get_analysis_status 65 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 65 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 65 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 [200]
GET list_advisory 65 [200]
GET list_advisory_paginated 65 [200]
GET list_importer 65 [200]
GET list_organizations 65 [200]
GET list_packages 65 [200]
GET list_packages_paginated 65 [200]
GET list_products 65 [200]
GET list_sboms 65 [200]
GET list_sboms_paginated 65 [200]
GET list_vulnerabilities 65 [200]
GET list_vulnerabilities_paginated 65 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 [200]
GET search_advisory 65 [200]
GET search_exact_purl 65 [200]
GET search_purls 70 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 [200]
Aggregated 1,435 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 65 (+6) 0 (0) 15.09 (-0.31) 7 (+1) 31 (-3) 0.22 (+0.02) 0.00 (+0.00)
1.1 list_organizations 65 (+6) 0 (0) 10.72 (-6.80) 1 (0) 45 (-11) 0.22 (+0.02) 0.00 (+0.00)
1.2 list_advisory 65 (+6) 0 (0) 450.83 (-77.08) 89 (-13) 799 (-329) 0.22 (+0.02) 0.00 (+0.00)
1.3 list_advisory_paginated 65 (+6) 0 (0) 371.51 (-81.81) 90 (-6) 572 (-350) 0.22 (+0.02) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 65 (+6) 0 (0) 11.86 (-0.32) 3 (0) 61 (-6) 0.22 (+0.02) 0.00 (+0.00)
1.5 search_advisory 65 (+6) 0 (0) 857.83 (-338.61) 105 (-34) 2262 (-1076) 0.22 (+0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 65 (+8) 0 (0) 256.68 (-7.31) 38 (-3) 534 (-39) 0.22 (+0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 65 (+8) 0 (0) 166.97 (-4.70) 27 (-1) 313 (-56) 0.22 (+0.03) 0.00 (+0.00)
1.8 list_importer 65 (+8) 0 (0) 1.88 (-3.19) 1 (0) 5 (-48) 0.22 (+0.03) 0.00 (+0.00)
1.9 list_packages 65 (+8) 0 (0) 369.92 (+27.24) 62 (-5) 855 (+157) 0.22 (+0.03) 0.00 (+0.00)
1.10 list_packages_paginated 65 (+8) 0 (0) 326.00 (+11.14) 56 (-36) 487 (-97) 0.22 (+0.03) 0.00 (+0.00)
1.11 search_purls 70 (+8) 0 (0) 6753.79 (-1071.59) 3511 (+1851) 7589 (-5904) 0.23 (+0.03) 0.00 (+0.00)
1.12 search_exact_purl 65 (+4) 0 (0) 4.98 (-6.23) 2 (-1) 35 (-21) 0.22 (+0.01) 0.00 (+0.00)
1.13 list_products 65 (+4) 0 (0) 6.14 (-2.66) 2 (-1) 36 (-22) 0.22 (+0.01) 0.00 (+0.00)
1.14 list_sboms 65 (+4) 0 (0) 1071.77 (+7.95) 604 (+20) 1593 (-541) 0.22 (+0.01) 0.00 (+0.00)
1.15 list_sboms_paginated 65 (+4) 0 (0) 1420.32 (-1515.09) 496 (+61) 2875 (-6967) 0.22 (+0.01) 0.00 (+0.00)
1.16 get_analysis_status 65 (+5) 0 (0) 4.18 (-3.47) 1 (0) 62 (+5) 0.22 (+0.02) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 65 (+5) 0 (0) 150.54 (-43.06) 32 (-50) 330 (-163) 0.22 (+0.02) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 65 (+5) 0 (0) 1277.20 (-276.32) 206 (-89) 4217 (-3171) 0.22 (+0.02) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 65 (+5) 0 (0) 86.18 (+9.18) 16 (+2) 208 (-248) 0.22 (+0.02) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 65 (+5) 0 (0) 7780.85 (+1196.35) 4842 (+1010) 12427 (+639) 0.22 (+0.02) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 65 (+6) 0 (0) 725.40 (-43.18) 144 (-10) 1434 (-142) 0.22 (+0.02) 0.00 (+0.00)
1.22 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 65 (+6) 0 (0) 682.66 (-13.49) 91 (-6) 1526 (-240) 0.22 (+0.02) 0.00 (+0.00)
Aggregated 1,500 (+137) 0 (0) 1009.94 (-101.21) 1 (0) 12427 (-1066) 5.00 (+0.46) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 65 (+6) 22588.58 (-2490.54) 15140 (+11) 28190 (-6815) 0.22 (+0.02) 13.00 (+1.20)
Aggregated 5 (0) 65 (+6) 22588.58 (-2490.54) 15140 (+11) 28190 (-6815) 0.22 (+0.02) 13.00 (+1.20)

User Metrics