Goose Attack Report

Users: 6

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-10-31 02:15:2525-10-31 02:15:3100:00:060 → 6
Maintaining25-10-31 02:15:3125-10-31 02:20:3200:05:016
Decreasing25-10-31 02:20:3225-10-31 02:20:5900:00:270 ← 6

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 44 (-7) 0 19.82 (+4.21) 3 (0) 170 (+105) 0.15 (-0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 46 (-9) 0 222.80 (+14.77) 84 (+47) 562 (-27) 0.15 (-0.03) 0.00 (+0.00)
GET get_analysis_status 46 (-9) 0 9.13 (-2.11) 1 (0) 53 (-4) 0.15 (-0.03) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 44 (-8) 0 627.39 (-359.50) 172 (-109) 1524 (-396) 0.15 (-0.03) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 46 (-9) 0 2014.00 (+768.55) 197 (-105) 6361 (+2294) 0.15 (-0.03) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 46 (-8) 0 5445.41 (-2951.85) 3706 (-793) 11177 (-3538) 0.15 (-0.03) 0.00 (+0.00)
GET list_advisory 44 (-8) 0 443.18 (-222.91) 130 (-143) 1177 (-184) 0.15 (-0.03) 0.00 (+0.00)
GET list_advisory_paginated 44 (-8) 0 413.98 (-149.60) 156 (-7) 902 (-714) 0.15 (-0.03) 0.00 (+0.00)
GET list_importer 43 (-8) 0 9.37 (+4.16) 1 (0) 54 (+1) 0.14 (-0.03) 0.00 (+0.00)
GET list_organizations 44 (-8) 0 10.27 (-9.67) 1 (0) 47 (-5) 0.15 (-0.03) 0.00 (+0.00)
GET list_packages 43 (-8) 0 399.58 (-40.67) 146 (+82) 1079 (+106) 0.14 (-0.03) 0.00 (+0.00)
GET list_packages_paginated 43 (-8) 0 360.84 (-14.50) 130 (+18) 601 (-183) 0.14 (-0.03) 0.00 (+0.00)
GET list_products 46 (-9) 0 13.28 (-3.83) 3 (0) 94 (+21) 0.15 (-0.03) 0.00 (+0.00)
GET list_sboms 46 (-9) 0 1282.28 (-97.24) 239 (-559) 3609 (+819) 0.15 (-0.03) 0.00 (+0.00)
GET list_sboms_paginated 46 (-9) 0 4500.80 (+2760.26) 315 (-130) 12006 (+7928) 0.15 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities 43 (-8) 0 272.77 (+15.18) 44 (-70) 628 (+179) 0.14 (-0.03) 0.00 (+0.00)
GET list_vulnerabilities_paginated 43 (-8) 0 182.72 (-13.89) 34 (-7) 326 (+2) 0.14 (-0.03) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 46 (-8) 0 85.74 (+2.76) 13 (-3) 254 (-148) 0.15 (-0.03) 0.00 (+0.00)
GET search_advisory 44 (-7) 0 1086.30 (+93.49) 177 (-61) 4319 (+1923) 0.15 (-0.02) 0.00 (+0.00)
GET search_exact_purl 46 (-9) 0 21.41 (+5.09) 4 (+1) 68 (-5) 0.15 (-0.03) 0.00 (+0.00)
GET search_licenses 2 (+1) 0 51203.00 (-16443.00) 42159 (-25487) 60247 (-7399) 0.01 (+0.00) 0.00 (+0.00)
GET search_purls 46 (-9) 0 8928.52 (-605.61) 2231 (-592) 17675 (-1652) 0.15 (-0.03) 0.00 (+0.00)
GET search_purls_by_license 1 (0) 0 182736.00 (-12487.00) 182736 (-12487) 182736 (-12487) 0.00 (+0.00) 0.00 (+0.00)
GET search_sboms_by_license 1 (0) 0 44764.00 (+3547.00) 44764 (+3547) 44764 (+3547) 0.00 (+0.00) 0.00 (+0.00)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 44 (-8) 0 15.32 (-0.66) 2 (-2) 56 (-8) 0.15 (-0.03) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 44 (-8) 0 319.34 (-638.04) 71 (-515) 883 (-687) 0.15 (-0.03) 0.00 (+0.00)
Aggregated 1031 (-189) 0 1501.29 (+6.40) 1 (0) 182736 (-12487) 3.44 (-0.63) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (-2) 8 (-3) 9 (-3) 43 (+31) 58 (+5) 62 (+5) 170 (+112) 170 (+105)
GET get_analysis_latest_cpe 200 (0) 220 (+10) 260 (+20) 290 (+10) 330 (-20) 390 (+10) 562 (-27) 562 (-27)
GET get_analysis_status 4 (+1) 4 (+1) 5 (+1) 7 (-1) 19 (-28) 51 (+2) 53 (+1) 53 (-4)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 600 (-200) 600 (-400) 700 (-300) 800 (-200) 1,000 (-920) 1,000 (-920) 1,524 (-396) 1,524 (-396)
GET get_sbom[sha256:720e4451…a939656247164447] 900 (+100) 1,000 (+100) 3,000 (+2,000) 4,000 (+2,000) 5,000 (+2,000) 5,000 (+2,000) 6,000 (+2,000) 6,000 (+2,000)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 5,000 (-2,000) 6,000 (-2,000) 6,000 (-3,000) 6,000 (-6,000) 7,000 (-6,000) 7,000 (-6,000) 11,000 (-3,000) 11,000 (-3,715)
GET list_advisory 410 (-190) 450 (-250) 480 (-220) 500 (-300) 600 (-300) 600 (-400) 1,000 (0) 1,000 (0)
GET list_advisory_paginated 400 (-100) 430 (-70) 480 (-120) 500 (-200) 600 (-200) 600 (-300) 900 (-716) 900 (-716)
GET list_importer 3 (+1) 3 (0) 4 (+1) 6 (+1) 43 (+37) 52 (+44) 54 (+3) 54 (+1)
GET list_organizations 5 (-3) 5 (-10) 6 (-31) 7 (-35) 42 (-6) 44 (-5) 47 (-2) 47 (-5)
GET list_packages 390 (-20) 410 (-20) 420 (-60) 480 (-20) 500 (-200) 600 (-200) 1,000 (+100) 1,000 (+27)
GET list_packages_paginated 380 (0) 390 (0) 400 (-10) 420 (-60) 490 (-10) 500 (-100) 600 (0) 600 (-184)
GET list_products 7 (-2) 8 (-4) 10 (-3) 12 (-4) 18 (-39) 61 (-7) 94 (+25) 94 (+21)
GET list_sboms 700 (-300) 900 (-100) 1,000 (-1,000) 2,000 (0) 3,000 (+1,000) 3,000 (+1,000) 3,609 (+819) 3,609 (+819)
GET list_sboms_paginated 800 (-1,200) 2,000 (0) 9,000 (+7,000) 10,000 (+8,000) 11,000 (+8,000) 12,000 (+8,000) 12,000 (+8,000) 12,000 (+8,000)
GET list_vulnerabilities 270 (0) 290 (0) 300 (-10) 320 (+10) 490 (+120) 490 (+110) 600 (+220) 600 (+151)
GET list_vulnerabilities_paginated 190 (-10) 200 (-20) 210 (-20) 220 (-50) 290 (+10) 310 (+10) 326 (+6) 326 (+6)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 73 (0) 86 (+9) 92 (+9) 130 (+37) 190 (+40) 200 (-30) 250 (-40) 250 (-150)
GET search_advisory 900 (0) 1,000 (0) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (0) 4,000 (+2,000) 4,000 (+2,000)
GET search_exact_purl 8 (0) 10 (+1) 16 (+4) 50 (+37) 54 (0) 60 (-1) 68 (+4) 68 (-5)
GET search_licenses 42,159 (-25,487) 42,159 (-25,487) 42,159 (-25,487) 60,000 (-7,646) 60,000 (-7,646) 60,000 (-7,646) 60,000 (-7,646) 60,000 (-7,646)
GET search_purls 5,000 (-5,000) 12,000 (-1,000) 14,000 (0) 16,000 (0) 17,000 (0) 17,675 (-325) 17,675 (-1,325) 17,675 (-1,325)
GET search_purls_by_license 182,736 (-12,487) 182,736 (-12,487) 182,736 (-12,487) 182,736 (-12,487) 182,736 (-12,487) 182,736 (-12,487) 182,736 (-12,487) 182,736 (-12,487)
GET search_sboms_by_license 44,764 (+3,547) 44,764 (+3,547) 44,764 (+3,547) 44,764 (+3,547) 44,764 (+3,547) 44,764 (+3,547) 44,764 (+3,547) 44,764 (+3,547)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 7 (-1) 7 (-2) 9 (-3) 15 (-6) 53 (0) 53 (-2) 56 (-6) 56 (-8)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 290 (-610) 300 (-700) 310 (-690) 390 (-610) 600 (-400) 800 (-200) 883 (-117) 883 (-687)
Aggregated 290 (-30) 390 (-110) 500 (-300) 800 (-200) 4,000 (+1,000) 7,000 (0) 16,000 (0) 182,736 (-12,264)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 44 [200]
GET get_analysis_latest_cpe 46 [200]
GET get_analysis_status 46 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 44 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 46 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 46 [200]
GET list_advisory 44 [200]
GET list_advisory_paginated 44 [200]
GET list_importer 43 [200]
GET list_organizations 44 [200]
GET list_packages 43 [200]
GET list_packages_paginated 43 [200]
GET list_products 46 [200]
GET list_sboms 46 [200]
GET list_sboms_paginated 46 [200]
GET list_vulnerabilities 43 [200]
GET list_vulnerabilities_paginated 43 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 46 [200]
GET search_advisory 44 [200]
GET search_exact_purl 46 [200]
GET search_licenses 2 [200]
GET search_purls 46 [200]
GET search_purls_by_license 1 [200]
GET search_sboms_by_license 1 [200]
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 44 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 44 [200]
Aggregated 1,031 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 44 (-8) 0 (0) 15.11 (-0.85) 7 (0) 30 (-4) 0.15 (-0.03) 0.00 (+0.00)
1.1 list_organizations 44 (-8) 0 (0) 10.48 (-9.72) 2 (+1) 47 (-5) 0.15 (-0.03) 0.00 (+0.00)
1.2 list_advisory 44 (-8) 0 (0) 443.20 (-223.05) 130 (-143) 1177 (-184) 0.15 (-0.03) 0.00 (+0.00)
1.3 list_advisory_paginated 44 (-8) 0 (0) 414.05 (-149.57) 156 (-7) 902 (-714) 0.15 (-0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 44 (-7) 0 (0) 19.84 (+4.17) 3 (0) 170 (+105) 0.15 (-0.02) 0.00 (+0.00)
1.5 search_advisory 44 (-7) 0 (0) 1086.36 (+93.52) 177 (-61) 4319 (+1923) 0.15 (-0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 43 (-8) 0 (0) 272.81 (+15.15) 44 (-70) 628 (+179) 0.14 (-0.03) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 43 (-8) 0 (0) 182.74 (-13.90) 34 (-7) 326 (+2) 0.14 (-0.03) 0.00 (+0.00)
1.8 list_importer 43 (-8) 0 (0) 9.58 (+4.33) 1 (0) 55 (+2) 0.14 (-0.03) 0.00 (+0.00)
1.9 list_packages 43 (-8) 0 (0) 399.74 (-40.57) 146 (+82) 1079 (+106) 0.14 (-0.03) 0.00 (+0.00)
1.10 list_packages_paginated 43 (-8) 0 (0) 360.84 (-14.61) 130 (+18) 601 (-183) 0.14 (-0.03) 0.00 (+0.00)
1.11 search_purls 46 (-9) 0 (0) 8928.57 (-605.58) 2231 (-592) 17675 (-1652) 0.15 (-0.03) 0.00 (+0.00)
1.12 search_exact_purl 46 (-9) 0 (0) 21.43 (+5.00) 4 (+1) 68 (-6) 0.15 (-0.03) 0.00 (+0.00)
1.13 list_products 46 (-9) 0 (0) 13.33 (-3.82) 3 (0) 95 (+21) 0.15 (-0.03) 0.00 (+0.00)
1.14 list_sboms 46 (-9) 0 (0) 1282.43 (-97.13) 239 (-559) 3609 (+819) 0.15 (-0.03) 0.00 (+0.00)
1.15 list_sboms_paginated 46 (-9) 0 (0) 4500.87 (+2760.31) 315 (-130) 12006 (+7928) 0.15 (-0.03) 0.00 (+0.00)
1.16 get_analysis_status 46 (-9) 0 (0) 9.13 (-2.14) 1 (0) 53 (-4) 0.15 (-0.03) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 46 (-9) 0 (0) 222.91 (+14.84) 84 (+47) 562 (-27) 0.15 (-0.03) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 46 (-9) 0 (0) 2014.09 (+768.52) 197 (-105) 6361 (+2294) 0.15 (-0.03) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 46 (-8) 0 (0) 85.78 (+2.76) 13 (-3) 254 (-148) 0.15 (-0.03) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 46 (-8) 0 (0) 5445.41 (-2951.90) 3706 (-793) 11177 (-3538) 0.15 (-0.03) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 44 (-8) 0 (0) 319.43 (-638.05) 71 (-516) 884 (-686) 0.15 (-0.03) 0.00 (+0.00)
1.22 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 44 (-8) 0 (0) 627.48 (-359.56) 172 (-109) 1524 (-399) 0.15 (-0.03) 0.00 (+0.00)
1.23 get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 44 (-8) 0 (0) 15.41 (-0.59) 2 (-2) 56 (-8) 0.15 (-0.03) 0.00 (+0.00)
RestAPIUserSlow
2.0 logon 1 (+1) 0 (0) 15.00 (+15.00) 15 (+15) 15 (+15) 0.00 (+0.00) 0.00 (+0.00)
2.1 search_licenses 2 (+1) 0 (0) 51203.00 (-16443.00) 42159 (-25487) 60247 (-7399) 0.01 (+0.00) 0.00 (+0.00)
2.2 search_sboms_by_license 1 (0) 0 (0) 44764.00 (+3547.00) 44764 (+3547) 44764 (+3547) 0.00 (+0.00) 0.00 (+0.00)
2.3 search_purls_by_license 1 (0) 0 (0) 182736.00 (-12487.00) 182736 (-12487) 182736 (-12487) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete
3.0 logon 86 0 10.56 6 21 0.29 0.00
Aggregated 1,162 (-110) 0 (0) 1332.04 (-101.73) 1 (0) 182736 (-12487) 3.87 (-0.37) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 4 (-1) 44 (-8) 26451.91 (-1668.84) 12280 (-6010) 44239 (+1022) 0.15 (-0.03) 11.00 (+0.60)
RestAPIUserSlow 1 (+1) 1 (+1) 287759.00 (+287759.00) 287759 (+287759) 287759 (+287759) 0.00 (+0.00) 1.00 (+1.00)
RestAPIUserDelete 1 86 3523.60 3030 4008 0.29 86.00
Aggregated 6 (+1) 131 (+79) 13394.45 (-14726.30) 3030 (-15260) 287759 (+244542) 0.44 (+0.26) 98.00 (+87.60)

User Metrics