Goose Attack Report

Users: 7

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-11-11 03:10:5425-11-11 03:11:0100:00:070 → 7
Maintaining25-11-11 03:11:0125-11-11 03:16:0100:05:007
Decreasing25-11-11 03:16:0125-11-11 03:16:4100:00:400 ← 7

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 35 (0) 0 1599.77 (+28.80) 141 (-168) 5664 (+1801) 0.12 (+0.00) 0.00 (+0.00)
GET get_advisory_by_doc_id 15 (0) 0 25.67 (+12.73) 5 (+1) 70 (+36) 0.05 (+0.00) 0.00 (+0.00)
GET get_analysis_latest_cpe 19 (+4) 0 311.00 (+61.80) 94 (-12) 971 (+575) 0.06 (+0.01) 0.00 (+0.00)
GET get_analysis_status 19 (+4) 0 5.11 (-5.63) 2 (0) 14 (-37) 0.06 (+0.01) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 15 (0) 0 913.40 (+194.73) 267 (-63) 1390 (+179) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 19 (+4) 0 1199.53 (+284.99) 493 (+281) 2282 (+105) 0.06 (+0.01) 0.00 (+0.00)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 19 (+4) 0 57471.21 (+3137.48) 50298 (+5435) 71673 (+9291) 0.06 (+0.01) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 15 (0) 0 7496.73 (-1412.73) 4797 (-2436) 12131 (-664) 0.05 (+0.00) 0.00 (+0.00)
GET list_advisory 15 (0) 0 592.80 (-53.47) 147 (-19) 941 (-178) 0.05 (+0.00) 0.00 (+0.00)
GET list_advisory_paginated 15 (0) 0 443.47 (-87.27) 158 (+33) 593 (-110) 0.05 (+0.00) 0.00 (+0.00)
GET list_importer 16 (0) 0 14.88 (+6.94) 1 (-1) 135 (+51) 0.05 (+0.00) 0.00 (+0.00)
GET list_organizations 15 (0) 0 33.60 (+13.20) 2 (+1) 147 (+47) 0.05 (+0.00) 0.00 (+0.00)
GET list_packages 16 (0) 0 439.12 (+12.19) 92 (-52) 618 (-253) 0.05 (+0.00) 0.00 (+0.00)
GET list_packages_paginated 16 (0) 0 394.38 (+4.12) 192 (+58) 605 (+64) 0.05 (+0.00) 0.00 (+0.00)
GET list_products 15 (0) 0 15.93 (+4.80) 4 (-2) 63 (+21) 0.05 (+0.00) 0.00 (+0.00)
GET list_sboms 15 (0) 0 1524.53 (+552.93) 611 (-20) 3332 (+829) 0.05 (+0.00) 0.00 (+0.00)
GET list_sboms_paginated 19 (+4) 0 4517.16 (+700.49) 901 (-305) 11576 (+1165) 0.06 (+0.01) 0.00 (+0.00)
GET list_vulnerabilities 16 (0) 0 456.19 (+32.38) 108 (+58) 798 (+91) 0.05 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities_paginated 16 (0) 0 248.88 (+6.25) 73 (+14) 509 (+154) 0.05 (+0.00) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 15 (0) 0 71.40 (-1.20) 5 (-3) 253 (-133) 0.05 (+0.00) 0.00 (+0.00)
GET search_advisory 16 (+1) 0 1211.69 (-200.78) 197 (-65) 2010 (-470) 0.05 (+0.00) 0.00 (+0.00)
GET search_exact_purl 15 (0) 0 9.60 (-19.27) 3 (-3) 47 (-23) 0.05 (+0.00) 0.00 (+0.00)
GET search_licenses 1 (-1) 0 129259.00 (+72485.50) 129259 (+98012) 129259 (+46959) 0.00 (-0.00) 0.00 (+0.00)
GET search_purls 16 (-4) 0 9411.50 (-10918.25) 4319 (-8606) 15100 (-9169) 0.05 (-0.01) 0.00 (+0.00)
GET search_purls_by_license 1 (0) 0 136421.00 (-32860.00) 136421 (-32860) 136421 (-32860) 0.00 (+0.00) 0.00 (+0.00)
GET search_sboms_by_license 1 (0) 0 76931.00 (+40700.00) 76931 (+40700) 76931 (+40700) 0.00 (+0.00) 0.00 (+0.00)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 15 (0) 0 24.13 (-20.93) 3 (-3) 113 (-66) 0.05 (+0.00) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 15 (0) 0 611.93 (-10.73) 91 (-34) 1206 (-359) 0.05 (+0.00) 0.00 (+0.00)
Aggregated 425 (+16) 0 4650.48 (-5.80) 1 (0) 136421 (-32860) 1.42 (+0.05) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 3,000 (0) 3,000 (0) 5,664 (+1,801) 5,664 (+1,801)
GET get_advisory_by_doc_id 14 (+3) 15 (+1) 21 (+6) 53 (+37) 69 (+45) 69 (+45) 70 (+36) 70 (+36)
GET get_analysis_latest_cpe 290 (+80) 300 (+70) 320 (+40) 360 (+50) 500 (+110) 600 (+210) 971 (+575) 971 (+575)
GET get_analysis_status 5 (+2) 5 (+1) 5 (-3) 6 (-4) 7 (-44) 11 (-40) 14 (-37) 14 (-37)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 1,000 (+300) 1,000 (+200) 1,000 (+200) 1,000 (+200) 1,000 (+100) 1,000 (+100) 1,000 (0) 1,000 (0)
GET get_sbom[sha256:720e4451…a939656247164447] 1,000 (+400) 1,000 (+300) 1,000 (+100) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 57,000 (+2,000) 57,000 (0) 60,000 (+1,000) 62,000 (+2,000) 63,000 (+2,000) 63,000 (+2,000) 71,673 (+9,673) 71,673 (+9,673)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 7,000 (-1,000) 7,000 (-1,000) 8,000 (-1,000) 8,000 (-3,000) 11,000 (-1,795) 11,000 (-1,795) 12,000 (-795) 12,000 (-795)
GET list_advisory 700 (+100) 700 (+100) 800 (+200) 800 (+100) 900 (-100) 900 (-100) 900 (-100) 900 (-100)
GET list_advisory_paginated 470 (-130) 480 (-120) 500 (-200) 500 (-200) 593 (-107) 593 (-107) 593 (-107) 593 (-107)
GET list_importer 3 (0) 4 (+1) 6 (+3) 6 (+2) 6 (+2) 54 (+49) 135 (+51) 135 (+51)
GET list_organizations 36 (+30) 41 (+35) 49 (+28) 52 (+27) 55 (-25) 55 (-25) 147 (+47) 147 (+47)
GET list_packages 470 (+10) 480 (0) 490 (-10) 500 (0) 600 (+100) 600 (0) 600 (-271) 600 (-271)
GET list_packages_paginated 390 (-30) 400 (-70) 410 (-70) 500 (+10) 500 (+10) 500 (0) 600 (+100) 600 (+100)
GET list_products 9 (0) 13 (+4) 15 (+6) 16 (+4) 35 (+20) 35 (+20) 63 (+21) 63 (+21)
GET list_sboms 1,000 (+300) 1,000 (+300) 2,000 (+1,100) 2,000 (+1,000) 3,000 (+1,000) 3,000 (+1,000) 3,000 (+497) 3,000 (+497)
GET list_sboms_paginated 4,000 (+2,000) 5,000 (+3,000) 6,000 (0) 7,000 (-1,000) 8,000 (-1,000) 9,000 (0) 11,576 (+1,576) 11,576 (+1,576)
GET list_vulnerabilities 410 (-30) 470 (-20) 600 (+110) 600 (0) 700 (0) 798 (+98) 798 (+98) 798 (+98)
GET list_vulnerabilities_paginated 240 (+20) 240 (-60) 280 (-30) 330 (+10) 370 (+30) 380 (+40) 500 (+145) 500 (+145)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 58 (+28) 65 (+34) 72 (+13) 80 (+7) 210 (-50) 210 (-50) 250 (-136) 250 (-136)
GET search_advisory 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 7 (-4) 7 (-7) 9 (-59) 10 (-58) 13 (-56) 13 (-56) 47 (-23) 47 (-23)
GET search_licenses 129,259 (+98,012) 129,259 (+98,012) 129,259 (+98,012) 129,259 (+47,259) 129,259 (+47,259) 129,259 (+47,259) 129,259 (+47,259) 129,259 (+47,259)
GET search_purls 8,000 (-13,000) 9,000 (-12,000) 9,000 (-12,000) 13,000 (-8,000) 14,000 (-10,000) 15,000 (-9,000) 15,000 (-9,000) 15,000 (-9,000)
GET search_purls_by_license 136,421 (-32,860) 136,421 (-32,860) 136,421 (-32,860) 136,421 (-32,860) 136,421 (-32,860) 136,421 (-32,860) 136,421 (-32,860) 136,421 (-32,860)
GET search_sboms_by_license 76,931 (+40,700) 76,931 (+40,700) 76,931 (+40,700) 76,931 (+40,700) 76,931 (+40,700) 76,931 (+40,700) 76,931 (+40,700) 76,931 (+40,700)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 13 (-29) 14 (-29) 25 (-30) 26 (-30) 51 (-32) 51 (-32) 110 (-69) 110 (-69)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (0) 700 (+100) 800 (0) 800 (-100) 1,000 (0) 1,000 (0) 1,000 (-565) 1,000 (-565)
Aggregated 480 (0) 700 (+100) 1,000 (+100) 2,000 (0) 8,000 (-4,000) 50,000 (+26,000) 63,000 (+3,000) 136,000 (-33,000)

Status Code Metrics

Method Name Status Codes
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 35 [200]
GET get_advisory_by_doc_id 15 [200]
GET get_analysis_latest_cpe 19 [200]
GET get_analysis_status 19 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 15 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 19 [200]
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 19 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 15 [200]
GET list_advisory 15 [200]
GET list_advisory_paginated 15 [200]
GET list_importer 16 [200]
GET list_organizations 15 [200]
GET list_packages 16 [200]
GET list_packages_paginated 16 [200]
GET list_products 15 [200]
GET list_sboms 15 [200]
GET list_sboms_paginated 19 [200]
GET list_vulnerabilities 16 [200]
GET list_vulnerabilities_paginated 16 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 15 [200]
GET search_advisory 16 [200]
GET search_exact_purl 15 [200]
GET search_licenses 1 [200]
GET search_purls 16 [200]
GET search_purls_by_license 1 [200]
GET search_sboms_by_license 1 [200]
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 15 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 15 [200]
Aggregated 425 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 15 (0) 0 (0) 13.87 (-2.73) 10 (-1) 21 (-5) 0.05 (+0.00) 0.00 (+0.00)
1.1 list_organizations 15 (0) 0 (0) 33.67 (+13.07) 2 (+1) 147 (+46) 0.05 (+0.00) 0.00 (+0.00)
1.2 list_advisory 15 (0) 0 (0) 592.87 (-53.60) 147 (-19) 941 (-178) 0.05 (+0.00) 0.00 (+0.00)
1.3 list_advisory_paginated 15 (0) 0 (0) 443.60 (-87.13) 158 (+33) 594 (-109) 0.05 (+0.00) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 15 (0) 0 (0) 25.73 (+12.73) 5 (+1) 70 (+36) 0.05 (+0.00) 0.00 (+0.00)
1.5 search_advisory 16 (+1) 0 (0) 1211.75 (-200.78) 197 (-65) 2010 (-470) 0.05 (+0.00) 0.00 (+0.00)
1.6 list_vulnerabilities 16 (0) 0 (0) 456.25 (+32.44) 108 (+58) 798 (+91) 0.05 (+0.00) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 16 (0) 0 (0) 248.88 (+6.25) 73 (+14) 509 (+154) 0.05 (+0.00) 0.00 (+0.00)
1.8 list_importer 16 (0) 0 (0) 14.94 (+6.94) 1 (-1) 135 (+50) 0.05 (+0.00) 0.00 (+0.00)
1.9 list_packages 16 (0) 0 (0) 439.12 (+12.19) 92 (-52) 618 (-253) 0.05 (+0.00) 0.00 (+0.00)
1.10 list_packages_paginated 16 (0) 0 (0) 394.44 (+4.19) 192 (+58) 605 (+64) 0.05 (+0.00) 0.00 (+0.00)
1.11 search_purls 16 (-4) 0 (0) 9411.50 (-10918.25) 4319 (-8606) 15100 (-9169) 0.05 (-0.01) 0.00 (+0.00)
1.12 search_exact_purl 15 (0) 0 (0) 9.60 (-19.33) 3 (-3) 47 (-23) 0.05 (+0.00) 0.00 (+0.00)
1.13 list_products 15 (0) 0 (0) 15.93 (+4.80) 4 (-2) 63 (+21) 0.05 (+0.00) 0.00 (+0.00)
1.14 list_sboms 15 (0) 0 (0) 1524.67 (+553.00) 612 (-19) 3332 (+829) 0.05 (+0.00) 0.00 (+0.00)
1.15 list_sboms_paginated 19 (+4) 0 (0) 4517.21 (+700.54) 901 (-305) 11576 (+1165) 0.06 (+0.01) 0.00 (+0.00)
1.16 get_analysis_status 19 (+4) 0 (0) 5.21 (-5.59) 2 (0) 14 (-37) 0.06 (+0.01) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 19 (+4) 0 (0) 311.00 (+61.60) 94 (-12) 971 (+575) 0.06 (+0.01) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 19 (+4) 0 (0) 1199.53 (+284.99) 493 (+281) 2282 (+105) 0.06 (+0.01) 0.00 (+0.00)
1.19 get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 19 (+4) 0 (0) 57471.32 (+3137.52) 50298 (+5435) 71673 (+9291) 0.06 (+0.01) 0.00 (+0.00)
1.20 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 15 (0) 0 (0) 71.53 (-1.27) 5 (-3) 253 (-133) 0.05 (+0.00) 0.00 (+0.00)
1.21 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 15 (0) 0 (0) 7496.93 (-1412.60) 4797 (-2436) 12134 (-662) 0.05 (+0.00) 0.00 (+0.00)
1.22 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 15 (0) 0 (0) 612.07 (-10.67) 91 (-35) 1206 (-359) 0.05 (+0.00) 0.00 (+0.00)
1.23 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 15 (0) 0 (0) 913.53 (+194.80) 267 (-63) 1390 (+179) 0.05 (+0.00) 0.00 (+0.00)
1.24 get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 15 (0) 0 (0) 24.27 (-20.87) 3 (-3) 113 (-66) 0.05 (+0.00) 0.00 (+0.00)
RestAPIUserSlow
2.0 logon 0 (-1) 0 (0) 0.00 (-7.00) 0 (-7) 0 (-7) 0.00 (-0.00) 0.00 (+0.00)
2.1 search_licenses 1 (-1) 0 (0) 129259.00 (+72485.50) 129259 (+98012) 129259 (+46959) 0.00 (-0.00) 0.00 (+0.00)
2.2 search_sboms_by_license 1 (0) 0 (0) 76931.00 (+40700.00) 76931 (+40700) 76931 (+40700) 0.00 (+0.00) 0.00 (+0.00)
2.3 search_purls_by_license 1 (0) 0 (0) 136421.00 (-32860.00) 136421 (-32860) 136421 (-32860) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete
3.0 logon 35 (0) 0 (0) 11.71 (+0.71) 6 (0) 18 (-1) 0.12 (+0.00) 0.00 (+0.00)
3.1 delete_sbom_from_pool_sequential[100 SBOMs] 35 (0) 0 (0) 1599.94 (+28.71) 142 (-168) 5664 (+1801) 0.12 (+0.00) 0.00 (+0.00)
Aggregated 475 (+15) 0 (0) 4160.95 (+20.91) 1 (0) 136421 (-32860) 1.58 (+0.05) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 15 (0) 84284.00 (-9476.00) 68503 (-12791) 114280 (+7707) 0.05 (+0.00) 3.00 (+0.00)
RestAPIUserSlow 0 (-1) 0 (-1) 0.00 (-287822.00) 0 (-287822) 0 (-287822) 0.00 (-0.00) 0.00 (-1.00)
RestAPIUserDelete 1 (0) 35 (0) 8603.83 (-56.09) 7130 (-153) 12205 (+1554) 0.12 (+0.00) 35.00 (+0.00)
Aggregated 6 (-1) 50 (-1) 31307.88 (-7855.24) 7130 (-153) 114280 (-173542) 0.17 (-0.00) 38.00 (-1.00)

User Metrics