Goose Attack Report

Users: 7

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-11-17 02:17:5225-11-17 02:17:5900:00:070 → 7
Maintaining25-11-17 02:17:5925-11-17 02:22:5900:05:007
Decreasing25-11-17 02:22:5925-11-17 02:23:2400:00:250 ← 7

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 33 (-2) 0 2272.45 (+349.37) 304 (+53) 6963 (+2599) 0.11 (-0.01) 0.00 (+0.00)
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (-4) 10 27.40 (+10.76) 2 (+1) 109 (+26) 0.03 (-0.01) 0.03 (-0.01)
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (-4) 10 6.40 (-15.03) 1 (0) 14 (-83) 0.03 (-0.01) 0.03 (-0.01)
GET get_advisory_by_doc_id 10 (-5) 0 26.40 (+6.87) 3 (-1) 69 (+14) 0.03 (-0.02) 0.00 (+0.00)
GET get_analysis_latest_cpe 15 (+4) 0 249.93 (+15.93) 92 (+7) 397 (+80) 0.05 (+0.01) 0.00 (+0.00)
GET get_analysis_status 15 (+4) 0 5.33 (-7.48) 1 (0) 12 (-47) 0.05 (+0.01) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 (-4) 0 700.40 (-85.46) 148 (-27) 1285 (-184) 0.03 (-0.01) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 15 (0) 0 1569.40 (+493.20) 385 (+6) 3090 (+1130) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 (0) 0 62565.20 (+3386.20) 51358 (+733) 72528 (+1235) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 (-5) 0 8792.70 (+1048.23) 6137 (+2743) 13408 (+432) 0.03 (-0.02) 0.00 (+0.00)
GET list_advisory 10 (-4) 0 606.80 (-6.63) 315 (+144) 808 (-446) 0.03 (-0.01) 0.00 (+0.00)
GET list_advisory_labels 15 (0) 0 14861.53 (+1184.33) 12796 (+5894) 21591 (-916) 0.05 (+0.00) 0.00 (+0.00)
GET list_advisory_paginated 10 (-4) 0 523.70 (-23.66) 204 (+29) 689 (-99) 0.03 (-0.01) 0.00 (+0.00)
GET list_importer 11 (0) 0 2.82 (-4.73) 1 (0) 8 (-31) 0.04 (+0.00) 0.00 (+0.00)
GET list_organizations 10 (-4) 0 8.40 (-8.10) 2 (0) 36 (-9) 0.03 (-0.01) 0.00 (+0.00)
GET list_packages 11 (0) 0 452.09 (-180.18) 127 (-32) 1032 (-731) 0.04 (+0.00) 0.00 (+0.00)
GET list_packages_paginated 11 (0) 0 372.91 (-142.91) 168 (+47) 571 (-537) 0.04 (+0.00) 0.00 (+0.00)
GET list_products 15 (+4) 0 26.60 (+15.33) 3 (-1) 62 (+31) 0.05 (+0.01) 0.00 (+0.00)
GET list_sboms 15 (+4) 0 1111.67 (-583.97) 685 (-211) 2598 (-602) 0.05 (+0.01) 0.00 (+0.00)
GET list_sboms_paginated 15 (+4) 0 2426.00 (-4567.91) 1576 (-334) 4598 (-10109) 0.05 (+0.01) 0.00 (+0.00)
GET list_vulnerabilities 11 (0) 0 378.82 (-89.82) 75 (-105) 586 (-620) 0.04 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities_paginated 11 (0) 0 267.82 (-8.64) 80 (-28) 386 (-299) 0.04 (+0.00) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 (-5) 0 80.70 (+52.83) 5 (0) 217 (+152) 0.03 (-0.02) 0.00 (+0.00)
GET search_advisory 10 (-5) 0 1092.10 (-563.23) 197 (-40) 1794 (-4058) 0.03 (-0.02) 0.00 (+0.00)
GET search_exact_purl 15 (+4) 0 11.87 (-2.41) 5 (+2) 57 (-30) 0.05 (+0.01) 0.00 (+0.00)
GET search_licenses 1 (0) 0 104683.00 (-25475.00) 104683 (-25475) 104683 (-25475) 0.00 (+0.00) 0.00 (+0.00)
GET search_purls 15 (+4) 0 17214.67 (+7936.39) 14225 (+8520) 21234 (+8920) 0.05 (+0.01) 0.00 (+0.00)
GET search_purls_by_license 1 (0) 0 154221.00 (+22490.00) 154221 (+22490) 154221 (+22490) 0.00 (+0.00) 0.00 (+0.00)
GET search_sboms_by_license 1 (0) 0 58913.00 (-11169.00) 58913 (-11169) 58913 (-11169) 0.00 (+0.00) 0.00 (+0.00)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 (-4) 0 93.40 (-6.89) 8 (+2) 152 (-38) 0.03 (-0.01) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 (-4) 0 653.30 (+251.87) 111 (-8) 1468 (+683) 0.03 (-0.01) 0.00 (+0.00)
Aggregated 361 (-26) 20 5639.27 (+712.75) 1 (0) 154221 (+22490) 1.20 (-0.09) 0.07 (-0.03)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 2,000 (0) 3,000 (+1,000) 3,000 (0) 3,000 (0) 4,000 (+1,000) 5,000 (+2,000) 6,963 (+2,963) 6,963 (+2,963)
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 6 (+1) 7 (+1) 9 (-1) 36 (+26) 92 (+12) 109 (+29) 109 (+26) 109 (+26)
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 4 (0) 4 (-1) 10 (-2) 11 (-2) 12 (-82) 14 (-80) 14 (-83) 14 (-83)
GET get_advisory_by_doc_id 10 (-5) 12 (-5) 15 (-8) 64 (+40) 67 (+24) 69 (+26) 69 (+14) 69 (+14)
GET get_analysis_latest_cpe 270 (+30) 270 (+20) 270 (-20) 300 (0) 380 (+70) 380 (+70) 397 (+80) 397 (+80)
GET get_analysis_status 5 (+3) 5 (+2) 7 (+1) 7 (-1) 9 (-46) 9 (-46) 12 (-47) 12 (-47)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 700 (-100) 800 (-100) 800 (-100) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET get_sbom[sha256:720e4451…a939656247164447] 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+40) 2,000 (+40) 3,000 (+1,040) 3,000 (+1,040)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 60,000 (+2,000) 61,000 (+2,000) 67,000 (+8,000) 70,000 (+7,000) 72,528 (+4,528) 72,528 (+4,528) 72,528 (+1,528) 72,528 (+1,528)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 8,000 (0) 8,000 (0) 9,000 (+1,000) 9,000 (+1,000) 11,000 (+1,000) 13,000 (+3,000) 13,000 (+24) 13,000 (+24)
GET list_advisory 600 (+100) 700 (+200) 700 (+100) 800 (0) 800 (-200) 800 (-200) 800 (-200) 800 (-200)
GET list_advisory_labels 14,000 (+1,000) 14,000 (+1,000) 15,000 (-2,000) 16,000 (-3,000) 19,000 (-2,000) 19,000 (-2,000) 21,591 (-916) 21,591 (-916)
GET list_advisory_paginated 500 (0) 600 (0) 600 (0) 600 (0) 689 (-99) 689 (-99) 689 (-99) 689 (-99)
GET list_importer 2 (-3) 2 (-3) 3 (-3) 3 (-3) 5 (-2) 5 (-2) 8 (-31) 8 (-31)
GET list_organizations 6 (-5) 7 (-5) 7 (-12) 7 (-14) 11 (-30) 36 (-5) 36 (-9) 36 (-9)
GET list_packages 460 (-40) 500 (0) 500 (0) 600 (0) 600 (-400) 600 (-400) 1,000 (-763) 1,000 (-763)
GET list_packages_paginated 430 (-60) 440 (-50) 500 (+10) 500 (0) 571 (-429) 571 (-429) 571 (-429) 571 (-429)
GET list_products 9 (-1) 9 (-1) 52 (+40) 58 (+45) 61 (+46) 61 (+46) 62 (+31) 62 (+31)
GET list_sboms 700 (-300) 800 (-200) 1,000 (0) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 2,598 (-402) 2,598 (-402)
GET list_sboms_paginated 2,000 (-6,000) 2,000 (-6,000) 3,000 (-5,000) 4,000 (-5,000) 4,000 (-10,000) 4,000 (-10,000) 4,598 (-10,109) 4,598 (-10,109)
GET list_vulnerabilities 470 (+70) 470 (+70) 500 (+90) 586 (+176) 586 (-14) 586 (-14) 586 (-414) 586 (-414)
GET list_vulnerabilities_paginated 330 (+70) 330 (+60) 330 (+50) 330 (+40) 330 (+20) 330 (+20) 386 (-299) 386 (-299)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 36 (+15) 52 (+27) 60 (+18) 170 (+121) 210 (+150) 217 (+157) 217 (+152) 217 (+152)
GET search_advisory 1,000 (0) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 1,000 (-1,000) 1,794 (-206) 1,794 (-4,058) 1,794 (-4,058)
GET search_exact_purl 9 (+2) 9 (+1) 9 (0) 9 (-1) 17 (+5) 17 (+5) 57 (-30) 57 (-30)
GET search_licenses 104,683 (-25,475) 104,683 (-25,475) 104,683 (-25,475) 104,683 (-25,475) 104,683 (-25,475) 104,683 (-25,475) 104,683 (-25,475) 104,683 (-25,475)
GET search_purls 17,000 (+8,000) 17,000 (+7,000) 17,000 (+7,000) 19,000 (+9,000) 21,000 (+10,000) 21,000 (+10,000) 21,000 (+9,000) 21,000 (+9,000)
GET search_purls_by_license 154,221 (+22,490) 154,221 (+22,490) 154,221 (+22,490) 154,221 (+22,490) 154,221 (+22,490) 154,221 (+22,490) 154,221 (+22,490) 154,221 (+22,490)
GET search_sboms_by_license 58,913 (-11,169) 58,913 (-11,169) 58,913 (-11,169) 58,913 (-11,169) 58,913 (-11,169) 58,913 (-11,169) 58,913 (-11,169) 58,913 (-11,169)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 100 (+15) 110 (0) 110 (0) 110 (-10) 110 (-80) 150 (-40) 150 (-40) 150 (-40)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+230) 700 (+280) 800 (+300) 1,000 (+400) 1,000 (+300) 1,000 (+300) 1,000 (+215) 1,000 (+215)
Aggregated 500 (+20) 700 (-100) 2,000 (+1,000) 3,000 (0) 15,000 (+6,000) 22,000 (+1,000) 73,000 (+5,000) 154,000 (+22,269)

Status Code Metrics

Method Name Status Codes
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 33 [200]
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 [404]
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 [404]
GET get_advisory_by_doc_id 10 [200]
GET get_analysis_latest_cpe 15 [200]
GET get_analysis_status 15 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 15 [200]
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 [200]
GET list_advisory 10 [200]
GET list_advisory_labels 15 [200]
GET list_advisory_paginated 10 [200]
GET list_importer 11 [200]
GET list_organizations 10 [200]
GET list_packages 11 [200]
GET list_packages_paginated 11 [200]
GET list_products 15 [200]
GET list_sboms 15 [200]
GET list_sboms_paginated 15 [200]
GET list_vulnerabilities 11 [200]
GET list_vulnerabilities_paginated 11 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 [200]
GET search_advisory 10 [200]
GET search_exact_purl 15 [200]
GET search_licenses 1 [200]
GET search_purls 15 [200]
GET search_purls_by_license 1 [200]
GET search_sboms_by_license 1 [200]
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 [200]
Aggregated 341 [200], 20 [404]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 10 (-4) 0 (0) 11.40 (-2.31) 7 (-1) 15 (-5) 0.03 (-0.01) 0.00 (+0.00)
1.1 list_organizations 10 (-4) 0 (0) 8.60 (-7.97) 2 (0) 36 (-9) 0.03 (-0.01) 0.00 (+0.00)
1.2 list_advisory 10 (-4) 0 (0) 607.00 (-6.43) 315 (+144) 808 (-446) 0.03 (-0.01) 0.00 (+0.00)
1.3 list_advisory_paginated 10 (-4) 0 (0) 523.80 (-23.77) 204 (+29) 689 (-100) 0.03 (-0.01) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 10 (-5) 0 (0) 26.50 (+6.97) 3 (-1) 69 (+14) 0.03 (-0.02) 0.00 (+0.00)
1.5 search_advisory 10 (-5) 0 (0) 1092.30 (-563.03) 197 (-40) 1794 (-4058) 0.03 (-0.02) 0.00 (+0.00)
1.6 list_vulnerabilities 11 (0) 0 (0) 378.82 (-90.00) 75 (-105) 586 (-620) 0.04 (+0.00) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 11 (0) 0 (0) 267.82 (-8.64) 80 (-28) 386 (-299) 0.04 (+0.00) 0.00 (+0.00)
1.8 list_importer 11 (0) 0 (0) 2.82 (-4.73) 1 (0) 8 (-31) 0.04 (+0.00) 0.00 (+0.00)
1.9 list_packages 11 (0) 0 (0) 452.18 (-180.09) 127 (-32) 1032 (-731) 0.04 (+0.00) 0.00 (+0.00)
1.10 list_packages_paginated 11 (0) 0 (0) 372.91 (-142.91) 168 (+47) 571 (-537) 0.04 (+0.00) 0.00 (+0.00)
1.11 search_purls 15 (+4) 0 (0) 17214.73 (+7936.37) 14225 (+8520) 21234 (+8920) 0.05 (+0.01) 0.00 (+0.00)
1.12 search_exact_purl 15 (+4) 0 (0) 11.93 (-2.34) 5 (+2) 57 (-30) 0.05 (+0.01) 0.00 (+0.00)
1.13 list_products 15 (+4) 0 (0) 26.67 (+15.39) 3 (-1) 62 (+31) 0.05 (+0.01) 0.00 (+0.00)
1.14 list_sboms 15 (+4) 0 (0) 1111.73 (-583.90) 685 (-211) 2598 (-602) 0.05 (+0.01) 0.00 (+0.00)
1.15 list_sboms_paginated 15 (+4) 0 (0) 2426.00 (-4567.91) 1576 (-334) 4598 (-10109) 0.05 (+0.01) 0.00 (+0.00)
1.16 get_analysis_status 15 (+4) 0 (0) 5.40 (-7.42) 1 (0) 12 (-47) 0.05 (+0.01) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 15 (+4) 0 (0) 250.00 (+16.00) 92 (+7) 397 (+80) 0.05 (+0.01) 0.00 (+0.00)
1.18 list_advisory_labels 15 (0) 0 (0) 14861.53 (+1184.33) 12796 (+5894) 21591 (-916) 0.05 (+0.00) 0.00 (+0.00)
1.19 get_sbom[sha256:720e4451…a939656247164447] 15 (0) 0 (0) 1569.47 (+493.20) 385 (+6) 3090 (+1130) 0.05 (+0.00) 0.00 (+0.00)
1.20 get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 (0) 0 (0) 62565.27 (+3386.07) 51358 (+733) 72528 (+1235) 0.05 (+0.00) 0.00 (+0.00)
1.21 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 (-5) 0 (0) 80.80 (+52.93) 5 (0) 217 (+152) 0.03 (-0.02) 0.00 (+0.00)
1.22 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 (-5) 0 (0) 8792.90 (+1048.43) 6137 (+2743) 13408 (+432) 0.03 (-0.02) 0.00 (+0.00)
1.23 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 (-4) 0 (0) 653.80 (+252.30) 111 (-9) 1471 (+686) 0.03 (-0.01) 0.00 (+0.00)
1.24 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 (-4) 0 (0) 700.70 (-85.59) 148 (-27) 1286 (-184) 0.03 (-0.01) 0.00 (+0.00)
1.25 get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 (-4) 0 (0) 93.40 (-7.17) 8 (+2) 152 (-38) 0.03 (-0.01) 0.00 (+0.00)
1.26 download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (-4) 0 (0) 27.50 (+10.79) 2 (+1) 110 (+27) 0.03 (-0.01) 0.00 (+0.00)
1.27 get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (-4) 0 (0) 6.60 (-14.83) 1 (0) 14 (-83) 0.03 (-0.01) 0.00 (+0.00)
RestAPIUserSlow
2.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
2.1 search_licenses 1 (0) 0 (0) 104683.00 (-25475.00) 104683 (-25475) 104683 (-25475) 0.00 (+0.00) 0.00 (+0.00)
2.2 search_sboms_by_license 1 (0) 0 (0) 58913.00 (-11169.00) 58913 (-11169) 58913 (-11169) 0.00 (+0.00) 0.00 (+0.00)
2.3 search_purls_by_license 1 (0) 0 (0) 154221.00 (+22490.00) 154221 (+22490) 154221 (+22490) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete
3.0 logon 32 (-2) 0 (0) 10.00 (+1.03) 6 (0) 17 (+2) 0.11 (-0.01) 0.00 (+0.00)
3.1 delete_sbom_from_pool_sequential[100 SBOMs] 33 (-2) 0 (0) 2272.76 (+349.44) 305 (+54) 6963 (+2599) 0.11 (-0.01) 0.00 (+0.00)
Aggregated 403 (-32) 0 (0) 5051.56 (+668.65) 1 (0) 154221 (+22490) 1.34 (-0.11) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 10 (-4) 113892.30 (+13790.59) 103889 (+17282) 122858 (+13265) 0.03 (-0.01) 2.00 (-0.80)
RestAPIUserSlow 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete 1 (0) 32 (-2) 9283.53 (+463.35) 6982 (+313) 13544 (+2472) 0.11 (-0.01) 32.00 (-2.00)
Aggregated 6 (0) 42 (-6) 34190.38 (-1253.57) 6982 (+313) 122858 (+13265) 0.14 (-0.02) 34.00 (-2.80)

User Metrics

Errors

# Error
10 (-4) 404 Not Found: download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89]
10 (-4) 404 Not Found: get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89]