Goose Attack Report

Users: 7

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-11-24 02:16:4825-11-24 02:16:5500:00:070 → 7
Maintaining25-11-24 02:16:5525-11-24 02:21:5600:05:017
Decreasing25-11-24 02:21:5625-11-24 02:22:2000:00:240 ← 7

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 38 (0) 0 863.74 (-142.55) 76 (-101) 2428 (-234) 0.13 (+0.00) 0.00 (+0.00)
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (0) 10 15.20 (+5.20) 2 (0) 46 (+13) 0.03 (+0.00) 0.03 (+0.00)
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (0) 10 8.60 (+0.30) 1 (0) 46 (+20) 0.03 (+0.00) 0.03 (+0.00)
GET get_advisory_by_doc_id 10 (0) 0 18.30 (+2.20) 3 (0) 58 (+6) 0.03 (+0.00) 0.00 (+0.00)
GET get_analysis_latest_cpe 15 (0) 0 267.53 (+19.33) 131 (+4) 664 (+180) 0.05 (+0.00) 0.00 (+0.00)
GET get_analysis_status 15 (0) 0 6.80 (-0.47) 2 (0) 35 (-26) 0.05 (+0.00) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 (0) 0 519.30 (-218.20) 130 (+48) 1280 (-25) 0.03 (+0.00) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 15 (0) 0 1186.53 (-307.60) 415 (+53) 2325 (-1691) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 (0) 0 57480.13 (+1129.40) 46316 (-1505) 65424 (+2498) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 (0) 0 8220.40 (-392.70) 2825 (-4766) 12403 (+1128) 0.03 (+0.00) 0.00 (+0.00)
GET list_advisory 10 (0) 0 787.80 (-61.60) 278 (+113) 1273 (+103) 0.03 (+0.00) 0.00 (+0.00)
GET list_advisory_labels 15 (0) 0 14058.93 (+157.13) 10040 (+1601) 18903 (-1012) 0.05 (+0.00) 0.00 (+0.00)
GET list_advisory_paginated 10 (0) 0 438.10 (-77.90) 142 (-33) 663 (-220) 0.03 (+0.00) 0.00 (+0.00)
GET list_importer 11 (0) 0 13.36 (+9.73) 2 (+1) 54 (+46) 0.04 (+0.00) 0.00 (+0.00)
GET list_organizations 10 (0) 0 23.10 (+8.30) 2 (0) 73 (+28) 0.03 (+0.00) 0.00 (+0.00)
GET list_packages 11 (0) 0 420.82 (-125.00) 187 (+22) 627 (-515) 0.04 (+0.00) 0.00 (+0.00)
GET list_packages_paginated 11 (0) 0 329.82 (-56.27) 170 (+42) 423 (-199) 0.04 (+0.00) 0.00 (+0.00)
GET list_products 15 (0) 0 24.60 (+9.67) 7 (+4) 176 (+117) 0.05 (+0.00) 0.00 (+0.00)
GET list_sboms 15 (0) 0 1498.07 (+79.93) 606 (+57) 3407 (+433) 0.05 (+0.00) 0.00 (+0.00)
GET list_sboms_paginated 15 (0) 0 1520.87 (-1333.87) 220 (-319) 10275 (-2621) 0.05 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities 11 (0) 0 325.73 (-39.27) 116 (+20) 576 (+130) 0.04 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities_paginated 11 (0) 0 214.18 (+40.36) 84 (+52) 307 (+94) 0.04 (+0.00) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 (0) 0 67.20 (+43.10) 8 (+2) 191 (+124) 0.03 (+0.00) 0.00 (+0.00)
GET search_advisory 11 (+1) 0 1135.45 (+241.55) 235 (+34) 2121 (+666) 0.04 (+0.00) 0.00 (+0.00)
GET search_exact_purl 15 (0) 0 42.00 (+13.07) 7 (+5) 131 (+70) 0.05 (+0.00) 0.00 (+0.00)
GET search_licenses 1 (0) 0 102387.00 (+12979.00) 102387 (+12979) 102387 (+12979) 0.00 (+0.00) 0.00 (+0.00)
GET search_purls 15 (0) 0 20744.20 (+3436.13) 6346 (-4243) 29512 (+4703) 0.05 (+0.00) 0.00 (+0.00)
GET search_purls_by_license 1 (0) 0 153793.00 (+6322.00) 153793 (+6322) 153793 (+6322) 0.00 (+0.00) 0.00 (+0.00)
GET search_sboms_by_license 1 (0) 0 70511.00 (-7872.00) 70511 (-7872) 70511 (-7872) 0.00 (+0.00) 0.00 (+0.00)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 (0) 0 89.40 (-0.90) 8 (0) 279 (+99) 0.03 (+0.00) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 (0) 0 406.80 (-76.90) 184 (+89) 822 (+24) 0.03 (+0.00) 0.00 (+0.00)
Aggregated 367 (+1) 20 5299.00 (+116.77) 1 (0) 153793 (+6322) 1.22 (+0.00) 0.07 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 700 (-100) 1,000 (+100) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (-662) 2,000 (-662)
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 7 (+2) 9 (+4) 16 (+9) 25 (+5) 35 (+15) 46 (+13) 46 (+13) 46 (+13)
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 2 (-1) 2 (-3) 4 (-9) 8 (-6) 19 (+5) 46 (+20) 46 (+20) 46 (+20)
GET get_advisory_by_doc_id 10 (+1) 11 (+2) 12 (+3) 12 (-2) 54 (+7) 58 (+6) 58 (+6) 58 (+6)
GET get_analysis_latest_cpe 210 (0) 290 (+20) 310 (+30) 320 (+30) 330 (+20) 330 (+20) 664 (+184) 664 (+184)
GET get_analysis_status 4 (+1) 5 (+2) 6 (+2) 6 (+2) 14 (+5) 14 (+5) 35 (-26) 35 (-26)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 280 (-620) 300 (-600) 340 (-560) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET get_sbom[sha256:720e4451…a939656247164447] 1,000 (0) 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-2,000) 2,000 (-2,000)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 58,000 (+2,000) 58,000 (-1,000) 63,000 (+4,000) 63,000 (+3,000) 64,000 (+1,074) 64,000 (+1,074) 65,000 (+2,074) 65,000 (+2,074)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 7,000 (-1,000) 8,000 (0) 9,000 (+1,000) 11,000 (+2,000) 11,000 (+1,000) 12,000 (+1,000) 12,000 (+1,000) 12,000 (+1,000)
GET list_advisory 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory_labels 12,000 (-1,000) 15,000 (+2,000) 16,000 (+2,000) 18,000 (0) 18,000 (-1,000) 18,000 (-1,000) 18,903 (-1,012) 18,903 (-1,012)
GET list_advisory_paginated 500 (-100) 500 (-100) 500 (-100) 600 (0) 663 (-37) 663 (-220) 663 (-220) 663 (-220)
GET list_importer 4 (+1) 5 (+1) 5 (0) 16 (+11) 53 (+47) 53 (+47) 54 (+46) 54 (+46)
GET list_organizations 4 (-2) 4 (-4) 36 (+23) 51 (+25) 52 (+15) 73 (+28) 73 (+28) 73 (+28)
GET list_packages 500 (+20) 500 (+10) 600 (+100) 600 (0) 600 (-400) 600 (-400) 600 (-400) 600 (-400)
GET list_packages_paginated 380 (-30) 380 (-50) 390 (-110) 410 (-90) 420 (-80) 420 (-80) 420 (-180) 420 (-180)
GET list_products 9 (-1) 11 (+1) 17 (+5) 18 (+4) 46 (-3) 46 (-3) 176 (+117) 176 (+117)
GET list_sboms 700 (-300) 900 (-100) 3,000 (+2,000) 3,000 (+1,000) 3,000 (+26) 3,000 (+26) 3,000 (+26) 3,000 (+26)
GET list_sboms_paginated 1,000 (-1,000) 1,000 (-1,000) 1,000 (-2,000) 1,000 (-2,000) 2,000 (-2,000) 2,000 (-2,000) 10,000 (-2,896) 10,000 (-2,896)
GET list_vulnerabilities 400 (-30) 410 (-30) 410 (-30) 420 (-20) 490 (+50) 490 (+50) 576 (+130) 576 (+130)
GET list_vulnerabilities_paginated 230 (+30) 240 (+40) 300 (+100) 300 (+90) 300 (+90) 300 (+90) 307 (+97) 307 (+97)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 50 (+38) 58 (+42) 62 (+39) 69 (+38) 160 (+103) 190 (+123) 190 (+123) 190 (+123)
GET search_advisory 1,000 (+300) 2,000 (+1,200) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000)
GET search_exact_purl 46 (+27) 47 (+25) 52 (-6) 52 (-6) 59 (-1) 59 (-1) 130 (+69) 130 (+69)
GET search_licenses 102,387 (+12,979) 102,387 (+12,979) 102,387 (+12,979) 102,387 (+12,979) 102,387 (+12,979) 102,387 (+12,979) 102,387 (+12,979) 102,387 (+12,979)
GET search_purls 22,000 (+6,000) 24,000 (+8,000) 24,000 (0) 24,000 (0) 24,000 (-809) 24,000 (-809) 29,512 (+4,703) 29,512 (+4,703)
GET search_purls_by_license 153,793 (+6,322) 153,793 (+6,322) 153,793 (+6,322) 153,793 (+6,322) 153,793 (+6,322) 153,793 (+6,322) 153,793 (+6,322) 153,793 (+6,322)
GET search_sboms_by_license 70,511 (-7,872) 70,511 (-7,872) 70,511 (-7,872) 70,511 (-7,872) 70,511 (-7,872) 70,511 (-7,872) 70,511 (-7,872) 70,511 (-7,872)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 17 (-63) 25 (-58) 120 (+30) 120 (-50) 279 (+99) 279 (+99) 279 (+99) 279 (+99)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 300 (-200) 320 (-280) 390 (-210) 500 (-200) 800 (+2) 800 (+2) 800 (+2) 800 (+2)
Aggregated 320 (-120) 500 (-200) 900 (-100) 2,000 (0) 15,000 (+2,000) 30,000 (+5,000) 64,000 (+1,000) 153,793 (+6,793)

Status Code Metrics

Method Name Status Codes
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 38 [200]
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 [404]
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 [404]
GET get_advisory_by_doc_id 10 [200]
GET get_analysis_latest_cpe 15 [200]
GET get_analysis_status 15 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 15 [200]
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 [200]
GET list_advisory 10 [200]
GET list_advisory_labels 15 [200]
GET list_advisory_paginated 10 [200]
GET list_importer 11 [200]
GET list_organizations 10 [200]
GET list_packages 11 [200]
GET list_packages_paginated 11 [200]
GET list_products 15 [200]
GET list_sboms 15 [200]
GET list_sboms_paginated 15 [200]
GET list_vulnerabilities 11 [200]
GET list_vulnerabilities_paginated 11 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 [200]
GET search_advisory 11 [200]
GET search_exact_purl 15 [200]
GET search_licenses 1 [200]
GET search_purls 15 [200]
GET search_purls_by_license 1 [200]
GET search_sboms_by_license 1 [200]
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 [200]
Aggregated 347 [200], 20 [404]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 10 (0) 0 (0) 13.20 (-1.10) 11 (+4) 16 (-4) 0.03 (+0.00) 0.00 (+0.00)
1.1 list_organizations 10 (0) 0 (0) 23.20 (+8.30) 2 (0) 73 (+28) 0.03 (+0.00) 0.00 (+0.00)
1.2 list_advisory 10 (0) 0 (0) 787.80 (-61.70) 278 (+113) 1273 (+103) 0.03 (+0.00) 0.00 (+0.00)
1.3 list_advisory_paginated 10 (0) 0 (0) 438.20 (-77.80) 142 (-33) 663 (-220) 0.03 (+0.00) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 10 (0) 0 (0) 18.40 (+2.30) 3 (0) 58 (+6) 0.03 (+0.00) 0.00 (+0.00)
1.5 search_advisory 11 (+1) 0 (0) 1135.64 (+241.74) 235 (+34) 2121 (+666) 0.04 (+0.00) 0.00 (+0.00)
1.6 list_vulnerabilities 11 (0) 0 (0) 325.73 (-39.36) 116 (+20) 576 (+130) 0.04 (+0.00) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 11 (0) 0 (0) 214.27 (+40.45) 84 (+52) 307 (+94) 0.04 (+0.00) 0.00 (+0.00)
1.8 list_importer 11 (0) 0 (0) 13.36 (+9.64) 2 (+1) 54 (+46) 0.04 (+0.00) 0.00 (+0.00)
1.9 list_packages 11 (0) 0 (0) 421.09 (-124.82) 187 (+22) 627 (-515) 0.04 (+0.00) 0.00 (+0.00)
1.10 list_packages_paginated 11 (0) 0 (0) 329.91 (-56.27) 170 (+42) 423 (-199) 0.04 (+0.00) 0.00 (+0.00)
1.11 search_purls 15 (0) 0 (0) 20744.27 (+3436.20) 6346 (-4243) 29512 (+4703) 0.05 (+0.00) 0.00 (+0.00)
1.12 search_exact_purl 15 (0) 0 (0) 42.00 (+13.07) 7 (+5) 131 (+70) 0.05 (+0.00) 0.00 (+0.00)
1.13 list_products 15 (0) 0 (0) 24.67 (+9.73) 7 (+4) 176 (+117) 0.05 (+0.00) 0.00 (+0.00)
1.14 list_sboms 15 (0) 0 (0) 1498.07 (+79.93) 606 (+57) 3407 (+433) 0.05 (+0.00) 0.00 (+0.00)
1.15 list_sboms_paginated 15 (0) 0 (0) 1520.87 (-1333.87) 220 (-319) 10275 (-2621) 0.05 (+0.00) 0.00 (+0.00)
1.16 get_analysis_status 15 (0) 0 (0) 6.87 (-0.40) 2 (0) 35 (-26) 0.05 (+0.00) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 15 (0) 0 (0) 267.60 (+19.40) 131 (+4) 664 (+180) 0.05 (+0.00) 0.00 (+0.00)
1.18 list_advisory_labels 15 (0) 0 (0) 14059.00 (+157.07) 10040 (+1601) 18903 (-1012) 0.05 (+0.00) 0.00 (+0.00)
1.19 get_sbom[sha256:720e4451…a939656247164447] 15 (0) 0 (0) 1186.60 (-307.60) 415 (+53) 2325 (-1691) 0.05 (+0.00) 0.00 (+0.00)
1.20 get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 (0) 0 (0) 57480.20 (+1129.33) 46316 (-1506) 65424 (+2498) 0.05 (+0.00) 0.00 (+0.00)
1.21 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 (0) 0 (0) 67.20 (+43.10) 8 (+2) 191 (+124) 0.03 (+0.00) 0.00 (+0.00)
1.22 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 (0) 0 (0) 8220.50 (-392.70) 2825 (-4766) 12403 (+1128) 0.03 (+0.00) 0.00 (+0.00)
1.23 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 (0) 0 (0) 406.80 (-76.90) 184 (+89) 822 (+24) 0.03 (+0.00) 0.00 (+0.00)
1.24 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 (0) 0 (0) 519.30 (-218.20) 130 (+48) 1280 (-25) 0.03 (+0.00) 0.00 (+0.00)
1.25 get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 (0) 0 (0) 89.60 (-0.70) 8 (0) 279 (+99) 0.03 (+0.00) 0.00 (+0.00)
1.26 download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (0) 0 (0) 15.20 (+5.10) 2 (0) 46 (+13) 0.03 (+0.00) 0.00 (+0.00)
1.27 get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (0) 0 (0) 8.60 (+0.30) 1 (0) 46 (+20) 0.03 (+0.00) 0.00 (+0.00)
RestAPIUserSlow
2.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
2.1 search_licenses 1 (0) 0 (0) 102387.00 (+12979.00) 102387 (+12979) 102387 (+12979) 0.00 (+0.00) 0.00 (+0.00)
2.2 search_sboms_by_license 1 (0) 0 (0) 70511.00 (-7872.00) 70511 (-7872) 70511 (-7872) 0.00 (+0.00) 0.00 (+0.00)
2.3 search_purls_by_license 1 (0) 0 (0) 153793.00 (+6322.00) 153793 (+6322) 153793 (+6322) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete
3.0 logon 38 (+1) 0 (0) 9.87 (+0.76) 6 (0) 16 (0) 0.13 (+0.00) 0.00 (+0.00)
3.1 delete_sbom_from_pool_sequential[100 SBOMs] 38 (0) 0 (0) 864.16 (-142.32) 76 (-101) 2428 (-234) 0.13 (+0.00) 0.00 (+0.00)
Aggregated 415 (+2) 0 (0) 4686.10 (+93.62) 1 (0) 153793 (+6322) 1.38 (+0.01) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 10 (0) 109828.40 (+6607.30) 96994 (-2558) 122374 (+16273) 0.03 (+0.00) 2.00 (+0.00)
RestAPIUserSlow 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete 1 (0) 38 (+1) 7969.55 (-101.15) 6822 (+157) 9644 (+91) 0.13 (+0.00) 38.00 (+1.00)
Aggregated 6 (0) 48 (+1) 29190.15 (+874.68) 6822 (+157) 122374 (+16273) 0.16 (+0.00) 40.00 (+1.00)

User Metrics

Errors

# Error
10 (0) 404 Not Found: download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89]
10 (0) 404 Not Found: get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89]