Goose Attack Report

Users: 7

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-12-07 02:17:0425-12-07 02:17:1100:00:070 → 7
Maintaining25-12-07 02:17:1125-12-07 02:22:1100:05:007
Decreasing25-12-07 02:22:1125-12-07 02:22:2500:00:140 ← 7

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 38 (-1) 0 1009.66 (+73.91) 200 (+122) 2799 (+514) 0.13 (-0.00) 0.00 (+0.00)
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (0) 10 6.50 (-2.40) 3 (+1) 16 (-32) 0.03 (+0.00) 0.03 (+0.00)
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (0) 10 25.40 (+9.90) 1 (0) 178 (+87) 0.03 (+0.00) 0.03 (+0.00)
GET get_advisory_by_doc_id 10 (0) 0 17.30 (+7.80) 6 (+2) 71 (+57) 0.03 (+0.00) 0.00 (+0.00)
GET get_analysis_latest_cpe 15 (0) 0 263.60 (-46.80) 93 (-46) 489 (-128) 0.05 (+0.00) 0.00 (+0.00)
GET get_analysis_status 15 (0) 0 5.20 (-2.53) 1 (-1) 15 (-44) 0.05 (+0.00) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 (0) 0 619.20 (-133.50) 217 (+100) 1011 (-598) 0.03 (+0.00) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 15 (0) 0 1355.27 (+74.67) 604 (+13) 2365 (+184) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 (0) 0 56929.67 (-682.93) 45221 (-3488) 65444 (+1424) 0.05 (+0.00) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 (0) 0 8668.60 (+1921.40) 6994 (+4214) 11535 (-603) 0.03 (+0.00) 0.00 (+0.00)
GET list_advisory 10 (0) 0 1063.80 (+65.80) 409 (+80) 1273 (-152) 0.03 (+0.00) 0.00 (+0.00)
GET list_advisory_labels 15 (0) 0 15455.33 (+1273.93) 12031 (+2527) 21819 (+1956) 0.05 (+0.00) 0.00 (+0.00)
GET list_advisory_paginated 10 (0) 0 578.70 (+31.40) 347 (+154) 783 (+13) 0.03 (+0.00) 0.00 (+0.00)
GET list_importer 11 (0) 0 3.27 (-0.55) 1 (0) 7 (-6) 0.04 (+0.00) 0.00 (+0.00)
GET list_organizations 10 (0) 0 12.40 (-12.30) 2 (+1) 47 (-7) 0.03 (+0.00) 0.00 (+0.00)
GET list_packages 11 (0) 0 528.73 (+120.82) 205 (+83) 967 (+347) 0.04 (+0.00) 0.00 (+0.00)
GET list_packages_paginated 11 (0) 0 389.09 (+35.45) 128 (-49) 508 (-7) 0.04 (+0.00) 0.00 (+0.00)
GET list_products 15 (0) 0 9.27 (-6.93) 3 (-2) 17 (-92) 0.05 (+0.00) 0.00 (+0.00)
GET list_sboms 15 (0) 0 834.13 (-496.27) 609 (+59) 2087 (-895) 0.05 (+0.00) 0.00 (+0.00)
GET list_sboms_paginated 15 (0) 0 1449.00 (-271.27) 892 (+466) 2403 (-4061) 0.05 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities 11 (0) 0 358.64 (+43.09) 109 (+18) 515 (+39) 0.04 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities_paginated 11 (0) 0 208.64 (-6.27) 83 (-1) 254 (-52) 0.04 (+0.00) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 (0) 0 51.70 (-7.10) 4 (-1) 156 (-37) 0.03 (+0.00) 0.00 (+0.00)
GET search_advisory 10 (-1) 0 1692.20 (+207.56) 257 (-26) 2308 (-194) 0.03 (-0.00) 0.00 (+0.00)
GET search_exact_purl 15 (0) 0 29.20 (-1.60) 3 (-2) 61 (-31) 0.05 (+0.00) 0.00 (+0.00)
GET search_licenses 1 (0) 0 77511.00 (-26014.00) 77511 (-26014) 77511 (-26014) 0.00 (+0.00) 0.00 (+0.00)
GET search_purls 15 (0) 0 18194.53 (-1631.67) 12411 (+6700) 23796 (-4087) 0.05 (+0.00) 0.00 (+0.00)
GET search_purls_by_license 1 (0) 0 157255.00 (+632.00) 157255 (+632) 157255 (+632) 0.00 (+0.00) 0.00 (+0.00)
GET search_sboms_by_license 1 (0) 0 81615.00 (+18540.00) 81615 (+18540) 81615 (+18540) 0.00 (+0.00) 0.00 (+0.00)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 (0) 0 82.60 (-5.20) 15 (+2) 133 (-57) 0.03 (+0.00) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 (0) 0 474.60 (-39.40) 143 (-50) 1292 (+288) 0.03 (+0.00) 0.00 (+0.00)
Aggregated 366 (-2) 20 5251.17 (-0.72) 1 (0) 157255 (+632) 1.22 (-0.01) 0.07 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 900 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,799 (+799) 2,799 (+799)
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 6 (+2) 7 (+2) 7 (+2) 7 (+2) 7 (-5) 16 (-32) 16 (-32) 16 (-32)
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 3 (0) 4 (+1) 4 (0) 7 (+2) 50 (+7) 178 (+87) 178 (+87) 178 (+87)
GET get_advisory_by_doc_id 10 (0) 11 (+1) 14 (+2) 17 (+5) 18 (+5) 71 (+57) 71 (+57) 71 (+57)
GET get_analysis_latest_cpe 290 (+10) 290 (+10) 300 (-80) 300 (-90) 470 (-130) 470 (-130) 489 (-111) 489 (-111)
GET get_analysis_status 4 (0) 4 (0) 7 (+2) 7 (+1) 8 (+1) 8 (+1) 15 (-44) 15 (-44)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 420 (+30) 600 (-100) 1,000 (0) 1,000 (0) 1,000 (-609) 1,000 (-609) 1,000 (-609) 1,000 (-609)
GET get_sbom[sha256:720e4451…a939656247164447] 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 57,000 (-2,000) 60,000 (+1,000) 62,000 (+1,000) 62,000 (+1,000) 65,000 (+2,000) 65,000 (+2,000) 65,000 (+1,000) 65,000 (+1,000)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 8,000 (+1,000) 9,000 (+2,000) 9,000 (+2,000) 9,000 (+2,000) 11,000 (+2,000) 11,535 (-465) 11,535 (-465) 11,535 (-465)
GET list_advisory 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory_labels 13,000 (+1,000) 14,000 (+1,000) 19,000 (+2,000) 20,000 (+137) 21,819 (+1,956) 21,819 (+1,956) 21,819 (+1,956) 21,819 (+1,956)
GET list_advisory_paginated 600 (0) 600 (0) 600 (0) 600 (-100) 700 (0) 783 (+13) 783 (+13) 783 (+13)
GET list_importer 4 (+1) 4 (+1) 4 (+1) 4 (0) 4 (-3) 4 (-3) 7 (-6) 7 (-6)
GET list_organizations 4 (+1) 6 (-33) 6 (-37) 9 (-39) 40 (-13) 47 (-7) 47 (-7) 47 (-7)
GET list_packages 440 (+50) 490 (+90) 500 (-100) 700 (+100) 900 (+300) 900 (+300) 967 (+367) 967 (+367)
GET list_packages_paginated 450 (+130) 470 (+60) 480 (-10) 490 (-10) 500 (0) 500 (0) 500 (0) 500 (0)
GET list_products 11 (+1) 12 (+2) 13 (+1) 13 (0) 14 (-4) 14 (-4) 17 (-92) 17 (-92)
GET list_sboms 700 (-100) 700 (-200) 900 (-1,100) 900 (-2,082) 1,000 (-1,982) 1,000 (-1,982) 2,000 (-982) 2,000 (-982)
GET list_sboms_paginated 1,000 (0) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000) 2,000 (-4,000) 2,000 (-4,000)
GET list_vulnerabilities 470 (+100) 470 (+100) 480 (+90) 500 (+40) 500 (+30) 500 (+30) 500 (+24) 500 (+24)
GET list_vulnerabilities_paginated 230 (-10) 230 (-20) 250 (-50) 250 (-50) 250 (-50) 250 (-50) 250 (-56) 250 (-56)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 16 (-31) 59 (+12) 60 (+7) 84 (+22) 95 (-5) 156 (-34) 156 (-34) 156 (-34)
GET search_advisory 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (-502) 2,000 (-502)
GET search_exact_purl 9 (-5) 49 (+31) 55 (0) 58 (+3) 59 (+2) 59 (+2) 61 (-31) 61 (-31)
GET search_licenses 77,511 (-26,014) 77,511 (-26,014) 77,511 (-26,014) 77,511 (-26,014) 77,511 (-26,014) 77,511 (-26,014) 77,511 (-26,014) 77,511 (-26,014)
GET search_purls 19,000 (-3,000) 20,000 (-2,000) 23,000 (0) 23,796 (+796) 23,796 (+796) 23,796 (+796) 23,796 (-4,087) 23,796 (-4,087)
GET search_purls_by_license 157,255 (+632) 157,255 (+632) 157,255 (+632) 157,255 (+632) 157,255 (+632) 157,255 (+632) 157,255 (+632) 157,255 (+632)
GET search_sboms_by_license 81,615 (+18,540) 81,615 (+18,540) 81,615 (+18,540) 81,615 (+18,540) 81,615 (+18,540) 81,615 (+18,540) 81,615 (+18,540) 81,615 (+18,540)
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 94 (+40) 94 (+21) 97 (-33) 110 (-30) 120 (-70) 130 (-60) 130 (-60) 130 (-60)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 310 (+10) 330 (-60) 400 (-400) 700 (-100) 900 (0) 1,000 (0) 1,000 (0) 1,000 (0)
Aggregated 450 (+40) 700 (+100) 1,000 (0) 2,000 (0) 13,000 (0) 24,000 (-4,000) 65,000 (+2,000) 157,000 (+377)

Status Code Metrics

Method Name Status Codes
DELETE delete_sbom_from_pool_sequential[100 SBOMs] 38 [200]
GET download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 [404]
GET get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 [404]
GET get_advisory_by_doc_id 10 [200]
GET get_analysis_latest_cpe 15 [200]
GET get_analysis_status 15 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 15 [200]
GET get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 [200]
GET list_advisory 10 [200]
GET list_advisory_labels 15 [200]
GET list_advisory_paginated 10 [200]
GET list_importer 11 [200]
GET list_organizations 10 [200]
GET list_packages 11 [200]
GET list_packages_paginated 11 [200]
GET list_products 15 [200]
GET list_sboms 15 [200]
GET list_sboms_paginated 15 [200]
GET list_vulnerabilities 11 [200]
GET list_vulnerabilities_paginated 11 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 [200]
GET search_advisory 10 [200]
GET search_exact_purl 15 [200]
GET search_licenses 1 [200]
GET search_purls 15 [200]
GET search_purls_by_license 1 [200]
GET search_sboms_by_license 1 [200]
POST get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 [200]
Aggregated 20 [404], 346 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 10 (0) 0 (0) 14.10 (+2.10) 8 (0) 20 (+4) 0.03 (+0.00) 0.00 (+0.00)
1.1 list_organizations 10 (0) 0 (0) 12.60 (-12.20) 2 (0) 47 (-7) 0.03 (+0.00) 0.00 (+0.00)
1.2 list_advisory 10 (0) 0 (0) 1063.80 (+65.80) 409 (+80) 1273 (-152) 0.03 (+0.00) 0.00 (+0.00)
1.3 list_advisory_paginated 10 (0) 0 (0) 578.80 (+31.50) 347 (+154) 783 (+13) 0.03 (+0.00) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 10 (0) 0 (0) 17.40 (+7.80) 6 (+2) 71 (+57) 0.03 (+0.00) 0.00 (+0.00)
1.5 search_advisory 10 (-1) 0 (0) 1692.30 (+207.57) 257 (-26) 2308 (-194) 0.03 (-0.00) 0.00 (+0.00)
1.6 list_vulnerabilities 11 (0) 0 (0) 358.82 (+43.27) 109 (+18) 515 (+39) 0.04 (+0.00) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 11 (0) 0 (0) 208.64 (-6.55) 83 (-1) 254 (-52) 0.04 (+0.00) 0.00 (+0.00)
1.8 list_importer 11 (0) 0 (0) 3.36 (-0.55) 1 (0) 7 (-7) 0.04 (+0.00) 0.00 (+0.00)
1.9 list_packages 11 (0) 0 (0) 528.82 (+120.91) 205 (+83) 967 (+347) 0.04 (+0.00) 0.00 (+0.00)
1.10 list_packages_paginated 11 (0) 0 (0) 389.18 (+35.45) 128 (-49) 508 (-7) 0.04 (+0.00) 0.00 (+0.00)
1.11 search_purls 15 (0) 0 (0) 18194.67 (-1631.67) 12411 (+6700) 23796 (-4087) 0.05 (+0.00) 0.00 (+0.00)
1.12 search_exact_purl 15 (0) 0 (0) 29.20 (-1.60) 3 (-2) 61 (-31) 0.05 (+0.00) 0.00 (+0.00)
1.13 list_products 15 (0) 0 (0) 9.33 (-6.93) 3 (-2) 17 (-92) 0.05 (+0.00) 0.00 (+0.00)
1.14 list_sboms 15 (0) 0 (0) 834.13 (-496.33) 609 (+59) 2087 (-895) 0.05 (+0.00) 0.00 (+0.00)
1.15 list_sboms_paginated 15 (0) 0 (0) 1449.00 (-271.27) 892 (+466) 2403 (-4061) 0.05 (+0.00) 0.00 (+0.00)
1.16 get_analysis_status 15 (0) 0 (0) 5.33 (-2.47) 1 (-1) 15 (-44) 0.05 (+0.00) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 15 (0) 0 (0) 263.67 (-46.87) 93 (-46) 489 (-128) 0.05 (+0.00) 0.00 (+0.00)
1.18 list_advisory_labels 15 (0) 0 (0) 15455.40 (+1273.93) 12031 (+2527) 21819 (+1955) 0.05 (+0.00) 0.00 (+0.00)
1.19 get_sbom[sha256:720e4451…a939656247164447] 15 (0) 0 (0) 1355.47 (+74.80) 604 (+13) 2365 (+184) 0.05 (+0.00) 0.00 (+0.00)
1.20 get_sbom_advisories[sha256:87fd06bc…9d7b8304c0d2d9b2] 15 (0) 0 (0) 56929.67 (-683.07) 45221 (-3488) 65444 (+1424) 0.05 (+0.00) 0.00 (+0.00)
1.21 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 10 (0) 0 (0) 51.70 (-7.10) 4 (-1) 156 (-37) 0.03 (+0.00) 0.00 (+0.00)
1.22 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 10 (0) 0 (0) 8668.60 (+1921.30) 6994 (+4214) 11535 (-603) 0.03 (+0.00) 0.00 (+0.00)
1.23 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 10 (0) 0 (0) 474.80 (-39.40) 144 (-50) 1292 (+287) 0.03 (+0.00) 0.00 (+0.00)
1.24 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 10 (0) 0 (0) 619.20 (-133.70) 217 (+100) 1011 (-598) 0.03 (+0.00) 0.00 (+0.00)
1.25 get_recommendations[pkg:rpm/redhat/…e-metrics@2.13.8] 10 (0) 0 (0) 82.80 (-5.10) 15 (+2) 134 (-57) 0.03 (+0.00) 0.00 (+0.00)
1.26 download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (0) 0 (0) 6.50 (-2.50) 3 (+1) 16 (-32) 0.03 (+0.00) 0.00 (+0.00)
1.27 get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89] 10 (0) 0 (0) 25.50 (+10.00) 1 (0) 178 (+87) 0.03 (+0.00) 0.00 (+0.00)
RestAPIUserSlow
2.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
2.1 search_licenses 1 (0) 0 (0) 77512.00 (-26013.00) 77512 (-26013) 77512 (-26013) 0.00 (+0.00) 0.00 (+0.00)
2.2 search_sboms_by_license 1 (0) 0 (0) 81615.00 (+18540.00) 81615 (+18540) 81615 (+18540) 0.00 (+0.00) 0.00 (+0.00)
2.3 search_purls_by_license 1 (0) 0 (0) 157255.00 (+632.00) 157255 (+632) 157255 (+632) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete
3.0 logon 38 (0) 0 (0) 10.58 (+0.21) 6 (0) 23 (+2) 0.13 (+0.00) 0.00 (+0.00)
3.1 delete_sbom_from_pool_sequential[100 SBOMs] 38 (-1) 0 (0) 1009.87 (+73.95) 200 (+121) 2799 (+514) 0.13 (-0.00) 0.00 (+0.00)
Aggregated 414 (-2) 0 (0) 4642.34 (-3.56) 1 (0) 157255 (+632) 1.38 (-0.01) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 10 (0) 107834.60 (+524.10) 102695 (+9916) 111043 (-5966) 0.03 (+0.00) 2.00 (+0.00)
RestAPIUserSlow 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUserDelete 1 (0) 38 (0) 7981.55 (+166.21) 6608 (+274) 10593 (+1606) 0.13 (+0.00) 38.00 (+0.00)
Aggregated 6 (0) 48 (0) 28784.27 (+240.77) 6608 (+274) 111043 (-5966) 0.16 (+0.00) 40.00 (+0.00)

User Metrics

Errors

# Error
10 (0) 404 Not Found: download_advisory[24ae57c3-4b57-4…2c1-83ae26059a89]
10 (0) 404 Not Found: get_advisory[24ae57c3-4b57-4…2c1-83ae26059a89]