Goose Attack Report

Users: 7

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing26-03-24 02:29:1026-03-24 02:29:1700:00:070 → 7
Maintaining26-03-24 02:29:1726-03-24 02:59:1800:30:017
Decreasing26-03-24 02:59:1826-03-24 02:59:2100:00:030 ← 7

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET download_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 45 (0) 0 219.13 (+25.04) 75 (+34) 588 (+121) 0.03 (+0.00) 0.00 (+0.00)
GET get_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 42 (-3) 0 175.19 (+25.77) 74 (+46) 545 (+232) 0.02 (-0.00) 0.00 (+0.00)
GET get_advisory_by_doc_id 41 (-4) 0 25.78 (-6.86) 4 (+1) 117 (-147) 0.02 (-0.00) 0.00 (+0.00)
GET get_analysis_latest_cpe 45 (0) 0 39.22 (-10.00) 4 (-4) 212 (+101) 0.03 (+0.00) 0.00 (+0.00)
GET get_analysis_status 45 (0) 0 8.93 (-9.44) 2 (0) 78 (+8) 0.03 (+0.00) 0.00 (+0.00)
GET get_purl_details[0000054a-a69b-5…520-80752db183e6] 45 (0) 0 205.36 (-25.27) 55 (-22) 443 (-127) 0.03 (+0.00) 0.00 (+0.00)
GET get_sbom[sha256:a3442b37…3040057f79c70669] 45 (0) 0 9960.98 (-416.91) 385 (+90) 16284 (-4977) 0.03 (+0.00) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019c4a…8ba-3cc0260ef778] 45 (0) 0 22.22 (+5.18) 3 (0) 86 (+2) 0.03 (+0.00) 0.00 (+0.00)
GET list_advisory 41 (-4) 0 691.90 (+85.46) 173 (+11) 1982 (+850) 0.02 (-0.00) 0.00 (+0.00)
GET list_advisory_labels 45 (0) 0 16131.73 (+951.84) 6377 (+1264) 20797 (-1683) 0.03 (+0.00) 0.00 (+0.00)
GET list_advisory_paginated 41 (-4) 0 509.78 (+56.29) 158 (-23) 1412 (+330) 0.02 (-0.00) 0.00 (+0.00)
GET list_importer 41 (-4) 0 14.32 (-4.82) 1 (0) 71 (-12) 0.02 (-0.00) 0.00 (+0.00)
GET list_organizations 41 (-4) 0 314.05 (+15.25) 108 (+3) 779 (+185) 0.02 (-0.00) 0.00 (+0.00)
GET list_packages 41 (-5) 0 516.66 (+47.25) 123 (-49) 1158 (+43) 0.02 (-0.00) 0.00 (+0.00)
GET list_packages_paginated 42 (-4) 0 433.31 (+44.22) 111 (-75) 660 (+46) 0.02 (-0.00) 0.00 (+0.00)
GET list_products 45 (-5) 0 11.78 (+1.16) 5 (0) 30 (-7) 0.03 (-0.00) 0.00 (+0.00)
GET list_sboms 45 (-5) 0 144898.42 (+3665.30) 117878 (+23278) 179980 (-60192) 0.03 (-0.00) 0.00 (+0.00)
GET list_sboms_paginated 45 (0) 0 823.00 (-361.91) 297 (-338) 2494 (+370) 0.03 (+0.00) 0.00 (+0.00)
GET list_vulnerabilities 41 (-4) 0 612.66 (+60.44) 74 (-110) 1188 (+293) 0.02 (-0.00) 0.00 (+0.00)
GET list_vulnerabilities_paginated 41 (-4) 0 414.85 (+28.03) 112 (-37) 729 (+103) 0.02 (-0.00) 0.00 (+0.00)
GET sbom_by_package[pkg:oci/web-ter…-bundle&tag=1.11] 45 (0) 0 145.69 (-25.91) 45 (+6) 498 (+101) 0.03 (+0.00) 0.00 (+0.00)
GET search_advisory 41 (-4) 0 1715.59 (+408.76) 159 (-153) 4801 (+777) 0.02 (-0.00) 0.00 (+0.00)
GET search_exact_purl 45 (-5) 0 209.13 (+51.43) 156 (+89) 359 (0) 0.03 (-0.00) 0.00 (+0.00)
GET search_licenses 187 (+34) 0 21.11 (-8.14) 4 (-1) 262 (+83) 0.10 (+0.02) 0.00 (+0.00)
GET search_purls 46 (-4) 0 21187.35 (+2842.91) 15363 (+4760) 27363 (-778) 0.03 (-0.00) 0.00 (+0.00)
GET search_purls_by_license 188 (+34) 0 9547.53 (-2106.19) 3985 (-313) 38057 (-4273) 0.10 (+0.02) 0.00 (+0.00)
GET search_sboms_by_license 187 (+34) 0 25.99 (-3.53) 2 (-1) 412 (+129) 0.10 (+0.02) 0.00 (+0.00)
POST get_recommendations[pkg:maven/io.ne…8.1.redhat-00033] 45 (0) 0 1196.56 (-28.82) 538 (-21) 3043 (+672) 0.03 (+0.00) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/squid] 45 (0) 0 5.02 (+2.07) 1 (0) 46 (+33) 0.03 (+0.00) 0.00 (+0.00)
Aggregated 1691 (+39) 0 6402.03 (-432.75) 1 (0) 179980 (-60192) 0.94 (+0.02) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET download_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 200 (+10) 210 (+10) 220 (0) 270 (-10) 310 (+10) 370 (+40) 588 (+121) 588 (+121)
GET get_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 180 (+40) 190 (+20) 200 (0) 210 (+10) 220 (0) 280 (+50) 500 (+190) 500 (+190)
GET get_advisory_by_doc_id 12 (-2) 15 (-2) 20 (-7) 42 (-5) 60 (-14) 98 (+23) 117 (-143) 117 (-143)
GET get_analysis_latest_cpe 20 (-31) 21 (-33) 60 (-3) 71 (-7) 84 (-12) 91 (-7) 210 (+100) 210 (+100)
GET get_analysis_status 5 (-5) 5 (-9) 6 (-17) 7 (-22) 15 (-39) 40 (-22) 78 (+8) 78 (+8)
GET get_purl_details[0000054a-a69b-5…520-80752db183e6] 200 (-10) 210 (-20) 230 (-40) 280 (-10) 300 (-90) 370 (-30) 440 (-130) 440 (-130)
GET get_sbom[sha256:a3442b37…3040057f79c70669] 13,000 (0) 14,000 (+1,000) 14,000 (0) 14,000 (0) 15,000 (-1,000) 16,000 (-1,000) 16,000 (-5,000) 16,000 (-5,000)
GET get_sbom_license_ids[urn:uuid:019c4a…8ba-3cc0260ef778] 13 (+4) 19 (+9) 29 (+15) 39 (+20) 48 (-4) 59 (-3) 86 (+2) 86 (+2)
GET list_advisory 600 (+100) 800 (+100) 800 (+100) 800 (0) 900 (0) 900 (-100) 1,982 (+982) 1,982 (+982)
GET list_advisory_labels 16,000 (+1,000) 17,000 (+2,000) 17,000 (+1,000) 18,000 (0) 20,000 (+2,000) 20,000 (+1,000) 20,797 (-1,203) 20,797 (-1,203)
GET list_advisory_paginated 500 (+50) 600 (+110) 600 (+100) 600 (+100) 600 (0) 600 (0) 1,000 (0) 1,000 (0)
GET list_importer 6 (0) 7 (0) 11 (-2) 15 (-29) 56 (-6) 63 (-13) 71 (-12) 71 (-12)
GET list_organizations 300 (+20) 330 (+10) 370 (+20) 380 (0) 380 (-20) 410 (-60) 779 (+185) 779 (+185)
GET list_packages 500 (+40) 500 (+10) 600 (+100) 600 (0) 700 (0) 700 (-100) 1,000 (0) 1,000 (0)
GET list_packages_paginated 490 (+70) 500 (+60) 500 (+20) 600 (+110) 600 (+100) 600 (+100) 660 (+60) 660 (+60)
GET list_products 11 (+2) 12 (+2) 14 (+2) 15 (+1) 16 (0) 20 (+1) 30 (-7) 30 (-7)
GET list_sboms 137,000 (+9,000) 144,000 (0) 165,000 (+19,000) 176,000 (+18,000) 179,980 (-3,020) 179,980 (-33,020) 179,980 (-60,020) 179,980 (-60,020)
GET list_sboms_paginated 900 (-100) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (0)
GET list_vulnerabilities 600 (0) 700 (+100) 700 (0) 800 (+100) 800 (-95) 800 (-95) 1,000 (+105) 1,000 (+105)
GET list_vulnerabilities_paginated 430 (+40) 490 (+70) 500 (+20) 500 (+10) 500 (0) 600 (0) 700 (+100) 700 (+100)
GET sbom_by_package[pkg:oci/web-ter…-bundle&tag=1.11] 130 (-40) 160 (-20) 170 (-30) 180 (-30) 200 (-80) 210 (-140) 498 (+101) 498 (+101)
GET search_advisory 900 (+100) 1,000 (0) 3,000 (+2,000) 3,000 (+1,000) 4,801 (+1,801) 4,801 (+801) 4,801 (+801) 4,801 (+801)
GET search_exact_purl 200 (+50) 200 (+50) 200 (+40) 210 (+20) 290 (+60) 290 (+60) 359 (0) 359 (0)
GET search_licenses 10 (-4) 13 (-9) 18 (-15) 29 (-22) 52 (-18) 64 (-17) 110 (-40) 260 (+81)
GET search_purls 21,000 (+2,000) 22,000 (+3,000) 22,000 (+3,000) 22,000 (+1,000) 23,000 (0) 25,000 (-2,000) 27,000 (-1,000) 27,000 (-1,000)
GET search_purls_by_license 8,000 (-2,000) 9,000 (-1,000) 11,000 (-1,000) 12,000 (-2,000) 16,000 (-1,000) 21,000 (+1,000) 33,000 (-9,000) 38,000 (-4,000)
GET search_sboms_by_license 13 (-1) 16 (-3) 19 (-7) 37 (-1) 69 (-11) 93 (-3) 150 (-40) 410 (+130)
POST get_recommendations[pkg:maven/io.ne…8.1.redhat-00033] 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (0) 3,000 (+1,000) 3,000 (+1,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/squid] 2 (0) 3 (0) 5 (+2) 8 (+4) 10 (+5) 12 (+5) 46 (+33) 46 (+33)
Aggregated 200 (-10) 420 (+20) 700 (0) 5,000 (0) 14,000 (0) 21,000 (+2,000) 144,000 (0) 179,980 (-60,020)

Status Code Metrics

Method Name Status Codes
GET download_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 45 [200]
GET get_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 42 [200]
GET get_advisory_by_doc_id 41 [200]
GET get_analysis_latest_cpe 45 [200]
GET get_analysis_status 45 [200]
GET get_purl_details[0000054a-a69b-5…520-80752db183e6] 45 [200]
GET get_sbom[sha256:a3442b37…3040057f79c70669] 45 [200]
GET get_sbom_license_ids[urn:uuid:019c4a…8ba-3cc0260ef778] 45 [200]
GET list_advisory 41 [200]
GET list_advisory_labels 45 [200]
GET list_advisory_paginated 41 [200]
GET list_importer 41 [200]
GET list_organizations 41 [200]
GET list_packages 41 [200]
GET list_packages_paginated 42 [200]
GET list_products 45 [200]
GET list_sboms 45 [200]
GET list_sboms_paginated 45 [200]
GET list_vulnerabilities 41 [200]
GET list_vulnerabilities_paginated 41 [200]
GET sbom_by_package[pkg:oci/web-ter…-bundle&tag=1.11] 45 [200]
GET search_advisory 41 [200]
GET search_exact_purl 45 [200]
GET search_licenses 187 [200]
GET search_purls 46 [200]
GET search_purls_by_license 188 [200]
GET search_sboms_by_license 187 [200]
POST get_recommendations[pkg:maven/io.ne…8.1.redhat-00033] 45 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/squid] 45 [200]
Aggregated 1,691 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 41 (-4) 0 (0) 12.61 (+0.03) 7 (0) 23 (+2) 0.02 (-0.00) 0.00 (+0.00)
1.1 list_organizations 41 (-4) 0 (0) 314.20 (+15.28) 108 (+3) 779 (+185) 0.02 (-0.00) 0.00 (+0.00)
1.2 list_advisory 41 (-4) 0 (0) 691.93 (+85.42) 173 (+11) 1982 (+850) 0.02 (-0.00) 0.00 (+0.00)
1.3 list_advisory_paginated 41 (-4) 0 (0) 509.85 (+56.30) 158 (-23) 1412 (+330) 0.02 (-0.00) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 41 (-4) 0 (0) 25.85 (-6.84) 4 (+1) 117 (-147) 0.02 (-0.00) 0.00 (+0.00)
1.5 search_advisory 41 (-4) 0 (0) 1715.61 (+408.72) 159 (-153) 4801 (+777) 0.02 (-0.00) 0.00 (+0.00)
1.6 list_vulnerabilities 41 (-4) 0 (0) 612.71 (+60.37) 74 (-110) 1188 (+292) 0.02 (-0.00) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 41 (-4) 0 (0) 414.90 (+28.01) 112 (-37) 729 (+103) 0.02 (-0.00) 0.00 (+0.00)
1.8 list_importer 41 (-4) 0 (0) 14.34 (-4.86) 1 (-1) 71 (-12) 0.02 (-0.00) 0.00 (+0.00)
1.9 list_packages 41 (-5) 0 (0) 516.71 (+47.21) 123 (-49) 1158 (+43) 0.02 (-0.00) 0.00 (+0.00)
1.10 list_packages_paginated 42 (-4) 0 (0) 433.33 (+44.20) 111 (-75) 660 (+46) 0.02 (-0.00) 0.00 (+0.00)
1.11 search_purls 46 (-4) 0 (0) 21187.39 (+2842.91) 15363 (+4760) 27363 (-778) 0.03 (-0.00) 0.00 (+0.00)
1.12 search_exact_purl 45 (-5) 0 (0) 209.22 (+51.48) 156 (+89) 359 (0) 0.03 (-0.00) 0.00 (+0.00)
1.13 list_products 45 (-5) 0 (0) 11.80 (+1.14) 5 (0) 30 (-7) 0.03 (-0.00) 0.00 (+0.00)
1.14 list_sboms 45 (-5) 0 (0) 144898.48 (+3665.27) 117878 (+23278) 179980 (-60192) 0.03 (-0.00) 0.00 (+0.00)
1.15 list_sboms_paginated 45 (0) 0 (0) 823.02 (-361.89) 297 (-338) 2494 (+370) 0.03 (+0.00) 0.00 (+0.00)
1.16 get_analysis_status 45 (0) 0 (0) 8.96 (-9.44) 2 (0) 78 (+8) 0.03 (+0.00) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 45 (0) 0 (0) 39.22 (-10.02) 4 (-4) 212 (+101) 0.03 (+0.00) 0.00 (+0.00)
1.18 list_advisory_labels 45 (0) 0 (0) 16131.78 (+951.75) 6377 (+1264) 20797 (-1683) 0.03 (+0.00) 0.00 (+0.00)
1.19 get_sbom[sha256:a3442b37…3040057f79c70669] 45 (0) 0 (0) 9961.09 (-416.89) 385 (+90) 16284 (-4977) 0.03 (+0.00) 0.00 (+0.00)
1.20 sbom_by_package[pkg:oci/web-ter…-bundle&tag=1.11] 45 (0) 0 (0) 145.82 (-25.82) 45 (+6) 498 (+101) 0.03 (+0.00) 0.00 (+0.00)
1.21 get_sbom_license_ids[urn:uuid:019c4a…8ba-3cc0260ef778] 45 (0) 0 (0) 22.29 (+5.16) 3 (0) 86 (+2) 0.03 (+0.00) 0.00 (+0.00)
1.22 post_vulnerability_analyze[pkg:rpm/redhat/squid] 45 (0) 0 (0) 5.11 (+2.11) 1 (0) 46 (+33) 0.03 (+0.00) 0.00 (+0.00)
1.23 get_purl_details[0000054a-a69b-5…520-80752db183e6] 45 (0) 0 (0) 205.38 (-25.33) 55 (-23) 443 (-127) 0.03 (+0.00) 0.00 (+0.00)
1.24 get_recommendations[pkg:maven/io.ne…8.1.redhat-00033] 45 (0) 0 (0) 1196.62 (-28.91) 538 (-21) 3043 (+672) 0.03 (+0.00) 0.00 (+0.00)
1.25 download_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 45 (0) 0 (0) 219.13 (+24.98) 75 (+34) 588 (+121) 0.03 (+0.00) 0.00 (+0.00)
1.26 get_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 42 (-3) 0 (0) 175.24 (+25.68) 74 (+46) 545 (+232) 0.02 (-0.00) 0.00 (+0.00)
RestAPIUserSlow
2.0 logon 187 (+34) 0 (0) 9.46 (-1.25) 6 (0) 17 (-2) 0.10 (+0.02) 0.00 (+0.00)
2.1 search_licenses 187 (+34) 0 (0) 21.29 (-8.24) 4 (-1) 262 (+83) 0.10 (+0.02) 0.00 (+0.00)
2.2 search_sboms_by_license 187 (+34) 0 (0) 26.07 (-3.53) 2 (-1) 412 (+129) 0.10 (+0.02) 0.00 (+0.00)
2.3 search_purls_by_license 188 (+34) 0 (0) 9547.56 (-2106.22) 3985 (-313) 38057 (-4273) 0.10 (+0.02) 0.00 (+0.00)
RestAPIUserDelete
3.0 logon 513 (+2) 0 (0) 10.25 (-0.60) 6 (0) 29 (+2) 0.28 (+0.00) 0.00 (+0.00)
RestAdvisoryLableUser
4.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
Aggregated 2,432 (+71) 0 (0) 4451.41 (-330.91) 1 (0) 179980 (-60192) 1.35 (+0.04) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 41 (-4) 200912.81 (+3075.22) 162085 (+7294) 245469 (-31549) 0.02 (-0.00) 8.20 (-0.80)
RestAPIUserSlow 1 (0) 187 (+34) 9489.23 (-2215.34) 4018 (-315) 38101 (-4333) 0.10 (+0.02) 187.00 (+34.00)
RestAPIUserDelete 1 (0) 513 (+2) 3512.65 (-10.58) 3016 (+1) 4019 (+2) 0.28 (+0.00) 513.00 (+2.00)
RestAdvisoryLableUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
Aggregated 7 (0) 741 (+32) 15943.18 (-1678.62) 3016 (+1) 245469 (-31549) 0.41 (+0.02) 708.20 (+35.20)

User Metrics