Goose Attack Report

Users: 7

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing26-03-25 02:29:0626-03-25 02:29:1300:00:070 → 7
Maintaining26-03-25 02:29:1326-03-25 02:59:1300:30:007
Decreasing26-03-25 02:59:1326-03-25 02:59:2500:00:120 ← 7

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET download_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 50 (+5) 0 207.26 (-11.87) 38 (-37) 479 (-109) 0.03 (+0.00) 0.00 (+0.00)
GET get_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 50 (+8) 0 165.82 (-9.37) 26 (-48) 318 (-227) 0.03 (+0.00) 0.00 (+0.00)
GET get_advisory_by_doc_id 50 (+9) 0 23.96 (-1.82) 3 (-1) 97 (-20) 0.03 (+0.01) 0.00 (+0.00)
GET get_analysis_latest_cpe 55 (+10) 0 47.38 (+8.16) 5 (+1) 200 (-12) 0.03 (+0.01) 0.00 (+0.00)
GET get_analysis_status 55 (+10) 0 11.96 (+3.03) 1 (-1) 73 (-5) 0.03 (+0.01) 0.00 (+0.00)
GET get_purl_details[0000054a-a69b-5…520-80752db183e6] 50 (+5) 0 210.16 (+4.80) 42 (-13) 562 (+119) 0.03 (+0.00) 0.00 (+0.00)
GET get_sbom[sha256:a3442b37…3040057f79c70669] 53 (+8) 0 8851.96 (-1109.02) 629 (+244) 16180 (-104) 0.03 (+0.00) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019c4a…8ba-3cc0260ef778] 50 (+5) 0 26.10 (+3.88) 3 (0) 175 (+89) 0.03 (+0.00) 0.00 (+0.00)
GET list_advisory 50 (+9) 0 559.92 (-131.98) 137 (-36) 2371 (+389) 0.03 (+0.01) 0.00 (+0.00)
GET list_advisory_labels 55 (+10) 0 15543.38 (-588.35) 6625 (+248) 20703 (-94) 0.03 (+0.01) 0.00 (+0.00)
GET list_advisory_paginated 50 (+9) 0 466.96 (-42.82) 116 (-42) 1105 (-307) 0.03 (+0.01) 0.00 (+0.00)
GET list_importer 50 (+9) 0 12.16 (-2.16) 1 (0) 70 (-1) 0.03 (+0.01) 0.00 (+0.00)
GET list_organizations 50 (+9) 0 285.58 (-28.47) 78 (-30) 591 (-188) 0.03 (+0.01) 0.00 (+0.00)
GET list_packages 50 (+9) 0 455.86 (-60.80) 118 (-5) 1113 (-45) 0.03 (+0.01) 0.00 (+0.00)
GET list_packages_paginated 51 (+9) 0 393.94 (-39.37) 123 (+12) 595 (-65) 0.03 (+0.01) 0.00 (+0.00)
GET list_products 55 (+10) 0 15.75 (+3.97) 3 (-2) 87 (+57) 0.03 (+0.01) 0.00 (+0.00)
GET list_sboms 55 (+10) 0 127388.82 (-17509.60) 104090 (-13788) 157129 (-22851) 0.03 (+0.01) 0.00 (+0.00)
GET list_sboms_paginated 55 (+10) 0 1205.69 (+382.69) 807 (+510) 2780 (+286) 0.03 (+0.01) 0.00 (+0.00)
GET list_vulnerabilities 50 (+9) 0 624.04 (+11.38) 85 (+11) 1105 (-83) 0.03 (+0.01) 0.00 (+0.00)
GET list_vulnerabilities_paginated 50 (+9) 0 372.84 (-42.01) 91 (-21) 684 (-45) 0.03 (+0.01) 0.00 (+0.00)
GET sbom_by_package[pkg:oci/web-ter…-bundle&tag=1.11] 50 (+5) 0 180.50 (+34.81) 36 (-9) 454 (-44) 0.03 (+0.00) 0.00 (+0.00)
GET search_advisory 50 (+9) 0 1154.32 (-561.27) 170 (+11) 5929 (+1128) 0.03 (+0.01) 0.00 (+0.00)
GET search_exact_purl 55 (+10) 0 314.29 (+105.16) 15 (-141) 678 (+319) 0.03 (+0.01) 0.00 (+0.00)
GET search_licenses 124 (-63) 0 29.90 (+8.78) 5 (+1) 189 (-73) 0.07 (-0.04) 0.00 (+0.00)
GET search_purls 55 (+9) 0 5827.75 (-15359.60) 557 (-14806) 11289 (-16074) 0.03 (+0.01) 0.00 (+0.00)
GET search_purls_by_license 125 (-63) 0 14436.14 (+4888.62) 5313 (+1328) 77360 (+39303) 0.07 (-0.03) 0.00 (+0.00)
GET search_sboms_by_license 124 (-63) 0 34.67 (+8.67) 2 (0) 200 (-212) 0.07 (-0.04) 0.00 (+0.00)
POST get_recommendations[pkg:maven/io.ne…8.1.redhat-00033] 50 (+5) 0 1039.76 (-156.80) 217 (-321) 2171 (-872) 0.03 (+0.00) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/squid] 50 (+5) 0 3.42 (-1.60) 1 (0) 15 (-31) 0.03 (+0.00) 0.00 (+0.00)
Aggregated 1717 (+26) 0 6325.41 (-76.62) 1 (0) 157129 (-22851) 0.95 (+0.01) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET download_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 210 (+10) 240 (+30) 270 (+50) 290 (+20) 300 (-10) 330 (-40) 479 (-109) 479 (-109)
GET get_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 170 (-10) 190 (0) 200 (0) 210 (0) 230 (+10) 300 (+20) 318 (-182) 318 (-182)
GET get_advisory_by_doc_id 12 (0) 15 (0) 26 (+6) 47 (+5) 58 (-2) 64 (-34) 97 (-20) 97 (-20)
GET get_analysis_latest_cpe 29 (+9) 37 (+16) 52 (-8) 68 (-3) 100 (+16) 180 (+89) 200 (-10) 200 (-10)
GET get_analysis_status 5 (0) 5 (0) 9 (+3) 15 (+8) 34 (+19) 55 (+15) 65 (-13) 73 (-5)
GET get_purl_details[0000054a-a69b-5…520-80752db183e6] 200 (0) 210 (0) 240 (+10) 270 (-10) 330 (+30) 410 (+40) 562 (+122) 562 (+122)
GET get_sbom[sha256:a3442b37…3040057f79c70669] 11,000 (-2,000) 11,000 (-3,000) 12,000 (-2,000) 13,000 (-1,000) 14,000 (-1,000) 16,000 (0) 16,000 (0) 16,000 (0)
GET get_sbom_license_ids[urn:uuid:019c4a…8ba-3cc0260ef778] 11 (-2) 17 (-2) 22 (-7) 39 (0) 75 (+27) 85 (+26) 175 (+89) 175 (+89)
GET list_advisory 500 (-100) 600 (-200) 600 (-200) 600 (-200) 700 (-200) 800 (-100) 2,000 (+18) 2,000 (+18)
GET list_advisory_labels 15,000 (-1,000) 15,000 (-2,000) 17,000 (0) 17,000 (-1,000) 18,000 (-2,000) 20,000 (0) 20,000 (-797) 20,703 (-94)
GET list_advisory_paginated 460 (-40) 490 (-110) 500 (-100) 600 (0) 700 (+100) 700 (+100) 1,000 (0) 1,000 (0)
GET list_importer 5 (-1) 5 (-2) 6 (-5) 14 (-1) 54 (-2) 59 (-4) 70 (-1) 70 (-1)
GET list_organizations 290 (-10) 300 (-30) 360 (-10) 370 (-10) 380 (0) 400 (-10) 591 (-188) 591 (-188)
GET list_packages 470 (-30) 490 (-10) 500 (-100) 600 (0) 600 (-100) 700 (0) 1,000 (0) 1,000 (0)
GET list_packages_paginated 410 (-80) 470 (-30) 490 (-10) 500 (-100) 595 (-5) 595 (-5) 595 (-65) 595 (-65)
GET list_products 10 (-1) 12 (0) 14 (0) 22 (+7) 30 (+14) 42 (+22) 67 (+37) 87 (+57)
GET list_sboms 121,000 (-16,000) 125,000 (-19,000) 135,000 (-30,000) 145,000 (-31,000) 151,000 (-28,980) 155,000 (-24,980) 156,000 (-23,980) 157,000 (-22,980)
GET list_sboms_paginated 1,000 (+100) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 2,000 (0) 2,780 (+780)
GET list_vulnerabilities 700 (+100) 700 (0) 800 (+100) 800 (0) 900 (+100) 900 (+100) 1,000 (0) 1,000 (0)
GET list_vulnerabilities_paginated 390 (-40) 410 (-80) 460 (-40) 500 (0) 500 (0) 500 (-100) 684 (-16) 684 (-16)
GET sbom_by_package[pkg:oci/web-ter…-bundle&tag=1.11] 140 (+10) 180 (+20) 200 (+30) 270 (+90) 320 (+120) 410 (+200) 450 (-48) 450 (-48)
GET search_advisory 600 (-300) 700 (-300) 1,000 (-2,000) 2,000 (-1,000) 3,000 (-1,801) 3,000 (-1,801) 5,929 (+1,128) 5,929 (+1,128)
GET search_exact_purl 300 (+100) 330 (+130) 350 (+150) 370 (+160) 440 (+150) 500 (+210) 600 (+241) 678 (+319)
GET search_licenses 14 (+4) 17 (+4) 30 (+12) 55 (+26) 76 (+24) 83 (+19) 160 (+50) 189 (-71)
GET search_purls 6,000 (-15,000) 6,000 (-16,000) 6,000 (-16,000) 7,000 (-15,000) 10,000 (-13,000) 10,000 (-15,000) 11,000 (-16,000) 11,000 (-16,000)
GET search_purls_by_license 11,000 (+3,000) 13,000 (+4,000) 14,000 (+3,000) 16,000 (+4,000) 23,000 (+7,000) 38,000 (+17,000) 66,000 (+33,000) 77,000 (+39,000)
GET search_sboms_by_license 19 (+6) 24 (+8) 32 (+13) 55 (+18) 86 (+17) 110 (+17) 190 (+40) 200 (-210)
POST get_recommendations[pkg:maven/io.ne…8.1.redhat-00033] 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 2,000 (-1,000) 2,000 (-1,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/squid] 2 (0) 3 (0) 3 (-2) 4 (-4) 7 (-3) 11 (-1) 15 (-31) 15 (-31)
Aggregated 270 (+70) 420 (0) 700 (0) 1,000 (-4,000) 13,000 (-1,000) 17,000 (-4,000) 135,000 (-9,000) 157,000 (-22,980)

Status Code Metrics

Method Name Status Codes
GET download_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 50 [200]
GET get_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 50 [200]
GET get_advisory_by_doc_id 50 [200]
GET get_analysis_latest_cpe 55 [200]
GET get_analysis_status 55 [200]
GET get_purl_details[0000054a-a69b-5…520-80752db183e6] 50 [200]
GET get_sbom[sha256:a3442b37…3040057f79c70669] 53 [200]
GET get_sbom_license_ids[urn:uuid:019c4a…8ba-3cc0260ef778] 50 [200]
GET list_advisory 50 [200]
GET list_advisory_labels 55 [200]
GET list_advisory_paginated 50 [200]
GET list_importer 50 [200]
GET list_organizations 50 [200]
GET list_packages 50 [200]
GET list_packages_paginated 51 [200]
GET list_products 55 [200]
GET list_sboms 55 [200]
GET list_sboms_paginated 55 [200]
GET list_vulnerabilities 50 [200]
GET list_vulnerabilities_paginated 50 [200]
GET sbom_by_package[pkg:oci/web-ter…-bundle&tag=1.11] 50 [200]
GET search_advisory 50 [200]
GET search_exact_purl 55 [200]
GET search_licenses 124 [200]
GET search_purls 55 [200]
GET search_purls_by_license 125 [200]
GET search_sboms_by_license 124 [200]
POST get_recommendations[pkg:maven/io.ne…8.1.redhat-00033] 50 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/squid] 50 [200]
Aggregated 1,717 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 50 (+9) 0 (0) 12.26 (-0.35) 9 (+2) 24 (+1) 0.03 (+0.01) 0.00 (+0.00)
1.1 list_organizations 50 (+9) 0 (0) 285.64 (-28.56) 78 (-30) 591 (-188) 0.03 (+0.01) 0.00 (+0.00)
1.2 list_advisory 50 (+9) 0 (0) 560.00 (-131.93) 138 (-35) 2371 (+389) 0.03 (+0.01) 0.00 (+0.00)
1.3 list_advisory_paginated 50 (+9) 0 (0) 467.02 (-42.83) 116 (-42) 1105 (-307) 0.03 (+0.01) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 50 (+9) 0 (0) 24.04 (-1.81) 3 (-1) 97 (-20) 0.03 (+0.01) 0.00 (+0.00)
1.5 search_advisory 50 (+9) 0 (0) 1154.38 (-561.23) 170 (+11) 5929 (+1128) 0.03 (+0.01) 0.00 (+0.00)
1.6 list_vulnerabilities 50 (+9) 0 (0) 624.12 (+11.41) 85 (+11) 1106 (-82) 0.03 (+0.01) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 50 (+9) 0 (0) 372.92 (-41.98) 91 (-21) 684 (-45) 0.03 (+0.01) 0.00 (+0.00)
1.8 list_importer 50 (+9) 0 (0) 12.20 (-2.14) 2 (+1) 70 (-1) 0.03 (+0.01) 0.00 (+0.00)
1.9 list_packages 50 (+9) 0 (0) 455.94 (-60.77) 118 (-5) 1113 (-45) 0.03 (+0.01) 0.00 (+0.00)
1.10 list_packages_paginated 51 (+9) 0 (0) 393.96 (-39.37) 123 (+12) 595 (-65) 0.03 (+0.01) 0.00 (+0.00)
1.11 search_purls 55 (+9) 0 (0) 5827.78 (-15359.61) 557 (-14806) 11289 (-16074) 0.03 (+0.01) 0.00 (+0.00)
1.12 search_exact_purl 55 (+10) 0 (0) 314.35 (+105.12) 15 (-141) 678 (+319) 0.03 (+0.01) 0.00 (+0.00)
1.13 list_products 55 (+10) 0 (0) 15.76 (+3.96) 3 (-2) 87 (+57) 0.03 (+0.01) 0.00 (+0.00)
1.14 list_sboms 55 (+10) 0 (0) 127388.93 (-17509.55) 104090 (-13788) 157129 (-22851) 0.03 (+0.01) 0.00 (+0.00)
1.15 list_sboms_paginated 55 (+10) 0 (0) 1205.78 (+382.76) 807 (+510) 2780 (+286) 0.03 (+0.01) 0.00 (+0.00)
1.16 get_analysis_status 55 (+10) 0 (0) 12.05 (+3.10) 1 (-1) 73 (-5) 0.03 (+0.01) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 55 (+10) 0 (0) 47.42 (+8.20) 5 (+1) 200 (-12) 0.03 (+0.01) 0.00 (+0.00)
1.18 list_advisory_labels 55 (+10) 0 (0) 15543.42 (-588.36) 6625 (+248) 20703 (-94) 0.03 (+0.01) 0.00 (+0.00)
1.19 get_sbom[sha256:a3442b37…3040057f79c70669] 53 (+8) 0 (0) 8852.02 (-1109.07) 629 (+244) 16180 (-104) 0.03 (+0.00) 0.00 (+0.00)
1.20 sbom_by_package[pkg:oci/web-ter…-bundle&tag=1.11] 50 (+5) 0 (0) 180.62 (+34.80) 36 (-9) 454 (-44) 0.03 (+0.00) 0.00 (+0.00)
1.21 get_sbom_license_ids[urn:uuid:019c4a…8ba-3cc0260ef778] 50 (+5) 0 (0) 26.14 (+3.85) 4 (+1) 175 (+89) 0.03 (+0.00) 0.00 (+0.00)
1.22 post_vulnerability_analyze[pkg:rpm/redhat/squid] 50 (+5) 0 (0) 3.46 (-1.65) 1 (0) 15 (-31) 0.03 (+0.00) 0.00 (+0.00)
1.23 get_purl_details[0000054a-a69b-5…520-80752db183e6] 50 (+5) 0 (0) 210.16 (+4.78) 42 (-13) 562 (+119) 0.03 (+0.00) 0.00 (+0.00)
1.24 get_recommendations[pkg:maven/io.ne…8.1.redhat-00033] 50 (+5) 0 (0) 1039.78 (-156.84) 217 (-321) 2171 (-872) 0.03 (+0.00) 0.00 (+0.00)
1.25 download_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 50 (+5) 0 (0) 207.32 (-11.81) 38 (-37) 479 (-109) 0.03 (+0.00) 0.00 (+0.00)
1.26 get_advisory[5b25cdef-428a-4…29e-fbb3415c22ab] 50 (+8) 0 (0) 165.90 (-9.34) 26 (-48) 318 (-227) 0.03 (+0.00) 0.00 (+0.00)
RestAPIUserSlow
2.0 logon 124 (-63) 0 (0) 9.95 (+0.49) 7 (+1) 17 (0) 0.07 (-0.04) 0.00 (+0.00)
2.1 search_licenses 124 (-63) 0 (0) 30.10 (+8.81) 5 (+1) 190 (-72) 0.07 (-0.04) 0.00 (+0.00)
2.2 search_sboms_by_license 124 (-63) 0 (0) 34.69 (+8.62) 2 (0) 200 (-212) 0.07 (-0.04) 0.00 (+0.00)
2.3 search_purls_by_license 125 (-63) 0 (0) 14436.19 (+4888.63) 5314 (+1329) 77360 (+39303) 0.07 (-0.03) 0.00 (+0.00)
RestAPIUserDelete
3.0 logon 510 (-3) 0 (0) 10.52 (+0.27) 6 (0) 29 (0) 0.28 (-0.00) 0.00 (+0.00)
RestAdvisoryLableUser
4.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
Aggregated 2,401 (-31) 0 (0) 4523.42 (+72.01) 1 (0) 157129 (-22851) 1.33 (-0.02) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 50 (+9) 164109.64 (-36803.17) 130366 (-31719) 201427 (-44042) 0.03 (+0.01) 10.00 (+1.80)
RestAPIUserSlow 1 (0) 124 (-63) 14466.15 (+4976.92) 5335 (+1317) 77378 (+39277) 0.07 (-0.04) 124.00 (-63.00)
RestAPIUserDelete 1 (0) 510 (-3) 3528.83 (+16.19) 3015 (-1) 4025 (+6) 0.28 (-0.00) 510.00 (-3.00)
RestAdvisoryLableUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
Aggregated 7 (0) 684 (-57) 17249.99 (+1306.80) 3015 (-1) 201427 (-44042) 0.38 (-0.03) 644.00 (-64.20)

User Metrics