Scalable distributed web-based authentication

1. A method comprising:

examining a packet in a network switch having at least one memory;

associating the packet with a flow based on a result of applying network address translation (NAT) to a first information from the packet, the flow associated with one of a plurality of virtual local area networks (VLANs); and

responsive to the associating,

if a destination port of the packet indicates a secure transport protocol, forwarding, based at least in part on a second information from the packet, packet traffic for the flow to a first one or more processors of the switch that are dedicated to cryptographic processing; and

if the destination port does not indicate a secure transport protocol, forwarding packet traffic for the flow to a second one or more processors of the switch.

2. The method of claim 1 , wherein

the second one or more processors are not dedicated to cryptographic processing.

3. The method of claim 1 , wherein the secure transport protocol comprises the Secure Sockets Layer (SSL).

4. The method of claim 1 , further comprising hashing the packet to derive a result value.

5. The method of claim 1 , wherein the second information comprises the destination port.

6. The method of claim 5 , wherein the second information further comprises one or more of:

a source port of the switch that received the packet,

a source IP address, and

a user device address.

7. The method of claim 6 wherein the user device address comprises a Medium Access Control (MAC) address.

8. The method of claim 1 , wherein the examining further comprises receiving the packet via one of one or more input ports of the network switch, each of the one or more input ports associated with the at least one memory.

9. The method of claim 1 , wherein the examining further comprises receiving the packet via one of one or more input ports of the network switch, each of the one or more input ports associated with a different one of the at least one memory.

10. The method of claim 1 , further comprising:

responsive to the associating, if a source of the packet is an authenticated user, forwarding the packet via an output port of the switch, based on the memory.

11. A nontransitory program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method, the method comprising:

examining a packet in a network switch having at least one memory;

associating the packet with a flow based on a result of applying network address translation (NAT) to a first information from the packet, the flow associated with one of a plurality of virtual local area networks (VLANs); and

responsive to the associating,

if a destination port of the packet indicates a secure transport protocol, forwarding, based at least in part on a second information from the packet, packet traffic for the flow to a first one or more processors of the switch that are dedicated to cryptographic processing; and

if the destination port does not indicate a secure transport protocol, forwarding packet traffic for the flow to a second one or more processors of the switch.

12. A network switch comprising:

a first one or more processors;

a second one or more processors; and

at least one memory;

wherein the network switch is configured to:

examine a packet in a network switch having at least one memory;

associate the packet with a flow based on a result of applying network address translation (NAT) to a first information from the packet, the flow associated with one of a plurality of virtual local area networks (VLANs); and

responsive to the associating,

if a destination port of the packet indicates a secure transport protocol, forward, based at least in part on a second information from the packet, packet traffic for the flow to a first one or more processors of the switch that are dedicated to cryptographic processing; and

if the destination port does not indicate a secure transport protocol, forward packet traffic for the flow to a second one or more processors of the switch.

13. The network switch of claim 12 , wherein

the second one or more processors are not dedicated to cryptographic processing.

14. The network switch of claim 12 , wherein the secure transport protocol comprises the Secure Sockets Layer (SSL).

15. The network switch of claim 12 , wherein the network switch is further configured to hash the packet to derive a result value.

16. The network switch of claim 12 , wherein the second information comprises the destination port.

17. The network switch of claim 16 , wherein the second information further comprises one or more of:

a source port of the switch that received the packet,

a source IP address, and

a user device address.

18. The network switch of claim 17 wherein the user device address comprises a Medium Access Control (MAC) address.

19. The network switch of claim 12 , wherein the network switch is further configured to receive the packet via one of one or more input ports of the network switch, each of the one or more input ports associated with the at least one memory.

20. The network switch of claim 12 , wherein the network switch is further configured to receive the packet via one of one or more input ports of the network switch, each of the one or more input ports associated with a different one of the at least one memory.

21. The network switch of claim 12 wherein the network switch is further configured to:

responsive to the associating, if a source of the packet is an authenticated user, forward the packet via an output port of the switch, based on the memory.