A system and method for virtual private application networks includes receiving a first packet associated with a first network flow at a network device, determining one or more first characteristics of the first network flow based on information associated with the first packet, determining one or more second characteristics of a first virtual private application network (VPAN) based on information associated with the one or more first characteristics, assigning the first network flow to the first VPAN, selecting one or more first network switching devices to be associated with the first VPAN, and transmitting one or more first flow control messages to the selected one or more first network switching devices. The one or more first flow control messages provide forwarding instructions for network traffic associated with the first network flow to the selected one or more first network switching devices.