Techniques for classifying a network flow using a service directory. Embodiments receive a request to establish a network flow with a remote service. The request specifies a network address associated with the remote service. A classification of the remote service is determined by querying a service directory using the network address and the port identifier. Embodiments also determine a network management policy to apply to the network flow, based on the determined classification.