Government departments will have more and more public facing websites / web applications for serving the public with some of them being critical services requiring high availability and would have great impact to the government and/or public should there be outage of their services. Distributed Denial of Services (DDOS) is a category of attack which can bring down services by techniques as simple as bandwidth flooding to more sophisticated attack at the application layer level. We want to source anti-DDOS solutions to protect government websites / web applications against various types of DDOS attack. Since some web applications carry sensitive information, the anti-DDOS solutions required should not rely on transmission, processing or storage of any transaction data (unencrypted or encrypted) on public clouds.