The invention relates to the technical field of security protection and specifically relates to a traffic control security protection technology based on multi-level self-adjustment rate limiting, andthe technical scheme can effectively filter attack traffic of DDoS of different types and guarantee DNS access of regular users to the utmost extent. Multi-level self-adjustment rate limiting can prevent that one address segment or query traffic for some domain names occupies too much resources and consequently influences overall system performance. When abnormal increase of the query traffic oflocal IP segments or domain name segments appears, the abnormal increase may be caused by DDoS attacks, a defense function can be realized through multi-level rate limiting, a order self-adjustment technology of matrixes is set, a data packet is guaranteed to pass through the matrix in which the most data packets are dropped in a new cycle, thus, the number of the matrixes which the data passes through is reduced as much as possible, and overhead of system computing resource is saved.