We can keep client DoS prevention parameters as constants in Golang source files, but anything state-machine-related should be in genesis; it's more idiomatic (e.g. allows implementations in other languages more easily) and makes changing the parameters easier.
For Admin Use