I would use resource governor, given that you can classify the incoming connections effectively.

I would also raise the cost threshold fro parallelism to a value of 20/25. In my experience it's a good value to start from. If you see that parallelism still kicks in too often or not often enough, you can always tune it afterwards without the need to restart the instance.

Hope this helps

Gianluca