какие есть доверенные средства для решения поставленной задачиГолова на плечах и собственный опыт.
/system resource print
Note: The L7 matcher is very resource intensive. Use this feature only for very specific traffic. It is not recommended to use L7 matcher for generic traffic, such as for blocking webpages. This will almost never work correctly and your device will exhaust it's resources, trying to catch all the traffic. Use other features to block webpages by URL
/ip proxy access
У Core i7 бывает и 10 ядер.