I just cannot figure out the answer about a one fundamental architecture problem, could anyone help a bit?
This is a bit difficult to explain in words, but maybe the picture helps. So, in a high-end SRX there is a configuration reflected in the picture. The picture is just a simplified concept picture, there are actually hundreds of customer routing-instances and zones and multiple similar zones and instances as the dmz-zone1 in the picture.