The CPE is provisioned at 1G / 400 Mbps.
The core device is 10G.
Download speeds from the CPE are limited to around 200 Mbps, while upload reaches the expected higher speeds.
I tested multiple tunnel types, including L2TP, WireGuard, SSTP, OpenVPN, and PPTP, but the behavior remains the same...