@mWare so we clone the device serial number and model, not the MAC address, and then we get a nice legit bypass. The equipment being used is usually the Azores WAS-110 SFP+ or the Azores WAG-D20 which is a standalone ONT with 10gbit and 5g/2.5g copper ethernet ports

I'm using the WAS-110 SFP+ which gives you better performance. It has a whole Linux control plane with ssh, telnet, and HTTPS interfaces.

I don't think they do any actual CPE-side throttling on their devices. The main reason to bypass is because they force NAT no matter what so there is no real bridge/bypass option and they have an 8192 limit on conntrack

If you take their official CPE equipment and have a 1gig service but >1gig network internally you can see speedtests will go to ~1200mbit, so you're not limited by a physical link.

I think they do policing on their gear but have very modest limits. Maybe they have some burst settings, who knows