Poorer performance than what's expected is not uncommon with rate-limiter or policers. The reason, they usually drop more packets out of traffic bursts than a similar bandwidth interface might, i.e. they behave like an interface whose FIFO buffer is too small.
