Ok I’ve reverted back to using OpenVPN instead of WireGuard for my tunnels because I had various issues with MTU (I think).
Running speedtest-cli on VMs that were on the subnet going through WireGuard was flaky, sometimes it would be stuck on “Retrieving speedtest.net configuration…” and sometimes it would work (fine or w/ 0mbps download speed & proper upload).
After reverting back to OpenVPN it now works fine though I’ve left the wg0 interface for my management network (ESXi web interface, SNMP & such) which itself is configured in a star topology.
I’m not sure if I’ll have issues with the management WireGuard VPN. If I do, I’ll report back.