Is this ipv4 or ipv6?
What MTU are you using for the wireguard interface? e.g. is your firewall dropping any ICMP?
BTW you can try using curl with --resolve option to ensure you’re always attempting to contact the same IP while debugging - it’d allow you to handily capture tcpdumps by IP address