When a public Internet client connects to my VPS, WG routes the port traffic like 443 to the WG client here at home, then through Apache reverse proxy then to a node in my kube cluster running a spring boot app which is my main site. The logs shows the IP of the incoming public Internet client.

The response is routed all the way back out to the Internet client.

Is what I'm describing not achieving what you're discussing?

Happy to post a sanitized version of my server and client config.