Use a GRETAP interface; Red Hat's virtual interface documentation is phenomenal:
https://developers.redhat.com/blog/2019/05/17/an-introductio...
https://developers.redhat.com/blog/2019/05/17/an-introductio...
> Generic Network Virtualization Encapsulation (GENEVE) supports all of the capabilities of VXLAN, NVGRE, and STT and was designed to overcome their perceived limitations. Many believe GENEVE could eventually replace these earlier formats entirely
I'm bit surprised that they didn't have section on vxlan there considering it is pretty popular afaik?
Anyways, I think tunneling GENEVE (or any other Ethernet-over-IP protocol) should work fine over WireGuard, same as using regular network interfaces.