Wireguard works well........
Are your client remotely connecting from afar to the hex and they have to reach their own subnet on the router?
Are your clients on different hex subnets and have to go out the internet via another location.
Your explanation is too poor to give any good responses.