I've ran your config for MetalLB (adapted to my IPs);
i'm running containous/whoami (prints out HTTP request + headers) instead of your dagoredcode/alarm:goechosmall;
the question i have is related to the IP that is forwarded to the service.
i expect to be my 192.168 local ip from where i make the request. it's a SNAT-ed one as you see in screenshot