To expand on that, Cloudflare's standard product is their HTTP reverse proxy. To proxy arbitrary TCP/UDP traffic, you need to use their Cloudflare Spectrum service (https://www.cloudflare.com/en-gb/application-services/produc...), which is metered.

I think they might be looking in something more similar to Magic Transit, but that depends on how they set up their infrastructure.

wow $1/GB?

would be cheaper to pay a developer to add websocket support to openssh