We have clients only accept OUTBOUND traffic from their machines to our public range of IPs, those are exposed on cloudflare with their service "Bring your own IP", and cloudflare only supports L7 HTTP Traffic for now