See also Cloudflare Warp https://blog.cloudflare.com/introducing-cloudflare-warp/ which enables you to hide completely and connect to Cloudflare and also the use of this to expose k8s to Cloudflare natively: https://blog.cloudflare.com/cloudflare-ingress-controller/