if they use TCP, you can, sort of, but any client that wants to connect will need to use Cloudflared

https://developers.cloudflare.com/cloudflare-one/applications/non-http/arbitrary-tcp/

you can skip the Cloudflare Access, probably (I’ve never tried any of this myself)