create tunnel on cloudflare dashboard zero trust >> access >> tunnels
|subdomain|ssh| |domain|example.com| |type|tcp| |URL|127.0.0.1:22}
vim ~/.ssh/config
add following lines
Host ssh.example.com
ProxyCommand /usr/local/bin/cloudflared access ssh --hostname %h
now test ssh @ssh.example.com