Using Argo Tunnel with Google Cloud Managed Instance Group

Hi,

Is it possible to use Argo Tunnel with Google Cloud Managed Instance Group with Autoscaling? I figured out that probably directly no, it is not, because then Cloudflared would have to be installed in Google’s proprietary load balancer, the one that is in front of group of instances, which should be impossible. But what if I put a proxy in a compute instance in front of Managed Instance Group? In that proxy I would install Cloudflared. The question is how to detect http requests to forward further? As 80 and 443 would have to be closed. Would e.g. HAProxy do it? Or it would have to be handwritten, e.g. in Go?

Thanks.