Using Cloudflare as tunnel from LAN to public internet

I’m trying to understand the capabilities of the Cloudflare Tunnel/Zero Trust architecture and have a very basic question I haven’t found an answer for.

We have a private network served by a wireless ISP but are having issues with DNS timeouts regardless of the external nameservers we use. If we could tunnel all our public internet traffic through Cloudflare, that might avoid these issues.

We also have web and ssh services we make publicly available via port forwarding from our current static IP. As I understand it, we could use Tunnel and Cloudflare DNS to provide those services as well. Is that correct?