Great question! Yes you can use Ockam in that setting to terminate encryption just before your cloud service needs to use the data instead of at the LoadBalancer or another intermediary like Cloudflare.
The Ockam TCP transport can move end-to-end encrypted through a Layer 4 Network Load Balancer. The Ockam WebSocket transport can move end-to-end encrypted through a Layer 7 Application Load Balancer.
The Ockam TCP transport can move end-to-end encrypted through a Layer 4 Network Load Balancer. The Ockam WebSocket transport can move end-to-end encrypted through a Layer 7 Application Load Balancer.