Wait: What’s an ‘enterprise’ plan? Doesn’t kurt despise cloudflare much for their ‘enterprise-plan only’ shenanigans… 
Also, do the 120s timeout (are they read or connection timeouts?) apply to even raw tcp conns OR just the http ones fly proxies and the tls ones fly terminates?
What’s the timeout for udp nat?