Is there an easy setup so that this could be done with VPS relaying the traffic but not decrypting it?

So far, I’m thinking of something like FRP to proxy incoming UDP from internet to the private network. I’m not sure if that works if only outgoing 443 is open at private network.