@dshokouhi i never heard such a nonsense statement, sorry.
I changed main router; added exactly same port forward as on old router and it STOPPED to work.
I can access hass from localy connected devices via local ip only, from locally connected devices i cant access it via publicdomain:port; if i connect device to different public ip i can access Hass via its publick ip:port …
this is completely most idiotic behavior i ever saw. even the core is messed up/ ngnix or i have no clue what a crap is that.