Yes — Middleware runs for ALL matched routes including SSG (statically generated) pages. However, the interaction is nuanced. Middleware runs at the Edge BEFORE the response is served, meaning it intercepts even cached static pages. But whether middleware can modify the actual HTML response of a static page depends on what it does — it can redirect, rewrite, or add headers, but it cannot change the static HTML content itself.
This is one of the most misunderstood behaviors in Next.js. Many developers assume that because a page is statically generated and cached, middleware is bypassed. This is incorrect. Middleware runs at the Edge before the cached response is delivered. It acts as an interceptor — it can allow, block, redirect, or rewrite the request before the static HTML ever reaches the browser. However, middleware cannot modify the static HTML payload itself — it can only control what happens to the request before the page is served.
Middleware DOES run for SSG pages — it intercepts the request before the cached response is served
Middleware runs at the Edge — static HTML is served from cache AFTER middleware completes
Middleware can redirect away from a static page before the HTML is ever sent
Middleware can rewrite a static page request to serve a different static page
Middleware CANNOT modify the HTML content of a static page
Middleware can add/modify response headers on static page responses
On Vercel — middleware runs on the Edge network, static assets served from CDN after middleware
Self-hosted — middleware runs in the Next.js server before serving the static file
SSG pages (generateStaticParams) — middleware runs, can redirect/rewrite before HTML is served
SSG pages (output: export) — middleware does NOT run, pages served as plain files
ISR pages (revalidate) — middleware runs on every request before cached response
Static files (_next/static, public/) — middleware does NOT run, exclude via matcher
CDN cached pages on Vercel — middleware runs at Edge before CDN cache is served
Self-hosted SSG — middleware runs in Next.js server before static file is returned
Headers added by middleware — applied to static page responses ✅
HTML content of static page — middleware CANNOT modify it, only control routing
Middleware runs for SSG pages — it is NOT bypassed by the static cache
Middleware runs BEFORE the cached HTML is served — it is the first point of interception
Middleware cannot change static HTML content — only routing, headers, and cookies
Pure static export (output: export) is the only case where middleware does not run
Always exclude _next/static and public/ from middleware matcher for best performance
Middleware is safe to use for auth protection on SSG pages — it reliably intercepts requests
On Vercel, middleware runs at the Edge before even the CDN cache — giving maximum control
0-2 years experience
2-5 years experience
5-8 years experience
8+ years experience
