flow-filter: Fix flow validation on config update

flow-filter/Cargo.toml

@@ -34,3 +34,4 @@ dpdk = { workspace = true, features = ["test"] }
 lpm = { workspace = true, features = ["testing"] }
 # Enable generated header stacks for classifier tests.
 net = { workspace = true, features = ["builder", "bolero"] }
+tracing-test = { workspace = true }

flow-filter/src/context/display.rs

@@ -6,7 +6,7 @@
 //! Tables retain typed rules for backend-independent display. Each field's type controls its
 //! formatting, keeping values coupled to their key fields.
 
-use super::tables::FlowFilterContext;
+use super::tables::{FlowFilterContext, GateVni, SourceGate};
 
 impl crate::NatRequirement {
     fn label(self) -> &'static str {
@@ -24,6 +24,24 @@ impl std::fmt::Display for crate::NatRequirement {
     }
 }
 
+impl std::fmt::Display for GateVni {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self.0 {
+            Some(vni) => write!(f, "{vni}"),
+            None => f.write_str("-"),
+        }
+    }
+}
+
+impl std::fmt::Display for SourceGate {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            SourceGate::Ungated => f.write_str("-"),
+            SourceGate::PortFwdReply => f.write_str("pfwd"),
+        }
+    }
+}
+
 // -------------------------------------------------------------------------------------------------
 // Rendering: one section per table, each rule on a line, in match order.
 

flow-filter/src/context/mod.rs

@@ -17,7 +17,7 @@ mod tests;
 
 pub use tables::FlowFilterContext;
 use tables::PRODUCTION_BACKEND;
-pub(crate) use tables::{LookupInput, LookupResult};
+pub(crate) use tables::{LookupInput, LookupResult, SourceGate};
 
 impl TryFrom<&ValidatedOverlay> for FlowFilterContext {
     type Error = ConfigError;