We use the vyatta-cfg-cmd-wrapper to make changes to firewall rules, nat rules which gets executed via vmware vmtools vixapi as they are in virtual environment.
some times it is observed that during the adding/removing of rules the entire
rules gets removed and only the new rules are applied to the config.
but at the same time the earlier rules are seen in iptables -L in underline linux o/s
Not sure what causes this issue but we have seen this issue in vyatta wanted to know if this happen in case of vyos too.