I'll add that on a 480 with full internet routes from multiple providers, changing a policy caused it to go to 50% cpu (presumably the 480 has two cores?) for about 20 to 40 minutes, as it worked through applying the policy change and propogating it out to its peers. If the policy was again updated before this process was complete, It would end up "stuck" at 50% cpu, until reboot, or restart of bgp or peers. This 480 was serving as a reflector for several dozen peers. Typically, when it got stuck, we could disable the reflector peer group, wait until CPU dropped to normal, then re-enable the peer group, and verify after an hour or so that CPU had dropped back to normal.