[aargh_aargh]

While that's the original meaning of the acronym, it was generalized into a virtual machine, so it has come far from being able to just filter packets.

More details under "BPF kernel internals" here: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...