I understand that the .onion address is a public key of sorts, but not much more than that (I can vaguely guess, though).

When nobody knows the IP of the .onion address, how do requests reach it? Are they bounced between nodes in the P2P network till someone decrypts it with the corresponding private key?