Depending on the node version, the debugger listens either on
127.0.0.1 or 0.0.0.0.
Address 0.0.0.0, a.k.a. the 'any' address, is a security liability if
TCP ports 5858 and 9229 are accessible from the internet. The latest
node v4 and v6 support `--debug=127.0.0.1:5858` syntax. Node v7 does
too but it listens on 127.0.0.1 by default (v4 and v6 listen on
0.0.0.0.)
Performance-wise --debug doesn't make a difference until the debugger
is activated. When you stop debugging, the program resumes running at
full speed again. Debugged functions are deoptimized but are
optimized again through the usual process.