Progress in methodologies for developing robust local area network software has not been matched by similar results for wide-area settings. In this paper, we consider the design of application software spanning multiple local area environments. For important classes of applications, simple design techniques are presented that yield fault-tolerant wide area programs. An implementation of these techniques as a set of tools for use within the ISIS system is described.