Chaining Anonymizing Gateways
By default, all Whonix-Workstation traffic is forced through Whonix-Gateway. Alternatively, a chain of anonymizing gateways can be built, with sample tunnel configurations outlined below.
Before attempting complex tunnel configurations, the following basic knowledge is required:
This Inspiration resource may also be useful.
## chain: Whonix-Workstation -> VPN-Gateway -> Whonix-Gateway -> clearnet ## connection scheme: user -> VPN -> Tor -> Internet
## chain: Whonix-Workstation -> Whonix-Gateway -> VPN-Gateway -> clearnet ## connection scheme: user -> Tor -> VPN -> Internet
Pre- and Post-Tor-VPN
## chain: Whonix-Workstation -> VPN-Gateway -> Whonix-Gateway -> VPN-Gateway -> Internet ## connection scheme: user -> VPN -> Tor -> VPN -> Internet
Whonix is not limited to VPN-Gateways; the VPN can be replaced with a Proxy-Gateway.
## chain: Whonix-Workstation -> Proxy-Gateway -> Whonix-Gateway -> clearnet ## connection scheme: user -> Tor -> Proxy -> Internet
Other Connection Schemes
Virtually any combination is possible: a Post-Tor-Proxy; a Pre/Post-Tor-SSH; or the proxy being replaced with JonDo or perhaps I2P.
Always remember that the connection will be created in reverse order; see the example below. 
## chain: Whonix-Workstation -> Proxy-Gateway -> Whonix-Gateway -> VPN-Gateway -> clearnet ## connection scheme: user -> VPN -> Tor -> Proxy -> Internet
Upon reflection, it becomes clear why the connection happens in reverse order:
- Whonix-Workstation has no option but to pass through the Proxy-Gateway.
- The Proxy-Gateway has no option but to pass through Whonix-Gateway.
- In this case, the last element in the chain is the VPN-Gateway, which must obviously connect via clearnet.
In other terms:
- The VPN-Gateway uses clearnet.
- Whonix-Gateway uses the VPN-Gateway to connect.
- The Proxy-Gateway uses Whonix-Gateway to connect.
- Whonix-Workstation uses the Proxy-Gateway to connect.
Since the Proxy-Gateway can only pass through Whonix-Gateway followed by the VPN-Gateway, it is clear why it will be the last hop in front of the destination server.
Whether these combinations make sense in terms of security and anonymity is hotly debated and depends on your personal threat model, see Tor plus VPN or Proxy. Advanced tunneling configurations also require knowledge of how to properly edit /etc/network/interfaces on Whonix-Gateway and/or on Whonix-Workstation. In the case of Non-Qubes-Whonix, this refers to the virtual internal network name in VirtualBox settings.
This process is generally difficult because there are no other anonymizing gateways (VPN / JonDo / I2P / Proxy / SSH / VPN) available for download in Whonix, just the Whonix-Gateway which uses Tor to anonymize traffic. This means a search for instructions is often required and/or an anonymizing gateway must be built from scratch. 
For a VPN-Gateway, see also:
- "Internet" below refers to the destination server, such as a website.
- Instructions for a pfSense based VPN-Gateway can be found with search engines, but it is untested for leaks.