The scheme you propose is exactly what Whonix provides. https://www.whonix.org/wiki/Main_Page