Here is the network diagram:
We used both of the CCR1036-8G-2S+ to terminate the EoIP tunnels with the 1072 routing between them. Then we connected the 1036's to our ESXi server at 10 gig each to be able to push a full 10 Gbps from end to end.
Here is a brief overview of how many TCP streams we used.
10 Gig unencrypted (9000 MTU) - Minimum of 2 to get max throughput.
7.5 Gig IPSEC encrypted (9000 MTU) - Minimum of 4 to get max throughput.
6.4 Gig unencrypted (1500 MTU) - Minimum of 10 to get max throughput.
1.7 Gig IPSEC encrypted (1500 MTU) - Minimum of 25 to get max throughput.
If you spend a lot of time tweaking the TCP buffers, window size, etc, you might be able to get it done with fewer streams. We didn't really spend much time messing with those for this test.